📦 Intellij Idea

This vulnerability in JetBrains IDEs exposes GitHub access tokens to third-party websites, potentially allowing attackers to steal credentials and access private repositories. It affects users of JetB...

This vulnerability in JetBrains IDEs used as Remote Development backends causes them to bind to all network interfaces (0.0.0.0) instead of localhost only, exposing development environments to unautho...

This vulnerability in JetBrains IntelliJ IDEA allows local code execution without user permission when opening a project. Attackers could execute arbitrary code on the system by tricking users into op...

This vulnerability in JetBrains IntelliJ IDEA allows local code execution due to insufficient validation when retrieving projects from version control systems (VCS). Attackers could exploit this to ex...

This CVE describes an XML External Entity (XXE) vulnerability in IntelliJ IDEA that allows attackers to read arbitrary files from the system. It affects users running IntelliJ IDEA versions before 202...

This vulnerability in JetBrains IntelliJ IDEA allows local code execution through insecure deserialization of workspace models. Attackers could exploit this to run arbitrary code on systems running vu...

This vulnerability in JetBrains IntelliJ IDEA allows attackers to trick users into opening untrusted remote projects over SSH without proper confirmation dialogs. It affects developers using IntelliJ ...

This vulnerability in JetBrains IntelliJ IDEA allows attackers to potentially access sensitive credentials through remote references. It affects users running IntelliJ IDEA versions before 2025.2 who ...

This vulnerability in JetBrains IntelliJ IDEA allows Code With Me guests to discover hidden files on the host system due to improper access control. It affects developers using IntelliJ IDEA's collabo...

This vulnerability in JetBrains IntelliJ IDEA allows unexpected plugin startup due to automatic Language Server Protocol (LSP) server activation, potentially enabling malicious plugins to execute code...

This vulnerability allows HTML injection through JetBrains IntelliJ IDEA's Remote Development feature, enabling attackers to inject malicious HTML content that could lead to cross-site scripting (XSS)...

This vulnerability allows attackers to obtain NTLM password hashes through the built-in web server API in JetBrains IntelliJ IDEA. It affects users running vulnerable versions of IntelliJ IDEA who hav...

This vulnerability in JetBrains IntelliJ IDEA allows Gradle and Maven projects to be imported without requiring the 'Trust Project' confirmation dialog. This affects users of IntelliJ IDEA versions be...