knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project...
CVE-2026-86540
knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, a
2026-09-08 归档
今日共收录 1006 条安全情报，包含 268 个 CVE，456 篇安全通告，以及 21 篇研究论文。
← 返回归档列表Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload...
CVE-2026-86436
Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing aut
Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint...
CVE-2026-86437
Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edi
Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that...
CVE-2026-16028
Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes
Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non...
CVE-2026-86287
Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths ar
In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication...
CVE-2026-86497
In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administra
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to...
CVE-2026-86493
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteb
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via...
CVE-2026-86503
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source UR
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log
CVE-2026-86501
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to...
CVE-2026-86505
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace
In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources...
CVE-2026-86498
In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked
In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters...
CVE-2026-86496
In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email
In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any...
CVE-2026-86499
In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of vis
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a...
CVE-2026-86504
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed ho
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to...
CVE-2026-86494
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible iss
In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected...
CVE-2026-86506
In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed prof
In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project...
CVE-2026-86500
In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant th
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC...
CVE-2026-86502
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code ex
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of...
CVE-2026-86490
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of bundled apps via the app imp
In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its...
CVE-2026-86486
In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank