Priority HIGH 81
macrozheng mall version 1.0.3 and prior contains an authentication vulnerability in the mall-portal password reset workflow that allows an unauthenticated attacker to reset arbitrary user account passwords using only a v…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00706 · Published 2026-02-07 · No fix listed CWE-640
Priority HIGH 74
macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00537 · Published 2025-01-31 · No fix listed CWE-287
Priority HIGH 73
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00472 · Published 2025-01-31 · No fix listed CWE-863
Priority HIGH 72
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00445 · Published 2025-01-31 · No fix listed CWE-284
Priority HIGH 70
A vulnerability was detected in macrozheng mall up to 1.0.3.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00347 · Published 2026-10-12 · No fix listed CWE-840
Priority HIGH 70
A vulnerability was found in macrozheng mall up to 1.0.3 and classified as problematic.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00603 · Published 2025-08-09 · No fix listed CWE-285
Priority MEDIUM 62
In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a null pointer dereference occurring in all subsequent operations that require authentication, which trig…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00503 · Published 2025-01-31 · No fix listed CWE-476
Priority MEDIUM 61
A flaw has been found in macrozheng mall 0504e86.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00438 · Published 2026-08-09 · No fix listed CWE-640
Priority MEDIUM 61
A vulnerability was found in macrozheng mall 1.0.3.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00645 · Published 2025-08-08 · No fix listed CWE-307
Priority MEDIUM 61
A vulnerability was found in macrozheng mall up to 1.0.3.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00419 · Published 2025-08-08 · No fix listed CWE-310
Priority MEDIUM 57
A flaw has been found in macrozheng mall up to 1.0.3.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00289 · Published 2026-10-12 · No fix listed CWE-613
Priority MEDIUM 57
A security vulnerability has been detected in macrozheng mall up to 1.0.3.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00261 · Published 2025-12-28 · No fix listed CWE-266
Priority MEDIUM 57
A security vulnerability has been detected in macrozheng mall-swarm up to 1.0.3.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00321 · Published 2025-12-04 · No fix listed CWE-266
Priority MEDIUM 57
A vulnerability was detected in macrozheng mall up to 1.0.3.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00252 · Published 2025-11-20 · No fix listed CWE-266
Priority MEDIUM 57
A vulnerability was detected in macrozheng mall-swarm up to 1.0.3.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00258 · Published 2025-11-13 · No fix listed CWE-266
Priority MEDIUM 57
A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00329 · Published 2025-11-13 · No fix listed CWE-266
Priority MEDIUM 57
A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00329 · Published 2025-11-13 · No fix listed CWE-266
Priority MEDIUM 57
A security flaw has been discovered in macrozheng mall-swarm and mall up to 1.0.3.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00354 · Published 2025-11-13 · No fix listed CWE-266
Priority MEDIUM 57
A vulnerability was identified in macrozheng mall-swarm up to 1.0.3.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0026 · Published 2025-11-13 · No fix listed CWE-266
Priority MEDIUM 57
A vulnerability was found in macrozheng mall up to 1.0.3.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00311 · Published 2025-09-02 · No fix listed CWE-285
Priority MEDIUM 57
A vulnerability has been found in macrozheng mall up to 1.0.3.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00352 · Published 2025-09-02 · No fix listed CWE-285
Priority MEDIUM 56
A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1.0.3.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.01821 · Published 2025-07-26 · No fix listed CWE-79
Priority MEDIUM 55
A vulnerability has been found in macrozheng mall up to 1.0.3 and classified as problematic.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00314 · Published 2025-08-09 · No fix listed CWE-79
Priority MEDIUM 45
A security vulnerability has been detected in macrozheng mall up to 1.0.3.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.0017 · Published 2026-10-13 · No fix listed CWE-362
Priority LOW 28
A vulnerability has been found in macrozheng mall up to 1.0.3.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00408 · Published 2025-08-27 · No fix listed CWE-521
Load more
THREATIST.IORead the docs