CVE Vulnerability Database
Search and browse 424,847 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108903 | MEDIUM | 5.3 | 0.3% | Oct 11, 2026 | pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated att... |
| CVE-2026-108902 | HIGH | 8.1 | 0.4% | Oct 11, 2026 | pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePho... |
| CVE-2026-108891 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId ha... |
| CVE-2026-108888 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXls handler ... |
| CVE-2026-108887 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls handler tha... |
| CVE-2026-108886 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController queryChildrenByUsername ... |
| CVE-2026-108885 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that a... |
| CVE-2026-108884 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handle... |
| CVE-2026-108883 | MEDIUM | 6.5 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any... |
| CVE-2026-108882 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController removeUserPosition h... |
| CVE-2026-108881 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getTenantPackInfo handler that allows any ... |
| CVE-2026-108880 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict/editDictByLowAppId endpoint ... |
| CVE-2026-108879 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController that allows... |
| CVE-2026-108878 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that ... |
| CVE-2026-108877 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in AiragPromptsController that allows any authent... |
| CVE-2026-108876 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController... |
| CVE-2026-108875 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGroup handler ... |
| CVE-2026-108874 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or r... |
| CVE-2026-108873 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to... |
| CVE-2026-108872 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler of SysUserControlle... |
| CVE-2026-108871 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartRoleContr... |
| CVE-2026-108870 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule handler tha... |
| CVE-2026-108869 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to... |
| CVE-2026-108868 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to publish tem... |
| CVE-2026-108867 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController getUserRoleSetById han... |