MA
Vendor
macrozheng
37
CVEs
0
On KEV
5
New 30D
Products
MA9.1
mall
macrozheng
27 CVEs0 on KEV5 new
MA8.1
mall-swarm
macrozheng
6 CVEs0 on KEV0 new
MA8.8
Mall-tiny
Macrozheng
4 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109410 | MA mall macrozheng | 2.4 | Oct 13 | macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation |
| CVE-2026-109407 | MA mall macrozheng | 3.1 | Oct 13 | macrozheng mall Coupon Redemption generateOrder race condition |
| CVE-2026-109406 | MA mall macrozheng | 5.4 | Oct 13 | macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error |
| CVE-2026-108785 | MA mall macrozheng | 6.3 | Oct 12 | macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expiration |
| CVE-2026-108784 | MA mall macrozheng | 6.5 | Oct 12 | macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error |
| CVE-2026-82423 | MA mall macrozheng | 5.4 | Aug 29 | macrozheng mall Payment Status Endpoint paySuccess behavioral workflow |
| CVE-2026-82364 | MA mall macrozheng | 4.2 | Aug 29 | macrozheng mall Order Submission submit race condition |
| CVE-2026-79406 | MA mall macrozheng | 4.3 | Aug 25 | macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error |
| CVE-2026-19361 | MA mall macrozheng | 3.7 | Aug 9 | macrozheng mall mall-portal getAuthCode password recovery |
| CVE-2026-15186 | MA mall macrozheng | 6.3 | Jul 9 | macrozheng mall Portal Endpoint create resource injection |
| CVE-2026-10070 | MA mall macrozheng | 4.7 | May 29 | macrozheng mall Super Admin Password update improper authorization |
| CVE-2026-25858 | MA mall macrozheng | 9.1 | Feb 7 | macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure |
| CVE-2025-15118 | MA mall macrozheng | 4.3 | Dec 28 | macrozheng mall Member Endpoint update improper authorization |
| CVE-2025-14016 | MA mall-swarm macrozheng | 8.1 | Dec 4 | macrozheng mall-swarm delete improper authorization |
| CVE-2025-13443 | MA mall macrozheng | 6.5 | Nov 20 | macrozheng mall delete access control |
| CVE-2025-13118 | MA mall-swarm macrozheng | 4.3 | Nov 13 | macrozheng mall-swarm paySuccess improper authorization |
| CVE-2025-13117 | MA mall-swarm macrozheng | 5.3 | Nov 13 | macrozheng mall-swarm/mall cancelOrder improper authorization |
| CVE-2025-13116 | MA mall-swarm macrozheng | 5.3 | Nov 13 | macrozheng mall-swarm/mall cancelUserOrder improper authorization |
| CVE-2025-13115 | MA mall macrozheng | 5.3 | Nov 13 | macrozheng mall-swarm/mall Order Details detail improper authorization |
| CVE-2025-13114 | MA mall-swarm macrozheng | 5.3 | Nov 13 | macrozheng mall-swarm attr updateAttr improper authorization |
| CVE-2025-9836 | MA mall macrozheng | 4.3 | Sep 2 | macrozheng mall paySuccess authorization |
| CVE-2025-9835 | MA mall macrozheng | 4.3 | Sep 2 | macrozheng mall cancelUserOrder cancelOrder authorization |
| CVE-2025-9514 | MA mall macrozheng | 3.7 | Aug 27 | macrozheng mall Registration weak password |
| CVE-2025-8755 | MA mall macrozheng | 5.3 | Aug 9 | macrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization |
| CVE-2025-8750 | MA mall macrozheng | 5.4 | Aug 9 | macrozheng mall Add Product Page upload cross site scripting |
| CVE-2025-8742 | MA mall macrozheng | 3.7 | Aug 8 | macrozheng mall Admin Login excessive authentication |
| CVE-2025-8741 | MA mall macrozheng | 5.9 | Aug 8 | macrozheng mall login cleartext transmission |
| CVE-2025-8191 | MA mall macrozheng | 5.4 | Jul 26 | macrozheng mall Swagger UI index.html cross site scripting |
| CVE-2024-57432 | MA Mall-tiny Macrozheng | 7.5 | Jan 31 | macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions |
| CVE-2024-57433 | MA Mall-tiny Macrozheng | 7.5 | Jan 31 | macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function |
| CVE-2024-57434 | MA Mall-tiny Macrozheng | 8.8 | Jan 31 | macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control |
| CVE-2024-57435 | MA Mall-tiny Macrozheng | 6.5 | Jan 31 | In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a null pointer dereference occurring in all subsequent… |
| CVE-2024-11619 | MA Mall Macrozheng | 8.1 | Nov 22 | A vulnerability, which was classified as problematic, has been found in macrozheng mall up to 1.0.3 |