CVE-2026-85125

The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information leakage from the app or redirect users to unintended websites...

CVE-2026-82792

Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

EUVD-2026-77242

Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82763

Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82763

A cross-site scripting (XSS) vulnerability affects Contec FX5000, FX4000, and FX3000 series devices. When exploited, an arbitrary script may be executed in a logged-in user's web browser . The CVSS 3.1 score is 5.4 (Medium) with low privileges required, user interaction required, and a changed sc...

CVE-2026-82788

CPSL-08P1EN , a Contec product, is affected by a cross-site scripting (XSS) vulnerability. If exploited, an arbitrary script may be executed on a logged-in user's web browser. The vulnerability requires user interaction and is network-reachable with low complexity. CNA-assigned scores are CVSS 3....

CVE-2026-82788

Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

EUVD-2026-77234

Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82781

Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82781

Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82776

Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

EUVD-2026-77229

Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82776

A cross-site scripting (XSS) vulnerability exists in the CONPROSYS PAC Series . When exploited, an arbitrary script may be executed in the context of a logged-in user's web browser, with changed scope (CVSS 3.1: 6.1 MEDIUM ), indicating the impact extends beyond the vulnerable system to the subse...

CVE-2026-82773

A cross-site scripting (XSS) vulnerability affects CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series devices. When exploited, an arbitrary script may be executed in a logged-in user's web browser. The CNA (jpcert.or.jp) rates this MEDIUM severity (CVSS 3.1: 6.1, CVSS 4.0: 5.1), not...

EUVD-2026-77224

Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82771

Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82771

Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82771

A cross-site scripting (XSS) vulnerability affects the Contec EC1000 series , allowing an arbitrary script to be executed in a logged-in user's web browser. The CVSS 3.1 score is 5.4 (Medium) with changed scope , indicating cross-origin impact on subsequent system confidentiality and integrity. E...

EUVD-2026-77221

Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82769

A cross-site scripting (XSS) vulnerability affects the Contec RP-WAH-SR Series . If exploited, an arbitrary script may be executed in the web browser of a logged-in user . The CNA-assigned CVSS 3.1 score is 5.4 (MEDIUM) with a changed scope and low confidentiality/integrity impact, while the CVSS...