Rezultati pretraživanja za 'Proizvođač: youlai'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-14052 | 6.5 | A vulnerability has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected by this vulnerability is the function getMemberById of the file /mall-ums/app-api/v1/members/. The manipulation of the argument memberId leads to improper access controls. | 2026-09-25 23:10:00 | 2025-12-05 00:15:48 |
| CVE-2026-3287 | 6.5 | A security flaw has been discovered in youlaitech youlai-mall 2.0.0. This affects the function listPagedSpuForApp of the file mall-pms/pms-boot/src/main/java/com/youlai/mall/pms/controller/app/SpuController.java of the component App-side Product Pagi | 2026-03-02 15:22:38 | 2026-02-27 05:18:21 |
| CVE-2025-15087 | 4.0 | A security vulnerability has been detected in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function submitOrderPayment of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java. Such manipulation of th | 2026-02-26 17:22:44 | 2025-12-25 21:15:41 |
| CVE-2025-15372 | 3.3 | A weakness has been identified in youlaitech vue3-element-admin up to 3.4.0. This issue affects some unknown processing of the file src/views/system/notice/index.vue of the component Notice Handler. This manipulation causes cross site scripting. It i | 2026-01-15 01:41:04 | 2025-12-31 03:15:53 |
| CVE-2025-66735 | 7.5 | youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does not perform permission checks, which may allow non-root users to directly access root roles. | 2026-01-06 15:18:03 | 2025-12-22 21:15:44 |
| CVE-2025-66736 | 7.1 | youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check on the current user's identity, which may allow regular users to import user data into the database, | 2026-01-06 15:17:32 | 2025-12-22 21:15:44 |
| CVE-2025-15086 | 4.0 | A weakness has been identified in youlaitech youlai-mall 1.0.0/2.0.0. This impacts the function getMemberByMobile of the file mall-ums/ums-boot/src/main/java/com/youlai/mall/ums/controller/app/MemberController.java. This manipulation causes improper | 2025-12-31 20:02:13 | 2025-12-25 21:15:40 |
| CVE-2025-15085 | 4.0 | A security flaw has been discovered in youlaitech youlai-mall 1.0.0/2.0.0. This affects the function deductBalance of the file mall-ums/ums-boot/src/main/java/com/youlai/mall/ums/controller/app/MemberController.java of the component Balance Handler. | 2025-12-31 20:02:01 | 2025-12-25 20:15:41 |
| CVE-2025-15084 | 2.1 | A vulnerability was identified in youlaitech youlai-mall 1.0.0/2.0.0. The impacted element is the function orderService.payOrder of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java of the component Orde | 2025-12-31 19:50:53 | 2025-12-25 19:15:39 |
| CVE-2025-14085 | 6.5 | A vulnerability has been found in youlaitech youlai-mall 1.0.0/2.0.0. This impacts an unknown function of the file /app-api/v1/orders/. The manipulation of the argument orderId leads to improper control of dynamically-identified variables. Remote exp | 2025-12-10 23:21:08 | 2025-12-05 14:15:48 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2
Zapisa po stranici: