Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 449 respecto a la semana anterior
Críticas / altas1325▼ 128 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)268▼ 240 respecto a la semana anterior
–

693 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaCrítica (9.8)0.52%—Jetbrains HUB19/6/202626/6/2026
In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictable restore codes was possible
AnalizadaAlta (8.8)0.45%—Jetbrains Goland19/6/202626/6/2026
In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration
AnalizadaCrítica (9.8)0.61%—Jetbrains HUB19/6/202626/6/2026
In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible
AnalizadaMedia (6.5)0.34%—Jetbrains Youtrack29/5/202622/7/2026
In JetBrains YouTrack before 2026.1.13570 improper access control allowed enumeration of restricted issues and articles on Planning Canvas
AnalizadaMedia (6.5)0.30%—Jetbrains Youtrack29/5/202622/7/2026
In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to modify service accounts
AnalizadaMedia (6.1)0.25%—Jetbrains Pycharm29/5/202622/7/2026
In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible
AnalizadaBaja (3.3)0.14%—Jetbrains Intellij Idea29/5/202622/7/2026
In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible
AnalizadaAlta (7.8)0.18%—Jetbrains Intellij Idea29/5/202622/7/2026
In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin
AnalizadaMedia (4.8)0.29%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
AnalizadaMedia (6.1)0.23%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible
AnalizadaMedia (6.5)0.34%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names
AnalizadaMedia (4.3)0.29%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion
AnalizadaMedia (4.3)0.92%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters
AnalizadaMedia (6.5)0.29%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin
AnalizadaMedia (6.1)0.30%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page
AnalizadaAlta (7.6)0.31%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters
AnalizadaAlta (8.8)0.60%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings
AnalizadaAlta (7.5)0.39%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible
AnalizadaAlta (8.2)0.35%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible
AnalizadaAlta (7.5)0.33%—Jetbrains Youtrack29/5/202622/7/2026
In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests
AnalizadaMedia (4.3)0.27%—Jetbrains Youtrack29/5/202622/7/2026
In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pages
AnalizadaMedia (5.4)0.27%—Jetbrains Youtrack29/5/202622/7/2026
In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible
AnalizadaAlta (8.8)0.51%—Jetbrains Intellij Idea29/5/202622/7/2026
In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account
AnalizadaAlta (7.8)0.68%—Jetbrains Intellij Idea29/5/202622/7/2026
In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion
AnalizadaAlta (7.5)0.34%—Jetbrains Teamcity11/5/202617/6/2026
In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access
Orbitaley — Vulnerabilidades