Browse CVEs

CRITICAL 9.1 CVE-2026-25858 macrozheng mall version 1.0.3 and prior contains an authentication vulnerability in the mall-portal password reset workflow that allows an unauthenti… Mall after 1.0.3 Fix from $2,3002026-02-07 HIGH 8.1 CVE-2025-14016 A security vulnerability has been detected in macrozheng mall-swarm up to 1.0.3. Affected is the function delete of the file /member/readHistory/dele… Mall Swarm after 1.0.3 Fix from $1,9502025-12-04 MEDIUM 6.5 CVE-2025-13443 A vulnerability was detected in macrozheng mall up to 1.0.3. Affected by this issue is the function delete of the file /member/readHistory/delete. Pe… Mall after 1.0.3 Fix from $1,6002025-11-20 MEDIUM 5.3 CVE-2025-13117 A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this vulnerability is the function cancelOrder … Mall after 1.0.3 Fix from $1,6002025-11-13 MEDIUM 5.3 CVE-2025-13114 A vulnerability was identified in macrozheng mall-swarm up to 1.0.3. This affects the function updateAttr of the file /cart/update/attr. Such manipul… Mall Swarm after 1.0.3 Fix from $1,6002025-11-13 MEDIUM 5.3 CVE-2025-13115 A security flaw has been discovered in macrozheng mall-swarm and mall up to 1.0.3. This impacts the function detail of the file /order/detail/ of the… Mall after 1.0.3 Fix from $1,6002025-11-13 MEDIUM 5.3 CVE-2025-13116 A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserO… Mall after 1.0.3 Fix from $1,6002025-11-13 MEDIUM 5.3 CVE-2025-8755 A vulnerability was found in macrozheng mall up to 1.0.3 and classified as problematic. This issue affects the function detail of the file UmsMemberC… Mall after 1.0.3 Fix from $1,6002025-08-09 MEDIUM 5.4 CVE-2025-8750 A vulnerability has been found in macrozheng mall up to 1.0.3 and classified as problematic. Affected by this vulnerability is the function Upload of… Mall after 1.0.3 Fix from $1,6002025-08-09 MEDIUM 5.9 CVE-2025-8741 A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functiona… Mall after 1.0.3 Fix from $1,6002025-08-08 MEDIUM 5.4 CVE-2025-8191 A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1.0.3. Affected is an unknown function of the file /swagger-… Mall after 1.0.3 Fix from $1,6002025-07-26 MEDIUM 6.5 CVE-2024-57435 In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a null pointer dereference occurri… Mall Tiny No fix yet Fix from $1,6002025-01-31 HIGH 8.8 CVE-2024-57434 macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control. The project imports users by default, and the test user is made a super adminis… Mall Tiny No fix yet Fix from $1,9502025-01-31 HIGH 7.5 CVE-2024-57433 macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available a… Mall Tiny No fix yet Fix from $1,9502025-01-31 HIGH 7.5 CVE-2024-57432 macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions. The application's JWT signing keys are hardcoded and do not change. User information is… Mall Tiny No fix yet Fix from $1,9502025-01-31 HIGH 8.1 CVE-2024-11619 A vulnerability, which was classified as problematic, has been found in macrozheng mall up to 1.0.3. Affected by this issue is some unknown functiona… Mall after 1.0.3 Fix from $1,9502024-11-22