Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2025/12/26 8:18 p.m.1 views

CVE-2025-15085

A security flaw has been discovered in youlaitech youlai-mall 1.0.0/2.0.0. This affects the function deductBalance of the file mall-ums/ums-boot/src/main/java/com/youlai/mall/ums/controller/app/MemberController.java of the component Balance Handler. The manipulation results in improper...

8.1CVSS6.5AI score0.00024EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/25 9:30 p.m.4 views

EUVD-2025-205389

A security flaw has been discovered in youlaitech youlai-mall 1.0.0/2.0.0. This affects the function deductBalance of the file mall-ums/ums-boot/src/main/java/com/youlai/mall/ums/controller/app/MemberController.java of the component Balance Handler. The manipulation results in improper...

5.3CVSS6.1AI score0.00024EPSS
Exploits0References5
OSV
OSV
added 2025/12/25 8:15 p.m.0 views

CVE-2025-15085

A security flaw has been discovered in youlaitech youlai-mall 1.0.0/2.0.0. This affects the function deductBalance of the file mall-ums/ums-boot/src/main/java/com/youlai/mall/ums/controller/app/MemberController.java of the component Balance Handler. The manipulation results in improper...

8.1CVSS5.4AI score0.00024EPSS
Exploits0References4
NVD
NVD
added 2025/12/25 8:15 p.m.4 views

CVE-2025-15085

A security flaw has been discovered in youlaitech youlai-mall 1.0.0/2.0.0. This affects the function deductBalance of the file mall-ums/ums-boot/src/main/java/com/youlai/mall/ums/controller/app/MemberController.java of the component Balance Handler. The manipulation results in improper...

8.1CVSS0.00024EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/12/25 7:32 p.m.3 views

CVE-2025-15085 youlaitech youlai-mall Balance MemberController.java deductBalance improper authorization

A security flaw has been discovered in youlaitech youlai-mall 1.0.0/2.0.0. This affects the function deductBalance of the file mall-ums/ums-boot/src/main/java/com/youlai/mall/ums/controller/app/MemberController.java of the component Balance Handler. The manipulation results in improper...

5.3CVSS4.6AI score0.00024EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/12/25 7:32 p.m.19 views

CVE-2025-15085 youlaitech youlai-mall Balance MemberController.java deductBalance improper authorization

A security flaw has been discovered in youlaitech youlai-mall 1.0.0/2.0.0. This affects the function deductBalance of the file mall-ums/ums-boot/src/main/java/com/youlai/mall/ums/controller/app/MemberController.java of the component Balance Handler. The manipulation results in improper...

5.3CVSS0.00024EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/12/25 12:0 a.m.2 views

youlai-mall 授权问题漏洞

youlai-mall is a full-stack mall system by youlaitech open source. Authorization issue vulnerability exists in youlai-mall version 1.0.0 and 2.0.0, which stems from the Balance Handler component file mall-ums/ums-boot/src/main/java/com/youlai/mall/ums/controller/app/ The function deductBalance in...

8.1CVSS4.9AI score0.00024EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/12/25 12:0 a.m.3 views

PT-2025-53408

Name of the Vulnerable Software and Affected Versions youlaitech youlai-mall versions 1.0.0 through 2.0.0 Description A security flaw exists in youlaitech youlai-mall. The issue involves improper authorization within the Balance Handler component. Specifically, the deductBalance function, located...

8.1CVSS6.3AI score0.00024EPSS
Exploits0References11
Snyk
Snyk
added 2025/10/21 6:4 p.m.2 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
Exploits0References3
Snyk
Snyk
added 2025/10/21 6:4 p.m.2 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
Exploits0References3
Snyk
Snyk
added 2025/10/21 6:4 p.m.1 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
Exploits0References3
Snyk
Snyk
added 2025/10/21 6:4 p.m.2 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
Exploits0References3
Rows per page
Query Builder