Browse all 17 CVE security advisories affecting guchengwuyue. AI-powered Chinese analysis, POCs, and references for each vulnerability.
This page aggregates security vulnerability data specifically for the vendor guchengwuyue, focusing on software flaws and configuration weaknesses associated with their product line. The collection encompasses a wide spectrum of reported issues, ranging from remote code execution and privilege escalation to information disclosure and denial of service, covering the entire historical timeline of public disclosures since the vendor first appeared in security advisories. Users can utilize this resource to track the latest security advisories issued by guchengwuyue, analyze the prevalence and impact of specific weakness classes within their ecosystem, or review the complete vulnerability history of individual products to assess long-term security posture. The data is curated to provide a clear, factual record of known risks without promotional commentary, enabling security professionals and researchers to conduct thorough risk assessments and prioritize remediation efforts effectively. By centralizing these details, the page serves as a comprehensive reference point for understanding the security evolution of guchengwuyue offerings, allowing stakeholders to identify patterns in exploitation trends and evaluate the vendor's responsiveness to critical threats over time. All entries are organized to facilitate efficient searching and filtering, ensuring that relevant information regarding specific products or vulnerability types is readily accessible for immediate analysis and decision-making processes.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-110120 | yshopmall through 2.0.0 IDOR via After-Sales API in StoreAfterSalesController — yshopmall CWE-639 | 5.4 | Medium | 2026-10-13 |
| CVE-2026-110119 | yshopmall through 2.0.0 IDOR via Member Address API in UserAddressController — yshopmall CWE-639 | 7.1 | High | 2026-10-13 |
| CVE-2026-2146 | guchengwuyue yshopmall co.yixiang.utils.FileUtil updateAvatar unrestricted upload — yshopmall CWE-434 | 6.3 | Medium | 2026-02-08 |
| CVE-2025-15496 | guchengwuyue yshopmall jobs getPage sql injection — yshopmall CWE-89 | 6.3 | Medium | 2026-01-09 |
This page lists every published CVE security advisory associated with guchengwuyue. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.