Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
6.5 MEDIUM
CVE-2026-108777 — erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection

A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. The manipu…

jeewms | Remote | Injection
Oct 12, 2026 Oct 15, 2026
Oct 12, 2026
Oct 15, 2026
6.5 MEDIUM
CVE-2026-108775 — erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql inj…

A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java o…

jeewms | Remote | Injection
Oct 12, 2026 Oct 13, 2026
Oct 12, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-108774 — erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection

A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Ex…

jeewms | Remote | Injection
Oct 12, 2026 Oct 14, 2026
Oct 12, 2026
Oct 14, 2026
6.5 MEDIUM
CVE-2026-108773 — erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection

A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a man…

jeewms | Remote | Injection
Oct 11, 2026 Oct 13, 2026
Oct 11, 2026
Oct 13, 2026
5.5 MEDIUM
CVE-2026-108772 — bleenco abstruse Cache Endpoint download_cache.go filepath.Join path traversal

A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go of the component Cache Endpoi…

abstruse | Remote | Path Traversal
Oct 11, 2026 Oct 15, 2026
Oct 11, 2026
Oct 15, 2026
6.9 MEDIUM
CVE-2026-108770 — Appwrite Browser Screenshot Service Get.php PublicHostname server-side request forgery

A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the compon…

appwrite | Remote | Server-Side Request Forgery
Oct 11, 2026 Oct 13, 2026
Oct 11, 2026
Oct 13, 2026
5.5 MEDIUM
CVE-2026-108978 — Samsung rlottie Heap-based Buffer Overflow

Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9.

| Memory Corruption
Oct 11, 2026 Oct 16, 2026
Oct 11, 2026
Oct 16, 2026
4.3 MEDIUM
CVE-2026-108769 — zhayujie CowAgent Markdown Rendering Markdown.tsx denial of service

A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of …

cowagent | Remote | Denial of Service
Oct 11, 2026 Oct 14, 2026
Oct 11, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-108976 — GNU Emacs TRAMP OS Command Injection

GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an…

emacs | Injection
Oct 11, 2026 Oct 16, 2026
Oct 11, 2026
Oct 16, 2026
8.8 HIGH
CVE-2026-108963 — Databasement Argument Injection Remote Code Execution

databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user. For example, --resul…

databasement | Remote | Injection
Oct 11, 2026 Oct 13, 2026
Oct 11, 2026
Oct 13, 2026
Showing 20 of 18610 Results