CVE-2026-90598 jaygajera17 E-commerce-project-springBoot UserController.java UserController.updateUser authorization

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...

CVE-2026-90598 jaygajera17 E-commerce-project-springBoot UserController.java UserController.updateUser authorization

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...

CVE-2026-90598 jaygajera17 E-commerce-project-springBoot UserController.java UserController.updateUser authorization

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...

CVE-2026-90563

A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely...

CVE-2026-90563 maliangnansheng bbs-springboot ArticleController.java utils.toToc cross site scripting

A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely...

CVE-2026-90563 maliangnansheng bbs-springboot ArticleController.java utils.toToc cross site scripting

A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely...

EUVD-2026-77032

A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely...

CVE-2026-90563

CVE-2026-90563 is a Cross Site Scripting (XSS) vulnerability in maliangnansheng bbs-springboot version 3.0.0 , specifically in the utils.toToc function within ArticleController.java . The flaw can be exploited remotely by a low-privileged user with user interaction required, resulting in low inte...

PT-2026-90868

A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely...

CVE-2026-90598: Authorization Bypass Through User-Controlled Key

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...

PT-2026-90979

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...

CVE-2026-90563: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely...

CVE-2026-79571

Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...

CVE-2026-79571

Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...

CVE-2026-79571

The springboot-project v1.0.0 is vulnerable to an incorrect access control flaw in the SellerAuthorizeAspect component. This vulnerability allows unauthenticated attackers to access all seller management interfaces. Impacted actions include listing all products and orders, putting products on or ...

CVE-2026-79571: Improper Access Control

Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...

PT-2026-87100

Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...

EUVD-2026-72849

Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...

CVE-2026-79571

Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...

org.apache.camel.kafkaconnector:camel-azure-storage-datalake-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-azure-storage-datalake-source-kafka-connector (>=4.0.0, <=4.14.5) +6 more potentially affected by CVE-2026-60093 via org.apache.camel:camel-azure-storage-datalake (>=4.0.0, <=4.14.8)

org.apache.camel:camel-azure-storage-datalake MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.24.0, =3.2.0, =4.0.0, =4.14.8 Source cves: CVE-2026-60093 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-19319138...