|
291
|
6.5 |
MEDIUM
Network
|
-
|
-
|
In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names
New
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2026-49379
|
2026-05-30 05:11 |
2026-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292
|
3.1 |
LOW
Network
|
-
|
-
|
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible
New
|
CWE-601
Open Redirect
|
CVE-2026-49380
|
2026-05-30 05:11 |
2026-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293
|
3.4 |
LOW
Network
|
-
|
-
|
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
New
|
CWE-79
Cross-site Scripting
|
CVE-2026-49381
|
2026-05-30 05:11 |
2026-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294
|
4.5 |
MEDIUM
Local
|
-
|
-
|
In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin
New
|
CWE-1336
Improper Neutralization of Special Elements Used in a Template Engine
|
CVE-2026-49382
|
2026-05-30 05:11 |
2026-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295
|
3.3 |
LOW
Local
|
-
|
-
|
In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible
New
|
CWE-611
XXE
|
CVE-2026-49383
|
2026-05-30 05:11 |
2026-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296
|
6.1 |
MEDIUM
Network
|
-
|
-
|
In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible
New
|
CWE-79
Cross-site Scripting
|
CVE-2026-49384
|
2026-05-30 05:11 |
2026-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297
|
6.5 |
MEDIUM
Network
|
-
|
-
|
In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to modify service accounts
New
|
CWE-862
Missing Authorization
|
CVE-2026-49385
|
2026-05-30 05:11 |
2026-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298
|
6.5 |
MEDIUM
Network
|
-
|
-
|
In JetBrains YouTrack before 2026.1.13570 improper access control allowed enumeration of restricted issues and articles on Planning Canvas
New
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2026-49386
|
2026-05-30 05:11 |
2026-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299
|
9.8 |
CRITICAL
Network
|
deltaww
|
diaview
|
There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access)
An unauthenticated remote attacker can access configured databases in a DIAView project.
Update
|
CWE-321
Use of Hard-coded Cryptographic Key
|
CVE-2026-9642
|
2026-05-30 04:53 |
2026-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
300
|
7.5 |
HIGH
Network
|
microsoft
|
planetary_computer
|
Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose information over a network.
Update
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2026-41104
|
2026-05-30 04:46 |
2026-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|