CWE-840

CWE-840 · 4 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-840, highest CVSS first.

  1. MEDIUM 6.5CVE-2026-108784public PoC2026-10-12

    A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the component Payment Endpoint. The manipulation of the argument…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.5CVE-2026-108789public PoC2026-10-12

    A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out…

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 4.3CVE-2026-105573public PoC2026-10-06

    A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCo…

    AI risk analysis on Exploit-DB.ai →

  4. LOW 2.4CVE-2026-771662026-09-21

    The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide other items.

    AI risk analysis on Exploit-DB.ai →