CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| CVE-2026-100271 |
| 低2.7 |
In JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed authenticated users to access information from other projects |
| 30/09/2026 |
| CVE-2026-100270 | 低2.7 | In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configurations | 30/09/2026 |
| CVE-2026-100269 | 中4.3 | In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypassed | 30/09/2026 |
| CVE-2026-100268 | 低2.7 | In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates | 30/09/2026 |
| CVE-2026-100267 | 中5.9 | In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filters | 30/09/2026 |
| CVE-2026-100266 | 中6.5 | In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address | 30/09/2026 |
| CVE-2026-100265 | 中6.5 | In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation | 30/09/2026 |
| CVE-2026-100264 | 低2.7 | In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host | 30/09/2026 |
| CVE-2026-100263 | 中6.1 | In JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was possible | 30/09/2026 |
| CVE-2026-100262 | 高7.1 | In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates | 30/09/2026 |
| CVE-2026-100261 | 中5.4 | In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permission | 30/09/2026 |
| CVE-2026-100260 | 中5.3 | In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset | 30/09/2026 |
| CVE-2026-100259 | 中4.3 | In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access | 30/09/2026 |
| CVE-2026-100258 | 中4.3 | In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings | 30/09/2026 |
| CVE-2026-100257 | 中4.3 | In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export | 30/09/2026 |
| CVE-2026-100256 | 高7.8 | In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects | 30/09/2026 |