CVE Vulnerability Database
Search and browse 424,817 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108886 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController queryChildrenByUsername ... |
| CVE-2026-108885 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that a... |
| CVE-2026-108884 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handle... |
| CVE-2026-108883 | MEDIUM | 6.5 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any... |
| CVE-2026-108882 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController removeUserPosition h... |
| CVE-2026-108881 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getTenantPackInfo handler that allows any ... |
| CVE-2026-108880 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict/editDictByLowAppId endpoint ... |
| CVE-2026-108879 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController that allows... |
| CVE-2026-108878 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that ... |
| CVE-2026-108877 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in AiragPromptsController that allows any authent... |
| CVE-2026-108876 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController... |
| CVE-2026-108875 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGroup handler ... |
| CVE-2026-108874 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or r... |
| CVE-2026-108873 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to... |
| CVE-2026-108872 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler of SysUserControlle... |
| CVE-2026-108871 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartRoleContr... |
| CVE-2026-108870 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule handler tha... |
| CVE-2026-108869 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to... |
| CVE-2026-108868 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to publish tem... |
| CVE-2026-108867 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController getUserRoleSetById han... |
| CVE-2026-108866 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated users to read any accou... |
| CVE-2026-108684 | MEDIUM | 6.3 | 0.3% | Oct 11, 2026 | A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/... |
| CVE-2026-108683 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function... |
| CVE-2026-108682 | MEDIUM | 5.4 | 0.4% | Oct 11, 2026 | A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /... |
| CVE-2026-108865 | HIGH | 8.2 | 0.3% | Oct 11, 2026 | AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obt... |