Lucene search
K

6 matches found

Vulnrichment
Vulnrichment
added 2026/02/07 5:2 a.m.1 views

CVE-2026-2075 yeqifu warehouse Role-Permission Binding RoleController.java saveRolePermission access control

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected is the function saveRolePermission of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\RoleController.java of the component Role-Permission Binding Handler. The...

6.5CVSS5.2AI score0.00047EPSS
Exploits1References6
Cvelist
Cvelist
added 2026/02/07 5:2 a.m.28 views

CVE-2026-2075 yeqifu warehouse Role-Permission Binding RoleController.java saveRolePermission access control

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected is the function saveRolePermission of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\RoleController.java of the component Role-Permission Binding Handler. The...

6.5CVSS0.00047EPSS
Exploits1References6
CVE
CVE
added 2026/02/07 5:2 a.m.10 views

CVE-2026-2075

The CVE-2026-2075 entry concerns yeqifu warehouse. Affected component is the Role-Permission Binding Handler, specifically saveRolePermission in dataset/repos/warehouse/src/main/java/com/yeqifu/sys/controller/RoleController.java. The flaw is improper access controls, enabling remote exploitation....

8.8CVSS6.2AI score0.00047EPSS
Exploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/07 12:0 a.m.6 views

PT-2026-6876

Name of the Vulnerable Software and Affected Versions yeqifu warehouse versions prior to aaf29962ba407d22d991781de28796ee7b4670e4 Description A security flaw exists due to improper access controls. The issue is located in the saveRolePermission function within the file...

6.5CVSS5.4AI score0.00047EPSS
Exploits1References8
CNNVD
CNNVD
added 2026/02/07 12:0 a.m.4 views

warehouse 访问控制错误漏洞

Warehouse is a small-scale warehouse logistics management system developed by Yeqifu, based on Spring Boot. There is an access control vulnerability in Warehouse, which stems from improper access control in the role permission binding processing program...

8.8CVSS6.6AI score0.00047EPSS
Exploits1References7
Cvelist
Cvelist
added 2025/10/29 2:54 p.m.7 views

CVE-2023-32199 Rancher user retains access to clusters despite Global Role removal

A vulnerability has been identified within Rancher Manager, where after removing a custom GlobalRole that gives administrative access or the corresponding binding, the user still retains access to clusters. This only affects custom Global Roles that have a on in rule for resources or have a on ru...

4.3CVSS0.0001EPSS
Exploits0References2
Rows per page
Query Builder