Export limit exceeded: 370468 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (606 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-59793 1 Jetbrains 1 Teamcity 2026-07-26 8.8 High
In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration
CVE-2026-59795 1 Jetbrains 1 Teamcity 2026-07-26 8.1 High
In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible
CVE-2026-59796 1 Jetbrains 1 Teamcity 2026-07-26 8.1 High
In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks
CVE-2026-62422 1 Jetbrains 1 Youtrack 2026-07-26 10 Critical
In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible
CVE-2026-59794 1 Jetbrains 1 Teamcity 2026-07-24 7.3 High
In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data
CVE-2026-61492 1 Jetbrains 1 Youtrack 2026-07-24 3.5 Low
In JetBrains YouTrack before 2026.2.17394 stored XSS via article titles in digest emails was possible
CVE-2026-64800 1 Jetbrains 1 Goland 2026-07-23 3.5 Low
In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default
CVE-2026-65906 1 Jetbrains 1 Teamcity 2026-07-23 8.8 High
In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible
CVE-2026-64814 1 Jetbrains 1 Intellij Idea 2026-07-23 8.6 High
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session
CVE-2026-64802 1 Jetbrains 1 Goland 2026-07-23 7.8 High
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration
CVE-2026-64806 1 Jetbrains 1 Webstorm 2026-07-23 8.4 High
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter
CVE-2026-64807 1 Jetbrains 1 Webstorm 2026-07-23 7.8 High
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration
CVE-2026-64815 1 Jetbrains 1 Intellij Idea 2026-07-23 8.1 High
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files
CVE-2026-65908 1 Jetbrains 1 Pycharm 2026-07-23 8.6 High
In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open
CVE-2026-64803 1 Jetbrains 1 Goland 2026-07-23 7.8 High
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK
CVE-2026-64804 1 Jetbrains 1 Webstorm 2026-07-23 8.4 High
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling
CVE-2026-64805 1 Jetbrains 1 Webstorm 2026-07-23 8.4 High
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling
CVE-2026-64808 1 Jetbrains 1 Phpstorm 2026-07-23 8.4 High
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling
CVE-2026-64809 1 Jetbrains 1 Phpstorm 2026-07-23 8.4 High
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter
CVE-2026-64810 1 Jetbrains 1 Intellij Idea 2026-07-23 4.3 Medium
In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking