VULNERABILITY INTELLIGENCE

CVE index

Use CVSS, EPSS, CISA KEV, affected-version data, and source evidence as separate signals for prioritization.

NVD data is used under its public data terms. This service is not endorsed or certified by NVD.

18,030 CVE recordsPage 131 of 1202

ReviewCritical

Webの相談所 Really Simple CSV Importer

Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 versions.

The CVSS severity warrants an early asset and exposure review.

ReviewCritical

MapSVG

CVE-2026-65455 affects MapSVG. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

ExpressTech Systems Quiz And Survey Master

CVE-2026-65454 affects ExpressTech Systems Quiz And Survey Master. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

RomanCode MapSVG

CVE-2026-65451 affects RomanCode MapSVG. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

RomanCode MapSVG

CVE-2026-65450 affects RomanCode MapSVG. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewCritical

JetBrains IntelliJ IDEA, intellij idea

In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

JetBrains IntelliJ IDEA, intellij idea

In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session

The CVSS severity warrants an early asset and exposure review.

ReviewCritical

JetBrains IntelliJ IDEA, intellij idea

In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session

The CVSS severity warrants an early asset and exposure review.

ReviewCritical

JetBrains IntelliJ IDEA, intellij idea

In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

JetBrains IntelliJ IDEA, intellij idea

In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

JetBrains PhpStorm, phpstorm

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

JetBrains PhpStorm, phpstorm

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

JetBrains WebStorm, webstorm

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

JetBrains WebStorm, webstorm

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

JetBrains WebStorm, webstorm

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling

The CVSS severity warrants an early asset and exposure review.