Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
0.0 NA
CVE-2026-124555 — JeecgBoot Table Dictionary API getTableDictList JimuFormApiService.getTableDictList sql i…

A weakness has been identified in JeecgBoot 3.9.5. This vulnerability affects the function JimuFormApiService.getTableDictList of the file /jeecg-boot/jmreport/form/getTableDictList of the component …

| Injection
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
0.0 NA
CVE-2026-124554 — JeecgBoot JimuBI getAllChartData sql injection

A security flaw has been discovered in JeecgBoot 3.9.5. This affects an unknown part of the file /jeecg-boot/drag/onlDragDatasetHead/getAllChartData of the component JimuBI. Performing a manipulation…

jeecgboot | Injection
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
0.0 NA
CVE-2026-124509 — floci-io Floci S3 Destination Configuration DeliveryStreamDescription.java S3Destination.…

A vulnerability was identified in floci-io Floci up to 2.1.0. The affected element is the function S3Destination.bucketName of the file services/firehose/model/DeliveryStreamDescription.java of the c…

floci | Path Traversal
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.5 MEDIUM
CVE-2026-124507 — conductor-oss conductor PLANNER_CONTEXT_FETCH Task PlannerContextFetchTask.java WorkflowS…

A vulnerability was found in conductor-oss conductor up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0-alpha.1. This issue affects the function WorkflowSystemTask.start of the file PlannerContextFetchTask.java of…

conductor | Remote | Server-Side Request Forgery
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.0 MEDIUM
CVE-2026-124506 — Dianping CAT Report hourlyReport.tag Model.getDomain cross site scripting

A vulnerability has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This vulnerability affects the function Model.getDomain of the file WEB-INF/tags/hourlyReport.tag of the component Report Handler. …

cat | Remote | Cross-Site Scripting
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.0 MEDIUM
CVE-2026-124505 — Dianping CAT Login/Logout Handler.java Handler.redirect

A flaw has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This affects the function Handler.redirect of the file Handler.java of the component Login/Logout. Executing a manipulation of the argument …

cat | Remote | Misconfiguration
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
6.5 MEDIUM
CVE-2026-124504 — erupts erupt ReportService.java ReportService.queryBiData sql injection

A vulnerability was detected in erupts erupt up to 2.3.0. Affected by this issue is the function ReportService.queryBiData of the file ReportService.java. Performing a manipulation of the argument so…

erupt | Remote | Injection
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
9.1 CRITICAL
CVE-2026-119506 — WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerabil…

Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a…

frontend_admin | Remote | Authorization
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
0.0 NA
CVE-2026-124508 — floci-io Floci Artifact CodeBuildJsonHandler.java BuildspecParser.parseArtifacts path tra…

A vulnerability was determined in floci-io Floci up to 2.4.0. Impacted is the function BuildspecParser.parseArtifacts of the file src/main/java/io/github/hectorvent/floci/services/codebuild/CodeBuild…

floci | Path Traversal
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
4.3 MEDIUM
CVE-2026-124502 — yungifez Skuul School Management System Delete GraduationController.php resetGraduation a…

A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.3. Affected by this vulnerability is the function GraduationController::resetGraduation of the file app…

skuul_school_management_system | Remote | Authorization
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
7.5 HIGH
CVE-2026-124501 — Tidelift moto AWS Batch Emulation models.py privileges management

A weakness has been identified in Tidelift moto up to 5.2.4. Affected is an unknown function of the file moto/batch/models.py of the component AWS Batch Emulation. This manipulation of the argument p…

moto | Remote | Misconfiguration
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
6.5 MEDIUM
CVE-2026-124500 — Fengoffice Feng Office File FilesController.class.php upload_document_image server-side r…

A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This impacts the function upload_document_image of the file application/controllers/FilesController.class.php o…

feng_office | Remote | Server-Side Request Forgery
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.8 MEDIUM
CVE-2026-124499 — Fengoffice Feng Office Translation Tool ToolController.class.php write_translations code …

A vulnerability was identified in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This affects the function write_translations of the file application/controllers/ToolController.class.php of the com…

feng_office | Remote | Injection
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
4.0 MEDIUM
CVE-2026-124498 — Convene Azeus Convene Board Management Portal dummy_launcher.jsp cross site scripting

A vulnerability was determined in Convene Azeus Convene Board Management Portal 7.0.2.7_3 p72. The impacted element is an unknown function of the file /jsp/ge/dummy_launcher.jsp. Executing a manipula…

azeus_convene_board_management_portal | Remote | Cross-Site Scripting
Nov 08, 2026 Nov 08, 2026
Nov 08, 2026
Nov 08, 2026
7.5 HIGH
CVE-2026-96146 — Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management

IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

sevone_network_performance_management | Remote | Denial of Service
Nov 08, 2026 Nov 08, 2026
Nov 08, 2026
Nov 08, 2026
6.7 MEDIUM
CVE-2026-95867 — Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management

IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow.

Nov 08, 2026 Nov 08, 2026
Nov 08, 2026
Nov 08, 2026
6.5 MEDIUM
CVE-2026-17427 — This Power System update is being released to address

IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service …

Nov 08, 2026 Nov 08, 2026
Nov 08, 2026
Nov 08, 2026
6.5 MEDIUM
CVE-2026-17426 — This Power System update is being released to address

IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception.

openbmc | Denial of Service
Nov 08, 2026 Nov 08, 2026
Nov 08, 2026
Nov 08, 2026
6.5 MEDIUM
CVE-2026-16697 — This Power System update is being released to address

IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and  OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service…

Nov 08, 2026 Nov 08, 2026
Nov 08, 2026
Nov 08, 2026
6.5 MEDIUM
CVE-2026-16682 — This Power System update is being released to address

IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 c…

Nov 08, 2026 Nov 08, 2026
Nov 08, 2026
Nov 08, 2026
Showing 20 of 16942 Results