Vulnerabilities (CVE)

Filtered by vendor Jetbrains Subscribe
Total 359 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-15826 1 Jetbrains 1 Teamcity 2021-07-21 4.0 MEDIUM 4.3 MEDIUM
In JetBrains TeamCity before 2020.1, users are able to assign more permissions than they have.
CVE-2019-15035 1 Jetbrains 1 Teamcity 2021-07-21 4.0 MEDIUM 4.9 MEDIUM
An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could get access to potentially confidential server-level data. The issue was fixed in TeamCity 2018.2.5 and 2019.1.
CVE-2020-15818 1 Jetbrains 1 Youtrack 2021-07-21 5.0 MEDIUM 5.3 MEDIUM
In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence.
CVE-2020-15825 1 Jetbrains 1 Teamcity 2021-07-21 6.5 MEDIUM 8.8 HIGH
In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges.
CVE-2019-14954 1 Jetbrains 1 Intellij Idea 2021-07-21 4.3 MEDIUM 5.9 MEDIUM
JetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link via a cleartext http connection.
CVE-2020-7905 1 Jetbrains 1 Intellij Idea 2021-07-21 5.0 MEDIUM 7.5 HIGH
Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network.
CVE-2020-15820 1 Jetbrains 1 Youtrack 2021-07-21 5.0 MEDIUM 5.3 MEDIUM
In JetBrains YouTrack before 2020.2.6881, the markdown parser could disclose hidden file existence.
CVE-2019-19704 1 Jetbrains 1 Upsource 2021-07-21 5.0 MEDIUM 7.5 HIGH
In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm.
CVE-2020-11691 1 Jetbrains 1 Hub 2021-07-21 5.0 MEDIUM 7.5 HIGH
In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible.
CVE-2019-16407 1 Jetbrains 1 Resharper 2021-07-21 4.4 MEDIUM 7.3 HIGH
JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability.
CVE-2019-18362 1 Jetbrains 1 Mps 2021-07-21 5.0 MEDIUM 5.3 MEDIUM
JetBrains MPS before 2019.2.2 exposed listening ports to the network.
CVE-2019-14959 1 Jetbrains 1 Toolbox 2021-07-21 4.3 MEDIUM 5.9 MEDIUM
JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection.
CVE-2020-7914 1 Jetbrains 1 Intellij Idea 2021-07-21 5.0 MEDIUM 7.5 HIGH
In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3.
CVE-2020-11693 1 Jetbrains 1 Youtrack 2021-07-21 5.0 MEDIUM 7.5 HIGH
JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue.
CVE-2021-30482 1 Jetbrains 1 Upsource 2021-05-20 5.0 MEDIUM 7.5 HIGH
In JetBrains UpSource before 2020.1.1883, application passwords were not revoked correctly
CVE-2021-31897 1 Jetbrains 1 Webstorm 2021-05-19 7.5 HIGH 9.8 CRITICAL
In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects.
CVE-2021-26309 1 Jetbrains 1 Teamcity 2021-05-19 2.1 LOW 3.3 LOW
Information disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible because a local temporary file had Insecure Permissions.
CVE-2021-26310 1 Jetbrains 1 Teamcity 2021-05-19 5.0 MEDIUM 7.5 HIGH
In the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS was possible.
CVE-2021-31900 1 Jetbrains 1 Code With Me 2021-05-18 5.0 MEDIUM 5.3 MEDIUM
In JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could open a browser on a host.
CVE-2021-31899 1 Jetbrains 1 Code With Me 2021-05-18 6.5 MEDIUM 8.8 HIGH
In JetBrains Code With Me bundled to the compatible IDEs before version 2021.1, the client could execute code in read-only mode.