CVE Vulnerability Database
Search and browse 424,901 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108696 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | CoreShop through 1.5.5 contains an authorization bypass vulnerability in the OrderController that allows authenticated c... |
| CVE-2026-108695 | HIGH | 7.1 | 0.3% | Oct 11, 2026 | MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accoun... |
| CVE-2026-108694 | MEDIUM | 6.5 | 0.3% | Oct 11, 2026 | ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server fil... |
| CVE-2026-108693 | HIGH | 7.8 | 0.1% | Oct 11, 2026 | ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscrip... |
| CVE-2026-108692 | MEDIUM | 6.5 | 0.2% | Oct 11, 2026 | 1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldControll... |
| CVE-2026-108691 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to de... |
| CVE-2026-108690 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | mall4j through 4.0 contains an information disclosure vulnerability that allows authenticated customers to read other sh... |
| CVE-2026-108689 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write in... |
| CVE-2026-108688 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler t... |
| CVE-2026-104841 | — | — | — | Oct 10, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-108680 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send templa... |
| CVE-2026-108679 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiCo... |
| CVE-2026-108678 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiControl... |
| CVE-2026-108677 | MEDIUM | 6.5 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-pri... |
| CVE-2026-108676 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController downLoadFiles ha... |
| CVE-2026-108675 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handle... |
| CVE-2026-108674 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController queryById handler that a... |
| CVE-2026-108673 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController exportXls handler t... |
| CVE-2026-108672 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGeneration... |
| CVE-2026-108671 | MEDIUM | 6.5 | 0.3% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP se... |
| CVE-2026-108670 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of AiragPromptsCo... |
| CVE-2026-108669 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of AiragKnowledgeC... |
| CVE-2026-108668 | MEDIUM | 5.4 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController deleteRecycleBin ha... |
| CVE-2026-108667 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to... |
| CVE-2026-108666 | MEDIUM | 5.4 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the deleteBatch handler of AiragPromptsControl... |