Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
0.0 NA
CVE-2026-124557 — OtterMind Chat2DB Class Generator DbMybatisGenerateServiceImpl.java DbMybatisGenerateServ…

A vulnerability was detected in OtterMind Chat2DB up to 5.3.8. Impacted is the function DbMybatisGenerateServiceImpl.generateClass of the file DbMybatisGenerateServiceImpl.java of the component Class…

| Path Traversal
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
6.5 MEDIUM
CVE-2026-124555 — JeecgBoot Table Dictionary API getTableDictList JimuFormApiService.getTableDictList sql i…

A weakness has been identified in JeecgBoot 3.9.5. This vulnerability affects the function JimuFormApiService.getTableDictList of the file /jeecg-boot/jmreport/form/getTableDictList of the component …

jeecgboot | Remote | Injection
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
7.5 HIGH
CVE-2026-124554 — JeecgBoot JimuBI getAllChartData sql injection

A security flaw has been discovered in JeecgBoot 3.9.5. This affects an unknown part of the file /jeecg-boot/drag/onlDragDatasetHead/getAllChartData of the component JimuBI. Performing a manipulation…

jeecgboot | Remote | Injection
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
7.5 HIGH
CVE-2026-124509 — floci-io Floci S3 Destination Configuration DeliveryStreamDescription.java S3Destination.…

A vulnerability was identified in floci-io Floci up to 2.1.0. The affected element is the function S3Destination.bucketName of the file services/firehose/model/DeliveryStreamDescription.java of the c…

floci | Remote | Path Traversal
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.5 MEDIUM
CVE-2026-124508 — floci-io Floci Artifact CodeBuildJsonHandler.java BuildspecParser.parseArtifacts path tra…

A vulnerability was determined in floci-io Floci up to 2.4.0. Impacted is the function BuildspecParser.parseArtifacts of the file src/main/java/io/github/hectorvent/floci/services/codebuild/CodeBuild…

floci | Remote | Path Traversal
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
0.0 NA
CVE-2026-124556 — kekingcn kkFileView BaseUrlFilter.java BaseUrlFilter.getBaseUrl redirect

A security vulnerability has been detected in kekingcn kkFileView up to 5.0.3. This issue affects the function BaseUrlFilter.getBaseUrl of the file server/src/main/java/cn/keking/web/filter/BaseUrlFi…

| Misconfiguration
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.5 MEDIUM
CVE-2026-124507 — conductor-oss conductor PLANNER_CONTEXT_FETCH Task PlannerContextFetchTask.java WorkflowS…

A vulnerability was found in conductor-oss conductor up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0-alpha.1. This issue affects the function WorkflowSystemTask.start of the file PlannerContextFetchTask.java of…

conductor | Remote | Server-Side Request Forgery
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.0 MEDIUM
CVE-2026-124506 — Dianping CAT Report hourlyReport.tag Model.getDomain cross site scripting

A vulnerability has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This vulnerability affects the function Model.getDomain of the file WEB-INF/tags/hourlyReport.tag of the component Report Handler. …

cat | Remote | Cross-Site Scripting
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.0 MEDIUM
CVE-2026-124505 — Dianping CAT Login/Logout Handler.java Handler.redirect

A flaw has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This affects the function Handler.redirect of the file Handler.java of the component Login/Logout. Executing a manipulation of the argument …

cat | Remote | Misconfiguration
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
6.5 MEDIUM
CVE-2026-124504 — erupts erupt ReportService.java ReportService.queryBiData sql injection

A vulnerability was detected in erupts erupt up to 2.3.0. Affected by this issue is the function ReportService.queryBiData of the file ReportService.java. Performing a manipulation of the argument so…

erupt | Remote | Injection
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
9.1 CRITICAL
CVE-2026-119506 — WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerabil…

Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a…

frontend_admin | Remote | Authorization
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
4.3 MEDIUM
CVE-2026-124502 — yungifez Skuul School Management System Delete GraduationController.php resetGraduation a…

A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.3. Affected by this vulnerability is the function GraduationController::resetGraduation of the file app…

skuul_school_management_system | Remote | Authorization
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
7.5 HIGH
CVE-2026-124501 — Tidelift moto AWS Batch Emulation models.py privileges management

A weakness has been identified in Tidelift moto up to 5.2.4. Affected is an unknown function of the file moto/batch/models.py of the component AWS Batch Emulation. This manipulation of the argument p…

moto | Remote | Misconfiguration
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
6.5 MEDIUM
CVE-2026-124500 — Fengoffice Feng Office File FilesController.class.php upload_document_image server-side r…

A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This impacts the function upload_document_image of the file application/controllers/FilesController.class.php o…

feng_office | Remote | Server-Side Request Forgery
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
5.8 MEDIUM
CVE-2026-124499 — Fengoffice Feng Office Translation Tool ToolController.class.php write_translations code …

A vulnerability was identified in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This affects the function write_translations of the file application/controllers/ToolController.class.php of the com…

feng_office | Remote | Injection
Nov 09, 2026 Nov 09, 2026
Nov 09, 2026
Nov 09, 2026
4.0 MEDIUM
CVE-2026-124498 — Convene Azeus Convene Board Management Portal dummy_launcher.jsp cross site scripting

A vulnerability was determined in Convene Azeus Convene Board Management Portal 7.0.2.7_3 p72. The impacted element is an unknown function of the file /jsp/ge/dummy_launcher.jsp. Executing a manipula…

azeus_convene_board_management_portal | Remote | Cross-Site Scripting
Nov 08, 2026 Nov 08, 2026
Nov 08, 2026
Nov 08, 2026
7.5 HIGH
CVE-2026-96146 — Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management

IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

sevone_network_performance_management | Remote | Denial of Service
Nov 08, 2026 Nov 08, 2026
Nov 08, 2026
Nov 08, 2026
6.7 MEDIUM
CVE-2026-95867 — Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management

IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow.

Nov 08, 2026 Nov 09, 2026
Nov 08, 2026
Nov 09, 2026
6.5 MEDIUM
CVE-2026-17427 — This Power System update is being released to address

IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service …

Nov 08, 2026 Nov 08, 2026
Nov 08, 2026
Nov 08, 2026
6.5 MEDIUM
CVE-2026-17426 — This Power System update is being released to address

IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception.

openbmc | Denial of Service
Nov 08, 2026 Nov 08, 2026
Nov 08, 2026
Nov 08, 2026
Showing 20 of 16944 Results