Vulnerability index

Browse CVEs

16 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Mall CRITICAL 9.1
CVE-2026-25858

macrozheng mall version 1.0.3 and prior contains an authentication vulnerability in the mall-portal password reset workflow that allows an unauthenti…

Fix: after 1.0.3
Fix from $2,300 2026-02-07
Mall Swarm HIGH 8.1
CVE-2025-14016

A security vulnerability has been detected in macrozheng mall-swarm up to 1.0.3. Affected is the function delete of the file /member/readHistory/dele…

Fix: after 1.0.3
Fix from $1,950 2025-12-04
Mall MEDIUM 6.5
CVE-2025-13443

A vulnerability was detected in macrozheng mall up to 1.0.3. Affected by this issue is the function delete of the file /member/readHistory/delete. Pe…

Fix: after 1.0.3
Fix from $1,600 2025-11-20
Mall MEDIUM 5.3
CVE-2025-13117

A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this vulnerability is the function cancelOrder …

Fix: after 1.0.3
Fix from $1,600 2025-11-13
Mall Swarm MEDIUM 5.3
CVE-2025-13114

A vulnerability was identified in macrozheng mall-swarm up to 1.0.3. This affects the function updateAttr of the file /cart/update/attr. Such manipul…

Fix: after 1.0.3
Fix from $1,600 2025-11-13
Mall MEDIUM 5.3
CVE-2025-13115

A security flaw has been discovered in macrozheng mall-swarm and mall up to 1.0.3. This impacts the function detail of the file /order/detail/ of the…

Fix: after 1.0.3
Fix from $1,600 2025-11-13
Mall MEDIUM 5.3
CVE-2025-13116

A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserO…

Fix: after 1.0.3
Fix from $1,600 2025-11-13
Mall MEDIUM 5.3
CVE-2025-8755

A vulnerability was found in macrozheng mall up to 1.0.3 and classified as problematic. This issue affects the function detail of the file UmsMemberC…

Fix: after 1.0.3
Fix from $1,600 2025-08-09
Mall MEDIUM 5.4
CVE-2025-8750

A vulnerability has been found in macrozheng mall up to 1.0.3 and classified as problematic. Affected by this vulnerability is the function Upload of…

Fix: after 1.0.3
Fix from $1,600 2025-08-09
Mall MEDIUM 5.9
CVE-2025-8741

A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functiona…

Fix: after 1.0.3
Fix from $1,600 2025-08-08
Mall MEDIUM 5.4
CVE-2025-8191

A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1.0.3. Affected is an unknown function of the file /swagger-…

Fix: after 1.0.3
Fix from $1,600 2025-07-26
Mall Tiny MEDIUM 6.5
CVE-2024-57435

In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a null pointer dereference occurri…

No fix yet
Fix from $1,600 2025-01-31
Mall Tiny HIGH 8.8
CVE-2024-57434

macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control. The project imports users by default, and the test user is made a super adminis…

No fix yet
Fix from $1,950 2025-01-31
Mall Tiny HIGH 7.5
CVE-2024-57433

macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available a…

No fix yet
Fix from $1,950 2025-01-31
Mall Tiny HIGH 7.5
CVE-2024-57432

macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions. The application's JWT signing keys are hardcoded and do not change. User information is…

No fix yet
Fix from $1,950 2025-01-31
Mall HIGH 8.1
CVE-2024-11619

A vulnerability, which was classified as problematic, has been found in macrozheng mall up to 1.0.3. Affected by this issue is some unknown functiona…

Fix: after 1.0.3
Fix from $1,950 2024-11-22