ROS-20261002-73-0022

The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2026-104197

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affected – endpoint “/es/companysizebills/store”...

PT-2026-104196

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affected – endpoint “/es/companysizemployees/update”...

PT-2026-104189

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomCompetidor” parameter is affected – endpoint “/es/competitors/store”...

PT-2026-104172

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomRuta” parameter is affected – endpoint “/es/routes/update/693”...

PT-2026-104174

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTipoCli” parameter is affected – endpoint “/es/clientypes/update/109441”...

PT-2026-104411

Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions prior to 4.1.17 Description A code execution issue exists in the Java integration of the software. A crafted untrusted document can trigger the execution of arbitrary code, including remote code, when opened by a use...

CVE-2026-95662: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomCompetidor” parameter is affected – endpoint “/es/competitors/store”...

CVE-2026-59667: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affected – endpoint “/es/companysizemployees/update”...

CVE-2026-93697: Improper Neutralization of Input During Web Page Generation

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

ROS-20261002-73-0029

The vulnerabilities of the levenshtein and levenshteinlessequal functions in the fuzzystrmatch database extension of the PostgreSQL database management system are related to integer overflow. Exploiting these vulnerabilities could allow an attacker to execute arbitrary code...

ROS-20261002-73-0052

The vulnerability of the refint module in the PostgreSQL database management system is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261002-73-0053

The vulnerability of the refint module in the PostgreSQL database management system is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-59662: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomCompetidor” parameter is affected – endpoint “/es/competitors/store”...

Piscina ThreadPoolOptions Code Execution

The vulnerability of the ThreadPoolOptions component in the Piscina library of the Node.js software platform is related to uncontrolled changes to prototype attributes of objects. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

ColdFusion Code Execution

The vulnerability of the ColdFusion software platform lies in the lack of measures taken to neutralize instructions in dynamically executed code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Adobe XD Buffer Overflow RCE

The vulnerability of the Adobe Experience Design Adobe XD interface development software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

ROS-20261002-73-0107

The vulnerability of the amcheck extension in the PostgreSQL database management system is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code by manipulating the searchpath parameter...

ROS-20261002-73-0105

The vulnerability of the amcheck extension in the PostgreSQL database management system is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code by manipulating the searchpath parameter...