Export limit exceeded: 370357 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 26), (line:1, col:27)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (370357 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-86712 1 B3log 1 Siyuan 2026-09-08 8.8 High
SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the Node-enabled desktop renderer. Attackers can craft malicious web pages that write to the clipboard, and when pasted into SiYuan, injected scripts execute with full Node.js access through the Electron main process.
CVE-2026-86506 1 Jetbrains 1 Goland 2026-09-08 5.9 Medium
In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data
CVE-2026-86505 1 Jetbrains 1 Intellij Idea 2026-09-08 3.3 Low
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace
CVE-2026-86504 1 Jetbrains 1 Intellij Idea 2026-09-08 7.8 High
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution
CVE-2026-86503 1 Jetbrains 1 Intellij Idea 2026-09-08 3.3 Low
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching
CVE-2026-86502 1 Jetbrains 1 Intellij Idea 2026-09-08 8.4 High
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts
CVE-2026-86501 1 Jetbrains 1 Intellij Idea 2026-09-08 2.8 Low
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log
CVE-2026-86500 1 Jetbrains 1 Youtrack 2026-09-08 5.5 Medium
In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin
CVE-2026-86499 1 Jetbrains 1 Youtrack 2026-09-08 4.3 Medium
In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of visibility permission
CVE-2026-86498 1 Jetbrains 1 Youtrack 2026-09-08 7.7 High
In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission
CVE-2026-86497 1 Jetbrains 1 Youtrack 2026-09-08 6.8 Medium
In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administrator to exfiltrate stored mailbox credentials
CVE-2026-86496 1 Jetbrains 1 Youtrack 2026-09-08 4.3 Medium
In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses
CVE-2026-86495 1 Jetbrains 1 Youtrack 2026-09-08 6.5 Medium
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects
CVE-2026-86494 1 Jetbrains 1 Youtrack 2026-09-08 7.7 High
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues
CVE-2026-86493 1 Jetbrains 1 Youtrack 2026-09-08 6.5 Medium
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteboard cards
CVE-2026-86492 1 Jetbrains 1 Youtrack 2026-09-08 8.5 High
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens
CVE-2026-86491 1 Jetbrains 1 Youtrack 2026-09-08 3.5 Low
In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads
CVE-2026-86490 1 Jetbrains 1 Youtrack 2026-09-08 6.5 Medium
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of bundled apps via the app import endpoint
CVE-2026-86489 1 Jetbrains 1 Youtrack 2026-09-08 6.5 Medium
In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations
CVE-2026-86488 1 Jetbrains 1 Youtrack 2026-09-08 6.5 Medium
In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches