1054 matches found
EUVD-2026-61390
Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications component: POS. Supported versions that are affected are 19.8-19.8.5, 19.9-19.9.3 and 19.10-19.10.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
PT-2026-77347
Name of the Vulnerable Software and Affected Versions Oracle Hospitality Simphony versions 19.8 through 19.8.5 Oracle Hospitality Simphony versions 19.9 through 19.9.3 Oracle Hospitality Simphony versions 19.10 through 19.10.1 Description An unauthenticated attacker with network access via HTTP c...
PT-2026-77346
Name of the Vulnerable Software and Affected Versions Oracle Hospitality Simphony versions 19.8 through 19.8.5 Oracle Hospitality Simphony versions 19.9 through 19.9.3 Oracle Hospitality Simphony versions 19.10 through 19.10.1 Description An issue in the POS component allows an unauthenticated...
CVE-2026-17581
The WCPOS – Point of Sale POS plugin for WooCommerce plugin for WordPress is vulnerable to Code Injection via the 'thermal' Template Engine in all versions up to, and including, 1.9.14 due to the ReceiptRendererFactory dispatching templates with the 'thermal' engine to the LegacyPhpRenderer inste...
CVE-2026-70560
Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...
CVE-2026-70560
CVE-2026-70560 affects Ultimate POS (Stock Management & Point of Sale). A stored XSS vulnerability allows low-privileged authenticated users to inject arbitrary HTML/script by submitting a malicious payload in the user first-name field during account creation. When such a user with a low-privileg...
CVE-2026-70560 Ultimate POS Stored XSS via First Name Field in Leave Notifications
Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...
EUVD-2026-57170
Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...
CVE-2026-70560
Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...
CVE-2026-19426
POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system...
EUVD-2026-57148
POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system...
CVE-2026-19426
The CVE concerns a POS System by FitSoft with a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access and operate the system. Affected details from connected sources confirm the issue exists and yields high impact: CVSS v3.1 base score 8.2 (Network, LOW attack ...
CVE-2026-19426 FitSoft｜POS Sytstem - Missing Authentication
POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system...
CVE-2026-19426
POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system...
PT-2026-71035
POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system...
PT-2026-71057
Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...
CVE-2026-14328
The CVE-2026-14328 entry describes a Privilege Escalation in the Eazy Plugin Manager for WordPress (up to version 4.4.1). The root cause is insufficient authorization on the wp_ajax_pos_get_option AJAX handler, which returns arbitrary WordPress options via get_option() after only a localized nonc...
CVE-2026-16078
CVE-2026-16078 affects the WCPOS