YA
Vendor
yangzongzhuan
12
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-76576 | RU RuoYi-Vue yangzongzhuan | 4.3 | Aug 19 | yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal |
| CVE-2026-9374 | RU RuoYi-Vue yangzongzhuan | 6.3 | May 24 | yangzongzhuan RuoYi-Vue Common Upload Endpoint upload FileUploadUtils.upload unrestricted upload |
| CVE-2025-10989 | RU RuoYi yangzongzhuan | 8.8 | Sep 26 | yangzongzhuan RuoYi selectAll improper authorization |
| CVE-2025-10473 | RU RuoYi yangzongzhuan | 9.8 | Sep 15 | yangzongzhuan RuoYi Blacklist SqlUtil.java filterKeyword sql injection |
| CVE-2025-10384 | RU RuoYi yangzongzhuan | 5.4 | Sep 13 | yangzongzhuan RuoYi Role cancelAll improper authorization |
| CVE-2025-8847 | RU RuoYi yangzongzhuan | 5.4 | Aug 11 | yangzongzhuan RuoYi edit cross site scripting |
| CVE-2025-7907 | RU RuoYi yangzongzhuan | 4.3 | Jul 20 | yangzongzhuan RuoYi Druid application-druid.yml default credentials |
| CVE-2025-7906 | RU RuoYi yangzongzhuan | 5.4 | Jul 20 | yangzongzhuan RuoYi CommonController.java uploadFile unrestricted upload |
| CVE-2025-7903 | RU RuoYi yangzongzhuan | 5.4 | Jul 20 | yangzongzhuan RuoYi Image Source ui layer |
| CVE-2025-7902 | RU RuoYi yangzongzhuan | 5.4 | Jul 20 | yangzongzhuan RuoYi SysNoticeController.java addSave cross site scripting |
| CVE-2025-7901 | RU RuoYi yangzongzhuan | 6.1 | Jul 20 | yangzongzhuan RuoYi Swagger UI index.html cross site scripting |
| CVE-2025-4537 | RU RuoYi-Vue yangzongzhuan | 3.1 | May 11 | yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie |