CVE-2026-108050

A stored Cross-Site Scripting XSS vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation require...

EUVD-2026-115808

A stored Cross-Site Scripting XSS vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation require...

CVE-2026-108059 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

A stored Cross-Site Scripting XSS vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation require...

EUVD-2026-115807

A stored Cross-Site Scripting XSS vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation require...

EUVD-2026-115806

A stored Cross-Site Scripting XSS vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation require...

CVE-2026-108057 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

A stored Cross-Site Scripting XSS vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation require...

CVE-2026-108052

A stored Cross-Site Scripting (XSS) vulnerability exists in Alosuite affecting the delivery note functionality . The root cause is insufficient sanitization and encoding of fields within the '/CategoriasFicheros/Edit/{id}' endpoint, allowing an attacker with low-level authenticated access to stor...

EUVD-2026-115801

A stored Cross-Site Scripting XSS vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation require...

CVE-2026-108050

A stored Cross-Site Scripting (XSS) vulnerability exists in Alosuite within the delivery note functionality . The root cause is insufficient sanitization and encoding of the ReferenceOtherParty parameter in the /Documents/DeliveryNotes/Edit/{id} endpoint. An authenticated attacker can store malic...

CVE-2026-108050 Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

A stored Cross-Site Scripting XSS vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation require...

EUVD-2026-115799

A stored Cross-Site Scripting XSS vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of the specified fields allow JavaScript to be stored, which executes in other users’ browsers when they view the affected records. Exploitation require...

Missing Authorization

Overview @grackle-ai/plugin-core is a Core plugin for Grackle — gRPC handlers, reconciliation phases, and event subscribers Affected versions of this package are vulnerable to Missing Authorization due to inconsistent enforcement of authorization checks in the tool layer. An attacker can gain...

CVE-2026-55110

Summary: CVE-2026-55110 describes a CORS misconfiguration in UniFi OS that could allow a malicious page to trigger actions in UniFi OS using an authenticated user’s session after the user visits a malicious page. Affected software/component: UniFi OS (CORS configuration issue). Root cause: CORS m...

SearchBlox Cross-Site Request Forgery Vulnerability

SearchBlox is an enterprise search solution , built on Lucene . SearchBlox has a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious operations in the context of the target user...

PT-2009-5891 · Qemu · Qemu

Name of the Vulnerable Software and Affected Versions: QEMU versions 0.10.6 and earlier Description: The issue is related to multiple use-after-free vulnerabilities in the VNC server component of QEMU. These vulnerabilities might allow guest OS users to execute arbitrary code on the host OS. This...