CVE Vulnerability Database
Search and browse 424,925 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108614 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController exportXls handler t... |
| CVE-2026-108613 | MEDIUM | 5.4 | 0.3% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that al... |
| CVE-2026-108612 | MEDIUM | 5.4 | 0.3% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch han... |
| CVE-2026-108611 | MEDIUM | 5.4 | 0.3% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler ... |
| CVE-2026-108610 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit handler th... |
| CVE-2026-108609 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to re... |
| CVE-2026-108608 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to de... |
| CVE-2026-108607 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to de... |
| CVE-2026-108606 | MEDIUM | 5.4 | 0.3% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that al... |
| CVE-2026-108605 | MEDIUM | 4.3 | 0.2% | Oct 10, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that al... |
| CVE-2026-97853 | MEDIUM | 6.9 | 0.1% | Oct 10, 2026 | Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 b... |
| CVE-2026-81797 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions. |
| CVE-2026-78535 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions. |
| CVE-2026-78534 | HIGH | 7.1 | 0.1% | Oct 10, 2026 | Unauthenticated Cross Site Scripting (XSS) in Educavo <= 3.4.2 versions. |
| CVE-2026-78533 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions. |
| CVE-2026-78532 | HIGH | 7.1 | 0.1% | Oct 10, 2026 | Unauthenticated Cross Site Scripting (XSS) in LMS <= 8.3 versions. |
| CVE-2026-78531 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions. |
| CVE-2026-78530 | HIGH | 7.7 | 0.4% | Oct 10, 2026 | Subscriber Arbitrary File Deletion in FoodBakery <= 4.6 versions. |
| CVE-2026-78529 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in Alliance <= 3.11 versions. |
| CVE-2026-66569 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions. |
| CVE-2026-66568 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in Original <= 1.9.0 versions. |
| CVE-2026-66567 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions. |
| CVE-2026-66566 | HIGH | 8.1 | 0.3% | Oct 10, 2026 | Unauthenticated Local File Inclusion in Ambient <= 1.7 versions. |
| CVE-2026-66565 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions. |
| CVE-2026-66564 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions. |