Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiController that allows any authenticated user to…Check if you run itEPSS 0.24%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create validation rules through the SysCheckRu…Open the advisoryOct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController importExcel handler that allows any authenticated user to import ca…Check if you run itEPSS 0.24%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysCategoryController that allows any authenticated user to edit category dictionary nodes vi…Check if you run itEPSS 0.24%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysAnnouncementSendController that allows authenticated users to modify other users' message…Open the advisoryOct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' in-application messages via the…Check if you run itEPSS 0.24%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController queryById handler that lacks Shiro permission annotations.Check if you run itEPSS 0.24%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove user group members by calling DELETE /s…Open the advisoryOct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler that allows any authenticated user to import departments.Check if you run itEPSS 0.24%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/sysDepart/getDepartmentHead endpoint of SysDepartController that allows any auth…Check if you run itEPSS 0.24%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController queryById handler that allows any authenticated user to rea…Open the advisoryOct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysDepartPermissionController that allows any authenticated user to modify department permiss…Check if you run itEPSS 0.24%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleController that lets any authenticated user query role data rules.Open the advisoryOct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController queryById handler that allows low-privileged authenticated users to…Check if you run itEPSS 0.24%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message push records by calling PUT /sy…Check if you run itEPSS 0.24%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController delete handler that allows any authenticated user to delete audit log entries.Open the advisoryOct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController edit handler that allows any authenticated user to modify organizat…Check if you run itEPSS 0.24%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController deleteBatch handler that allows any authenticated user to delete or…Check if you run itEPSS 0.27%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/…Open the advisoryOct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete A…Check if you run itEPSS 0.27%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that allows low-privileged authenticated users to d…Check if you run itEPSS 0.27%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated u…Open the advisoryOct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates.Check if you run itEPSS 0.27%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit handler that allows any authenticated user to modify word templates.Check if you run itEPSS 0.24%Oct 10, 2026
- Medium5.3JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI video generation records b…Open the advisoryOct 10, 2026