Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/02/21 7:29 p.m.0 views

CVE-2026-2850

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addCustomer/updateCustomer/deleteCustomer of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\CustomerController.java of the component Customer Endpoint...

6.5CVSS5.1AI score0.00064EPSS
Exploits1References1
NVD
NVD
added 2026/02/20 6:25 p.m.3 views

CVE-2026-2850

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addCustomer/updateCustomer/deleteCustomer of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\CustomerController.java of the component Customer Endpoint...

6.5CVSS0.00064EPSS
Exploits1References6
OSV
OSV
added 2026/02/20 6:25 p.m.1 views

CVE-2026-2850

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addCustomer/updateCustomer/deleteCustomer of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\CustomerController.java of the component Customer Endpoint...

6.5CVSS5.3AI score0.00064EPSS
Exploits1References6
CVE
CVE
added 2026/02/20 5:2 p.m.4 views

CVE-2026-2850

The CVE-2026-2850 entry concerns the YeQifu Warehouse project, affecting the Customer Endpoint component (dataset/repos/warehouse/src/main/java/com/yeqifu/bus/controller/CustomerController.java). The vulnerability arises from improper access controls in the addCustomer, updateCustomer, and delete...

6.5CVSS5.1AI score0.00064EPSS
Exploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/20 5:2 p.m.3 views

CVE-2026-2850 yeqifu warehouse Customer Endpoint CustomerController.java deleteCustomer access control

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addCustomer/updateCustomer/deleteCustomer of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\CustomerController.java of the component Customer Endpoint...

6.5CVSS6AI score0.00064EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2022/03/23 12:0 a.m.1 views

PT-2022-13458 · WordPress · Amelia

Name of the Vulnerable Software and Affected Versions: Amelia WordPress plugin versions up to and including 1.0.46 Description: The issue arises from insufficient escaping and sanitization of the lastName parameter in the /src/Application/Controller/User/Customer/AddCustomerController.php file...

7.2CVSS5.7AI score0.00171EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/03/23 12:0 a.m.2 views

WordPress plugin Amelia 跨站脚本漏洞

WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. WordPress plugin is an application plugin for WordPress. WordPress Amelia Plugin 1.0.46 and earlier versions are vulnerable to a cross-site scripting vulnerability that stems from the program's failure t...

7.2CVSS5.5AI score0.00171EPSS
Exploits0References2
Rows per page
Query Builder