CVE Vulnerability Database
Search and browse 424,925 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108664 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController queryById handler t... |
| CVE-2026-108663 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply handler th... |
| CVE-2026-108662 | MEDIUM | 5.4 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to... |
| CVE-2026-108661 | MEDIUM | 6.5 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to transfer te... |
| CVE-2026-108660 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tena... |
| CVE-2026-108659 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId... |
| CVE-2026-108658 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo ha... |
| CVE-2026-108657 | HIGH | 8.1 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that... |
| CVE-2026-108656 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTen... |
| CVE-2026-108655 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the QuartzJobController queryById handler that... |
| CVE-2026-108654 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OssFileController queryById handler that a... |
| CVE-2026-108653 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryPageList handler of OpenApiController... |
| CVE-2026-108652 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController updateAvatar handler t... |
| CVE-2026-108651 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiContr... |
| CVE-2026-108650 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiC... |
| CVE-2026-108649 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of SystemApiCon... |
| CVE-2026-108648 | MEDIUM | 6.5 | 0.3% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endp... |
| CVE-2026-108647 | MEDIUM | 4.3 | 0.3% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to... |
| CVE-2026-108646 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController importExcel handler ... |
| CVE-2026-108645 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysCategoryController that allows any authenti... |
| CVE-2026-108644 | MEDIUM | 5.4 | 0.3% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController delete handler that ... |
| CVE-2026-108643 | MEDIUM | 5.4 | 0.3% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to... |
| CVE-2026-108642 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysAnnouncementSendController that allows auth... |
| CVE-2026-108641 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to re... |
| CVE-2026-108640 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController queryById handler ... |