CVEs
Browse the synced catalog, newest first.
- CVE-2026-124557OtterMind Chat2DB Class Generator DbMybatisGenerateServiceImpl.java DbMybatisGenerateServiceImpl.generateClass path traversalOtterMind Chat2DB
- CVE-2026-124556kekingcn kkFileView BaseUrlFilter.java BaseUrlFilter.getBaseUrl redirectkekingcn kkFileView
- CVE-2026-124555JeecgBoot Table Dictionary API getTableDictList JimuFormApiService.getTableDictList sql injectionJeecgBoot
- CVE-2026-124554JeecgBoot JimuBI getAllChartData sql injectionJeecgBoot
- CVE-2026-124509floci-io Floci S3 Destination Configuration DeliveryStreamDescription.java S3Destination.bucketName path traversalfloci-io Floci
- CVE-2026-124508floci-io Floci Artifact CodeBuildJsonHandler.java BuildspecParser.parseArtifacts path traversalfloci-io Floci
- CVE-2026-124507conductor-oss conductor PLANNER_CONTEXT_FETCH Task PlannerContextFetchTask.java WorkflowSystemTask.start server-side request forgeryconductor-oss conductor
- CVE-2026-124506Dianping CAT Report hourlyReport.tag Model.getDomain cross site scriptingDianping CAT
- CVE-2026-119506WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerabilityFrontend Admin by DynamiApps
- CVE-2026-124505Dianping CAT Login/Logout Handler.java Handler.redirectDianping CAT
- CVE-2026-124504erupts erupt ReportService.java ReportService.queryBiData sql injectionerupts erupt
- CVE-2026-124502yungifez Skuul School Management System Delete GraduationController.php resetGraduation authorizationyungifez Skuul School Management System
- CVE-2026-124501Tidelift moto AWS Batch Emulation models.py privileges managementTidelift moto
- CVE-2026-124500Fengoffice Feng Office File FilesController.class.php upload_document_image server-side request forgeryFengoffice Feng Office
- CVE-2026-124499Fengoffice Feng Office Translation Tool ToolController.class.php write_translations code injectionFengoffice Feng Office
- CVE-2026-124498Convene Azeus Convene Board Management Portal dummy_launcher.jsp cross site scriptingAzeus Convene Board Management Portal
- CVE-2026-118904IBM webMethods Integration Server is affected by vulnerabilty in backup code validation during 2FA Authentication.IBM webMethods Integration Server
- CVE-2026-96146Multiple vulnerabilities previously addressed in IBM SevOne Network Performance ManagementIBM SevOne Network Performance Management
- CVE-2026-95867Multiple vulnerabilities previously addressed in IBM SevOne Network Performance ManagementIBM SevOne Network Performance Management
- CVE-2026-17427This Power System update is being released to addressIBM OPENBMC · IBM Power Hardware Management Console
- CVE-2026-17426This Power System update is being released to addressIBM OPENBMC
- CVE-2026-16697This Power System update is being released to addressIBM OPENBMC · IBM Power Hardware Management Console
- CVE-2026-16682This Power System update is being released to addressIBM OPENBMC · IBM Hardware Management Console
- CVE-2026-97677Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-9764IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server executionIBM Bob Shell
- CVE-2026-93879Hibernate Validator is affected by an expression language injection vulnerabilityIBM Hibernate Validator
- CVE-2026-93005Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026IBM Process Mining
- CVE-2026-8860IBM Verify Directory is affected by multiple vulnerabilitiesIBM Security Verify Directory · IBM Verify Directory
- CVE-2026-8642IBM Verify Directory is affected by multiple vulnerabilitiesIBM Security Verify Directory · IBM Verify Directory
- CVE-2026-8640IBM Verify Directory is affected by multiple vulnerabilitiesIBM Security Verify Directory · IBM Verify Directory