Lucene search
+L

25244 matches found

Cvelist
Cvelist
•added 2026/02/20 5:02 p.m.•50 views

CVE-2026-2851 yeqifu warehouse Inport Endpoint InportController.java deleteInport access control

A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulnerability affects the function addInport/updateInport/deleteInport of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\InportController.java of the component Inport...

6.5CVSS0.00367EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2026/02/20 5:02 p.m.•11 views

CVE-2026-2851 yeqifu warehouse Inport Endpoint InportController.java deleteInport access control

A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulnerability affects the function addInport/updateInport/deleteInport of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\InportController.java of the component Inport...

6.5CVSS6AI score0.00367EPSS
SaveExploits1References6
CVE
CVE
•added 2026/02/20 5:02 p.m.•40 views

CVE-2026-2851

The CVE-2026-2851 entry concerns the YeQifu Warehouse project (up to commit aaf29962ba407d22d991781de28796ee7b4670e4). The vulnerability affects the Inport Endpoint, specifically InportController.java functions addInport, updateInport and deleteInport, causing improper access controls. It can be ...

6.5CVSS6AI score0.00367EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/20 5:02 p.m.•7 views

CVE-2026-2850 yeqifu warehouse Customer Endpoint CustomerController.java deleteCustomer access control

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addCustomer/updateCustomer/deleteCustomer of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\CustomerController.java of the component Customer Endpoint...

6.5CVSS5.9AI score0.00369EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2026/02/20 5:02 p.m.•22 views

CVE-2026-2850 yeqifu warehouse Customer Endpoint CustomerController.java deleteCustomer access control

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addCustomer/updateCustomer/deleteCustomer of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\CustomerController.java of the component Customer Endpoint...

5.3CVSS5.1AI score
SaveExploits0References8
CVE
CVE
•added 2026/02/20 5:02 p.m.•51 views

CVE-2026-2850

The CVE-2026-2850 entry concerns the YeQifu Warehouse project, affecting the Customer Endpoint component (dataset/repos/warehouse/src/main/java/com/yeqifu/bus/controller/CustomerController.java). The vulnerability arises from improper access controls in the addCustomer, updateCustomer, and delete...

6.5CVSS5.9AI score0.00369EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2026/02/20 4:15 p.m.•41 views

CVE-2026-24790 Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller Missing Authentication for Critical Function

The underlying PLC of the device can be remotely influenced, without proper safeguards or authentication...

8.2CVSS0.00467EPSS
SaveExploits0References3
CVE
CVE
•added 2026/02/20 4:15 p.m.•37 views

CVE-2026-24790

Technical details about CVE-2026-24790 are not publicly available in the provided documents. Monitor for updates.

8.2CVSS5.8AI score0.00467EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/02/20 4:02 p.m.•12 views

CVE-2026-2849

A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function deleteCache/removeAllCache/syncCache of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\CacheController.java of the component Cache Sy...

5.5CVSS5.2AI score0.00411EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/02/20 4:02 p.m.•58 views

CVE-2026-2849 yeqifu warehouse Cache Sync CacheController.java syncCache access control

A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function deleteCache/removeAllCache/syncCache of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\CacheController.java of the component Cache Sy...

5.5CVSS0.00411EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2026/02/20 4:02 p.m.•11 views

CVE-2026-2849 yeqifu warehouse Cache Sync CacheController.java syncCache access control

A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function deleteCache/removeAllCache/syncCache of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\CacheController.java of the component Cache Sy...

5.5CVSS5.2AI score0.00411EPSS
SaveExploits1References6
CVE
CVE
•added 2026/02/20 4:02 p.m.•66 views

CVE-2026-2849

The CVE affects yeqifu warehouse (up to commit aaf29962ba407d22d991781de28796ee7b4670e4). The vulnerable component is the Cache Sync Handler, specifically the CacheController.java functions deleteCache, removeAllCache, and syncCache. The root cause is improper access controls in these methods, en...

6.3CVSS5.2AI score0.00411EPSS
SaveExploits1References6Affected Software1
RedhatCVE
RedhatCVE
•added 2026/02/20 1:22 a.m.•18 views

CVE-2026-2665

A vulnerability was detected in huanzi-qch base-admin up to 57a8126bb3353a004f3c7722089e3b926ea83596. Impacted is the function Upload of the file SysFileController.java of the component JSP Parser. Performing a manipulation of the argument File results in unrestricted upload. The attack can be...

6.5CVSS6.1AI score0.00425EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/20 12:00 a.m.•26 views

Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller 访问控制错误漏洞

The Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller is an industrial natural gas odorization system developed by the American company Welker. This system has a security vulnerability known as access control errors. The vulnerability stems from insufficient protective measures or...

8.2CVSS5.9AI score0.00467EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/20 12:00 a.m.•23 views

warehouse 访问控制错误漏洞

Warehouse is a small-scale warehouse logistics management system developed by Yeqifu’s individual developer, based on Spring Boot. There is an access control vulnerability in Warehouse. This vulnerability stems from improper access control issues in the functions addCustomer, updateCustomer, and...

6.5CVSS6.7AI score0.00369EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/02/20 12:00 a.m.•19 views

PT-2026-21251

The underlying PLC of the device can be remotely influenced, without proper safeguards or authentication...

8.2CVSS5.4AI score0.00467EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/02/20 12:00 a.m.•20 views

warehouse 访问控制错误漏洞

Warehouse is a small-scale warehouse logistics management system developed by Yeqifu’s individual developer, based on Spring Boot. There is an access control vulnerability in Warehouse. This vulnerability stems from improper access control issues in the addInport/, updateInport/, and deleteInport...

6.5CVSS6.7AI score0.00367EPSS
SaveExploits1References6
osv_go
osv_go
•added 2026/02/19 5:28 p.m.•18 views

GO-2026-4399 DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager

DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager...

5.9CVSS8AI score0.00446EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/02/19 12:00 a.m.•27 views

EPSON Printer Controller Installer 安全漏洞

EPSON Printer Controller Installer is a printer driver installation software developed by EPSON, a Japanese company. The EPSON Printer Controller Installer has a security vulnerability, which stems from improper client authentication using the XPC protocol and incorrect execution of the macOS...

7.8CVSS7.3AI score0.00139EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/18 8:02 p.m.•11 views

CVE-2026-2665 huanzi-qch base-admin JSP Parser SysFileController.java upload unrestricted upload

A vulnerability was detected in huanzi-qch base-admin up to 57a8126bb3353a004f3c7722089e3b926ea83596. Impacted is the function Upload of the file SysFileController.java of the component JSP Parser. Performing a manipulation of the argument File results in unrestricted upload. The attack can be...

6.5CVSS6.1AI score0.00425EPSS
SaveExploits0References6
Rows per page
Query Builder