In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project...
CVE-2026-86500
In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant th
#advisory
共收录 23717 条相关情报。
← 返回所有主题In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC...
CVE-2026-86502
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code ex
In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack...
CVE-2026-86478
In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthent
In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service...
CVE-2026-86480
In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser pri
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of...
CVE-2026-86490
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of bundled apps via the app imp
In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its...
CVE-2026-86486
In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank
In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints...
CVE-2026-86488
In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved se
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of...
CVE-2026-86492
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tok
In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization...
CVE-2026-86491
In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads
In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to...
CVE-2026-86484
In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS
In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation...
CVE-2026-86479
In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restric
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...
CVE-2026-80166
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains
In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket...
CVE-2026-86485
In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...
CVE-2026-80058
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains
In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege...
CVE-2026-86482
In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation
In JetBrains YouTrack before 2026.2.18634 stored XSS via a custom field on Agile board cards was...
CVE-2026-86483
In JetBrains YouTrack before 2026.2.18634 stored XSS via a custom field on Agile board cards was possible
In JetBrains YouTrack before 2026.2.18634 a crafted WebSocket message allowed read-only...
CVE-2026-86487
In JetBrains YouTrack before 2026.2.18634 a crafted WebSocket message allowed read-only whiteboard users to modify canva
A flaw was found in GLib2. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION...
CVE-2026-86469
A flaw was found in GLib2. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION and creating the .goutpu
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...
CVE-2026-80126
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...
CVE-2026-80176
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains