Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

InvoiceShelf — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting InvoiceShelf. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates known security vulnerabilities for the InvoiceShelf vendor, specifically focusing on the InvoiceShelf product and related weakness classifications. It provides a centralized view of security issues affecting this specific software ecosystem, allowing users to monitor the risk posture associated with the vendor’s offerings. The content collected on this page encompasses a wide variety of vulnerability types, including but not limited to Cross-Site Scripting (XSS), SQL Injection, and path traversal flaws, alongside general software weaknesses. The data covers historical records ranging from early initial releases to the most recent disclosures, ensuring a comprehensive timeline of security incidents. By reviewing this aggregation, users can effectively track the vendor’s public advisory patterns and response behaviors over time. This resource enables a deeper understanding of specific weakness classes as they manifest within the InvoiceShelf application, highlighting common attack vectors and persistent security gaps. Furthermore, individuals can look up the specific product’s vulnerability history to assess long-term stability and the frequency of patch deployments. This information supports informed decision-making for system administrators and security analysts who need to evaluate the impact of these flaws on their infrastructure. The page serves as a factual repository rather than a promotional tool, offering raw data necessary for risk assessment and mitigation planning without bias or marketing influence.

Found 11 results / 11 Clear Filters
Top products by InvoiceShelf: InvoiceShelf
CVE ID Title CVSS Severity Published
CVE-2026-55382 InvoiceShelf: Cross-company read/modify/delete of notes via missing company scope in NotePolicy (BOLA/IDOR) — InvoiceShelf CWE-639 7.6 High 2026-10-14
CVE-2026-55385 InvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configuration — InvoiceShelf CWE-918 6.8 Medium 2026-10-14
CVE-2026-55381 InvoiceShelf: IDOR in InvoiceShelf estimate-to-invoice conversion allows any company user to read and tamper with other companies' estimates — InvoiceShelf CWE-639 7.1 High 2026-10-14
CVE-2026-55383 InvoiceShelf: Public EmailLog token type confusion allows cross-company invoice disclosure — InvoiceShelf CWE-285 8.2 High 2026-10-14
CVE-2026-55387 InvoiceShelf bulk deletion lacks company scoping — InvoiceShelf CWE-284 7.2 High 2026-10-14
CVE-2026-55386 InvoiceShelf ORDER BY SQL injection through orderByField — InvoiceShelf CWE-89 7.1 High 2026-10-14
CVE-2026-55384 InvoiceShelf trusts client-supplied document totals — InvoiceShelf CWE-284 5.3 Medium 2026-10-14
CVE-2026-55610 InvoiceShelf has cross-company user read/update IDOR that enables cross-tenant account takeover — InvoiceShelf CWE-639 8.7 High 2026-09-23
CVE-2026-34367 InvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes Field — InvoiceShelf CWE-918 7.6 High 2026-03-31
CVE-2026-34366 InvoiceShelf: SSRF in Payment Receipt PDF Rendering via Unsanitised HTML in Notes Field — InvoiceShelf CWE-918 7.6 High 2026-03-31
CVE-2026-34365 InvoiceShelf: SSRF in Estimate PDF Rendering via Unsanitised HTML in Notes Field — InvoiceShelf CWE-918 7.6 High 2026-03-31

This page lists every published CVE security advisory associated with InvoiceShelf. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.