Yyangzongzhuan

Products

Exploited and recent CVEs

• CVE-2026-122016 Medium 6.3 yangzongzhuan RuoYi-Vue Permission Service SysPermissionService.java SysPermissionService.getMenuPermission privileges management 0.3%
• CVE-2026-108825 Medium 5.4 yangzongzhuan RuoYi authDataScope checkRoleAllowed privileges management 0.2%
• CVE-2026-108800 Medium 4.3 yangzongzhuan RuoYi cross-site request forgery 0.2%
• CVE-2026-76576 Medium 4.3 yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal 0.5%
• CVE-2026-9374 Medium 6.3 yangzongzhuan RuoYi-Vue Common Upload Endpoint upload FileUploadUtils.upload unrestricted upload 0.2%
• CVE-2026-4564 Medium 4.7 yangzongzhuan RuoYi Quartz Job job code injection 0.3%
• CVE-2025-10989 Medium 6.3 yangzongzhuan RuoYi selectAll improper authorization 0.4%
• CVE-2025-10473 Medium 6.3 yangzongzhuan RuoYi Blacklist SqlUtil.java filterKeyword sql injection 0.4%
• CVE-2025-10384 Medium 5.4 yangzongzhuan RuoYi Role cancelAll improper authorization 0.4%
• CVE-2025-8847 Low 3.5 yangzongzhuan RuoYi edit cross site scripting 0.4%
• CVE-2025-7907 Medium 4.3 yangzongzhuan RuoYi Druid application-druid.yml default credentials 0.5%
• CVE-2025-7906 Medium 6.3 yangzongzhuan RuoYi CommonController.java uploadFile unrestricted upload 0.4%
• CVE-2025-7903 Medium 4.3 yangzongzhuan RuoYi Image Source ui layer 0.3%
• CVE-2025-7902 Low 3.5 yangzongzhuan RuoYi SysNoticeController.java addSave cross site scripting 0.3%
• CVE-2025-7901 Medium 4.3 yangzongzhuan RuoYi Swagger UI index.html cross site scripting 0.9%
• CVE-2025-4537 Low 3.1 yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie 0.3%