Search

Expected end of text, found ':' (at char 26), (line:1, col:27)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (354410 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-49378 1 Jetbrains 1 Teamcity 2026-05-29 4.3 Medium
In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion
CVE-2018-25382 2 Bylancer, Zechat Project 2 Zechat, Zechat 2026-05-29 8.2 High
Zechat 1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the uname parameter. Attackers can send crafted requests to profile.php with UNION-based SQL injection payloads to retrieve table names, column names, and sensitive data from the information_schema database.
CVE-2026-49380 1 Jetbrains 1 Teamcity 2026-05-29 3.1 Low
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible
CVE-2026-49383 1 Jetbrains 1 Intellij Idea 2026-05-29 3.3 Low
In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible
CVE-2026-49384 1 Jetbrains 1 Pycharm 2026-05-29 6.1 Medium
In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible
CVE-2026-49386 1 Jetbrains 1 Youtrack 2026-05-29 6.5 Medium
In JetBrains YouTrack before 2026.1.13570 improper access control allowed enumeration of restricted issues and articles on Planning Canvas
CVE-2026-49382 1 Jetbrains 1 Intellij Idea 2026-05-29 4.5 Medium
In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin
CVE-2026-49373 1 Jetbrains 1 Teamcity 2026-05-29 7.1 High
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings
CVE-2026-49370 1 Jetbrains 1 Youtrack 2026-05-29 3.4 Low
In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests
CVE-2026-49368 1 Jetbrains 1 Youtrack 2026-05-29 8.7 High
In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible
CVE-2026-49366 1 Jetbrains 1 Intellij Idea 2026-05-29 7.8 High
In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion
CVE-2026-49381 1 Jetbrains 1 Teamcity 2026-05-29 3.4 Low
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
CVE-2026-49374 1 Jetbrains 1 Teamcity 2026-05-29 7.6 High
In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters
CVE-2026-49367 1 Jetbrains 1 Intellij Idea 2026-05-29 8 High
In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account
CVE-2026-49369 1 Jetbrains 1 Youtrack 2026-05-29 4.3 Medium
In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pages
CVE-2026-49372 1 Jetbrains 1 Teamcity 2026-05-29 7.5 High
In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible
CVE-2026-49376 1 Jetbrains 1 Teamcity 2026-05-29 6.5 Medium
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin
CVE-2026-49385 1 Jetbrains 1 Youtrack 2026-05-29 6.5 Medium
In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to modify service accounts
CVE-2021-4019 5 Debian, Fedoraproject, Neovim and 2 more 5 Debian Linux, Fedora, Neovim and 2 more 2026-05-29 7.8 High
vim is vulnerable to Heap-based Buffer Overflow
CVE-2026-23265 1 Linux 1 Linux Kernel 2026-05-29 5.5 Medium
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer in {read,write}_end_io -----------[ cut here ]------------ kernel BUG at fs/f2fs/data.c:358! Call Trace: <IRQ> blk_update_request+0x5eb/0xe70 block/blk-mq.c:987 blk_mq_end_request+0x3e/0x70 block/blk-mq.c:1149 blk_complete_reqs block/blk-mq.c:1224 [inline] blk_done_softirq+0x107/0x160 block/blk-mq.c:1229 handle_softirqs+0x283/0x870 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] invoke_softirq kernel/softirq.c:453 [inline] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:680 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1050 </IRQ> In f2fs_write_end_io(), it detects there is inconsistency in between node page index (nid) and footer.nid of node page. If footer of node page is corrupted in fuzzed image, then we load corrupted node page w/ async method, e.g. f2fs_ra_node_pages() or f2fs_ra_node_page(), in where we won't do sanity check on node footer, once node page becomes dirty, we will encounter this bug after node page writeback.