https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:03:02.254987+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-265459 EUVD-2026-265459 2026-10-03T20:03:02.324411+00:00 EUVD-2026-265459 https://cve.radiocsirt.org/vuln/fkie_cve-2023-36331 fkie_cve-2023-36331 2026-10-03T20:03:02.324465+00:00

Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily access other users' order details via manipulation of the query parameter userId.

 https://cve.radiocsirt.org/vuln/ghsa-7v52-p3w5-3m2m GHSA-7v52-p3w5-3m2m 2026-10-03T20:03:02.324510+00:00

Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily access other users' order details via manipulation of the query parameter userId.

 https://cve.radiocsirt.org/vuln/gsd-2023-36331 gsd-2023-36331 2026-10-03T20:03:02.324540+00:00 gsd-2023-36331