Browse CVEs

CRITICAL 9.8 CVE-2026-3287 A security flaw has been discovered in youlaitech youlai-mall 2.0.0. This affects the function listPagedSpuForApp of the file mall-pms/pms-boot/src/m… Youlai Mall Mitigation only Fix from $2,3002026-02-27 HIGH 8.1 CVE-2025-15085 A security flaw has been discovered in youlaitech youlai-mall 1.0.0/2.0.0. This affects the function deductBalance of the file mall-ums/ums-boot/src/… Youlai Mall Mitigation only Fix from $1,9502025-12-25 HIGH 7.5 CVE-2025-66735 youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does not perform permission checks,… Youlai Boot Patch available Fix from $1,9502025-12-22 HIGH 7.1 CVE-2025-66736 youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check… Youlai Boot Patch available Fix from $1,9502025-12-22 HIGH 8.8 CVE-2025-14085 A vulnerability has been found in youlaitech youlai-mall 1.0.0/2.0.0. This impacts an unknown function of the file /app-api/v1/orders/. The manipulat… Youlai Mall No fix yet Fix from $1,9502025-12-05 HIGH 8.8 CVE-2025-14086 A vulnerability was found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is an unknown function of the file /app-api/v1/members/openid/. The manipul… Youlai Mall No fix yet Fix from $1,9502025-12-05 MEDIUM 6.5 CVE-2025-14052 A vulnerability has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected by this vulnerability is the function getMemberById of the file /mall-… Youlai Mall No fix yet Fix from $1,6002025-12-05 HIGH 8.8 CVE-2025-14051 A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-a… Youlai Mall No fix yet Fix from $1,9502025-12-04 CRITICAL 9.8 CVE-2025-55469 Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend. Youlai Boot Mitigation only Fix from $2,3002025-11-26 HIGH 7.5 CVE-2025-55471 Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users. Youlai Boot No fix yet Fix from $1,9502025-11-26