Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
5.3 MEDIUM
CVE-2026-124568 — fushengqian fuintCatering Refund Agreement RefundServiceImpl.agreeRefund access control

A vulnerability has been found in fushengqian fuintCatering up to 6d054f5788ac8645eb491f79242bb8a625efc133. Impacted is the function RefundServiceImpl.agreeRefund of the component Refund Agreement. T…

fuintcatering | Remote | Authorization
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.3 MEDIUM
CVE-2026-124567 — fushengqian fuint ClientOrderController.java receipt state issue

A flaw has been found in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f. This issue affects the function receipt of the file ClientOrderController.java. Executing a manipulation can…

fuint | Remote | Information Disclosure
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.3 MEDIUM
CVE-2026-124566 — fushengqian fuint Alipay Callback ClientPayController.java aliPayCallback behavioral work…

A vulnerability was detected in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f. This vulnerability affects the function aliPayCallback of the file ClientPayController.java of the co…

fuint | Remote | Authentication
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.3 MEDIUM
CVE-2026-124565 — fushengqian fuint Order Verification MerchantOrderController.java confirm access control

A security vulnerability has been detected in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f. This affects the function confirm of the file MerchantOrderController.java of the compo…

fuint | Remote | Authorization
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
9.3 CRITICAL
CVE-2026-113364 — NEC WebSAM WinShare Buffer Overflow

Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to ex…

Remote | Memory Corruption
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
9.3 CRITICAL
CVE-2026-113363 — NEC WebSAM WinShare Remote Code Execution Vulnerability

Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthen…

Remote | Injection
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.5 MEDIUM
CVE-2026-124564 — D-Link DIR-878 HNAP prog.cgi GetListDirectory path traversal

A weakness has been identified in D-Link DIR-878 1.20B05. Affected by this issue is the function GetListDirectory of the file bin/prog.cgi of the component HNAP Handler. This manipulation of the argu…

dir-878 | Remote | Path Traversal
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
7.8 HIGH
CVE-2026-124563 — D-Link DIR-878 HNAP SetWanSettings buffer overflow

A security flaw has been discovered in D-Link DIR-878 1.20B05. Affected by this vulnerability is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument Primary/Se…

dir-878 | Remote | Memory Corruption
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
7.8 HIGH
CVE-2026-124562 — D-Link DIR-878 HNAP SetWanSettings buffer overflow

A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary…

dir-878 | Remote | Memory Corruption
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
7.8 HIGH
CVE-2026-124561 — D-Link DIR-878 HNAP prog.cgi SetVLANSettings stack-based overflow

A vulnerability was determined in D-Link DIR-878 1.20B05. This impacts the function SetVLANSettings of the file prog.cgi of the component HNAP Handler. Executing a manipulation of the argument VID ca…

dir-878 | Remote | Memory Corruption
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
8.5 HIGH
CVE-2026-113362 — NEC WebSAM Winshare Improper Access Control Vulnerability

Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier (excluding Ver 7.3.3), Ver 7.6.0 and Ver 7.7.0 through 7.7.1 on Windows allows a lo…

| Authorization
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
10.0 HIGH
CVE-2026-124560 — D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflow

A vulnerability was found in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of the component HNAP Handler. Performing a manipulation of the argument uid …

dir-878 | Remote | Memory Corruption
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
7.5 HIGH
CVE-2026-124558 — DataLinkDC Dinky sql-gateway Endpoint SqlGateway.java SqlGateway.onOpen server-side reque…

A vulnerability has been found in DataLinkDC Dinky up to 1.2.5. The impacted element is the function SqlGateway.onOpen of the file SqlGateway.java of the component sql-gateway Endpoint. Such manipula…

dinky | Remote | Server-Side Request Forgery
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
7.5 HIGH
CVE-2026-124557 — OtterMind Chat2DB Class Generator DbMybatisGenerateServiceImpl.java DbMybatisGenerateServ…

A vulnerability was detected in OtterMind Chat2DB up to 5.3.8. Impacted is the function DbMybatisGenerateServiceImpl.generateClass of the file DbMybatisGenerateServiceImpl.java of the component Class…

chat2db | Remote | Path Traversal
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.0 MEDIUM
CVE-2026-124556 — kekingcn kkFileView BaseUrlFilter.java BaseUrlFilter.getBaseUrl redirect

A security vulnerability has been detected in kekingcn kkFileView up to 5.0.3. This issue affects the function BaseUrlFilter.getBaseUrl of the file server/src/main/java/cn/keking/web/filter/BaseUrlFi…

kkfileview | Remote | Misconfiguration
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
6.1 MEDIUM
CVE-2026-121825 — Open redirect in the Liberty ID-FF service provider single sign-on flow

OpenAM (OpenAM Consortium Edition) 14.0.5 and earlier contains an open redirect vulnerability (CWE-601) in the Liberty ID-FF service provider single sign-on flow. The goto parameter of the /preLogin …

Remote | Misconfiguration
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
6.5 MEDIUM
CVE-2026-124555 — JeecgBoot Table Dictionary API getTableDictList JimuFormApiService.getTableDictList sql i…

A weakness has been identified in JeecgBoot 3.9.5. This vulnerability affects the function JimuFormApiService.getTableDictList of the file /jeecg-boot/jmreport/form/getTableDictList of the component …

jeecgboot | Remote | Injection
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
7.5 HIGH
CVE-2026-124554 — JeecgBoot JimuBI getAllChartData sql injection

A security flaw has been discovered in JeecgBoot 3.9.5. This affects an unknown part of the file /jeecg-boot/drag/onlDragDatasetHead/getAllChartData of the component JimuBI. Performing a manipulation…

jeecgboot | Remote | Injection
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
7.5 HIGH
CVE-2026-124509 — floci-io Floci S3 Destination Configuration DeliveryStreamDescription.java S3Destination.…

A vulnerability was identified in floci-io Floci up to 2.1.0. The affected element is the function S3Destination.bucketName of the file services/firehose/model/DeliveryStreamDescription.java of the c…

floci | Remote | Path Traversal
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.5 MEDIUM
CVE-2026-124508 — floci-io Floci Artifact CodeBuildJsonHandler.java BuildspecParser.parseArtifacts path tra…

A vulnerability was determined in floci-io Floci up to 2.4.0. Impacted is the function BuildspecParser.parseArtifacts of the file src/main/java/io/github/hectorvent/floci/services/codebuild/CodeBuild…

floci | Remote | Path Traversal
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
Showing 20 of 16941 Results