CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/07/2026 |
| CVE-2026-64814 | 높음8.6 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session | 23/07/2026 |
| CVE-2026-64813 | 심각10.0 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session | 23/07/2026 |
| CVE-2026-64812 | 심각10.0 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session | 23/07/2026 |
| CVE-2026-64811 | 높음7.8 | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration | 23/07/2026 |
| CVE-2026-64810 | 보통6.1 | In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking | 23/07/2026 |
| CVE-2026-64809 | 높음8.4 | In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter | 23/07/2026 |
| CVE-2026-64808 | 높음8.4 | In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling | 23/07/2026 |
| CVE-2026-64807 | 높음7.8 | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration | 23/07/2026 |
| CVE-2026-64806 | 높음8.4 | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter | 23/07/2026 |
| CVE-2026-64805 | 높음8.4 | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling | 23/07/2026 |
| CVE-2026-64804 | 높음8.4 | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling | 23/07/2026 |
| CVE-2026-64803 | 높음7.8 | In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK | 23/07/2026 |
| CVE-2026-64802 | 높음7.8 | In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration | 23/07/2026 |
| CVE-2026-64800 | 보통5.7 | In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default | 23/07/2026 |
| CVE-2026-62422 | 심각9.8 | In JetBrains YouTrack before 2026.1.13757,
2025.3.148033,
2025.2.148048,
2025.1.148120,
2024.3.148430,
2024.2.148429 authentication bypass via direct database access leading to administrative access was possible | 14/07/2026 |
| CVE-2026-61492 | 보통6.1 | In JetBrains YouTrack before 2026.2.17394 stored XSS via article titles in digest emails was possible | 10/07/2026 |