YO
Vendor
Youlai
14
CVEs
0
On KEV
0
New 30D
Products
YO9.8
Youlai-mall
Youlai
9 CVEs0 on KEV0 new
YO9.8
Youlai-boot
Youlai
4 CVEs0 on KEV0 new
VU4.8
Vue3-element-admin
Youlai
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-3287 | YO Youlai-mall Youlai | 9.8 | Feb 27 | youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection |
| CVE-2025-15372 | VU Vue3-element-admin Youlai | 4.8 | Dec 31 | youlaitech vue3-element-admin Notice index.vue cross site scripting |
| CVE-2025-15087 | YO Youlai-mall Youlai | 4.3 | Dec 25 | youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization |
| CVE-2025-15086 | YO Youlai-mall Youlai | 4.3 | Dec 25 | youlaitech youlai-mall MemberController.java getMemberByMobile access control |
| CVE-2025-15085 | YO Youlai-mall Youlai | 8.1 | Dec 25 | youlaitech youlai-mall Balance MemberController.java deductBalance improper authorization |
| CVE-2025-15084 | YO Youlai-mall Youlai | 3.1 | Dec 25 | youlaitech youlai-mall Order Payment OrderController.java orderService.payOrder access control |
| CVE-2025-66736 | YO Youlai-boot Youlai | 7.1 | Dec 22 | youlai-boot V2.21.1 is vulnerable to Incorrect Access Control |
| CVE-2025-66735 | YO Youlai-boot Youlai | 7.5 | Dec 22 | youlai-boot V2.21.1 is vulnerable to Incorrect Access Control |
| CVE-2025-14086 | YO Youlai-mall Youlai | 8.8 | Dec 5 | youlaitech youlai-mall openid access control |
| CVE-2025-14085 | YO Youlai-mall Youlai | 8.8 | Dec 5 | youlaitech youlai-mall orders improper control of dynamically-identified variables |
| CVE-2025-14052 | YO Youlai-mall Youlai | 6.5 | Dec 5 | youlaitech youlai-mall members getMemberById access control |
| CVE-2025-14051 | YO Youlai-mall Youlai | 8.8 | Dec 4 | youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables |
| CVE-2025-55469 | YO Youlai-boot Youlai | 9.8 | Nov 26 | Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend |
| CVE-2025-55471 | YO Youlai-boot Youlai | 7.5 | Nov 26 | Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users |