Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

uscnanbu — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting uscnanbu. AI-powered Chinese analysis, POCs, and references for each vulnerability.

USCNANBU primarily serves as a network monitoring and management tool for enterprise environments. Historically, its vulnerabilities have commonly included remote code execution, cross-site scripting, and privilege escalation flaws. The software has demonstrated security weaknesses in authentication mechanisms and input validation processes. While no major public security incidents have been widely documented, the 8 CVEs on record highlight recurring issues in access control and data handling. These vulnerabilities typically stem from insufficient boundary checks in network communication protocols and improper sanitization of user inputs. Organizations implementing USCNANBU should prioritize timely patching and harden configurations against identified threat vectors.

Top products by uscnanbu: Welcart e-Commerce
CVE ID Title CVSS Severity Published
CVE-2026-107752 Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via 'wp_usces_order_old' Cookie — Welcart e-Commerce CWE-89 4.9 Medium 2026-10-17
CVE-2026-87091 Welcart e-Commerce <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Settlement Notification Parameters — Welcart e-Commerce CWE-79 7.2 High 2026-10-03
CVE-2026-19887 Welcart e-Commerce <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback — Welcart e-Commerce CWE-502 8.8 High 2026-09-05
CVE-2026-19914 Welcart e-Commerce <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameter — Welcart e-Commerce CWE-79 7.2 High 2026-09-01
CVE-2025-12979 Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposure — Welcart e-Commerce CWE-862 5.3 Medium 2025-11-13
CVE-2025-10651 Welcart e-Commerce <= 2.11.22 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mail — Welcart e-Commerce CWE-79 5.5 Medium 2025-10-22
CVE-2025-10649 Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie — Welcart e-Commerce CWE-89 6.5 Medium 2025-10-08
CVE-2025-9367 Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting — Welcart e-Commerce CWE-79 5.5 Medium 2025-09-10
CVE-2025-0511 Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameter — Welcart e-Commerce CWE-79 7.2 High 2025-02-12
CVE-2023-6120 Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal — Welcart e-Commerce CWE-22 4.1 Medium 2023-12-09
CVE-2021-4375 Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure — Welcart e-Commerce CWE-862 4.3 Medium 2023-06-07
CVE-2021-4355 Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure — Welcart e-Commerce CWE-862 7.5 High 2023-06-07

This page lists every published CVE security advisory associated with uscnanbu. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.