Lucene search
+L

472982 matches found

CVE
CVE
•added 2026/10/02 9:12 a.m.•13 views

CVE-2026-59673

The Repasat application is vulnerable to a Cross-Site Scripting (XSS) vulnerability. Specifically, the "nomTipoCli" parameter at the "/es/clientypes/update/109441" endpoint is affected. Successful exploitation could allow an attacker to trick a user into executing arbitrary code within the victim...

4.8CVSS6.2AI score0.00379EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/02 9:09 a.m.•12 views

CVE-2026-59672 Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomGrupoEmpresarial” parameter is affected – endpoint "/es/corporategroups/update/246”...

4.8CVSS6.2AI score0.00379EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/02 9:09 a.m.•18 views

CVE-2026-59672

The Repasat application is subject to a Cross-Site Scripting (XSS) vulnerability. The root cause is linked to the "nomGrupoEmpresarial" parameter at the "/es/corporategroups/update/246" endpoint. Successful exploitation could allow an attacker to trick a user into executing arbitrary code within ...

4.8CVSS6.2AI score0.00379EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/02 9:09 a.m.•16 views

EUVD-2026-91331

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomGrupoEmpresarial” parameter is affected – endpoint "/es/corporategroups/update/246”...

4.8CVSS6.2AI score0.00379EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/02 9:09 a.m.•43 views

CVE-2026-59672 Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomGrupoEmpresarial” parameter is affected – endpoint "/es/corporategroups/update/246”...

4.8CVSS0.00379EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/02 8:40 a.m.•11 views

CVE-2026-59669 Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “name” parameter is affected – endpoint “/es/attachmenttypes/update/203336”...

4.8CVSS6.2AI score0.00315EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/02 8:40 a.m.•45 views

CVE-2026-59669 Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “name” parameter is affected – endpoint “/es/attachmenttypes/update/203336”...

4.8CVSS0.00315EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/02 8:40 a.m.•16 views

EUVD-2026-91319

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “name” parameter is affected – endpoint “/es/attachmenttypes/update/203336”...

4.8CVSS6.2AI score0.00315EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/02 8:40 a.m.•19 views

CVE-2026-59669

The Repasat application is vulnerable to a Cross-Site Scripting (XSS) flaw (CWE-79). The issue exists in the "name" parameter of the endpoint “/es/attachmenttypes/update/203336” . Successful exploitation could allow an attacker to trick a user into executing arbitrary code within their browser. N...

4.8CVSS6.2AI score0.00315EPSS
SaveExploits0References1
osv_clsa
osv_clsa
•added 2026/10/02 8:03 a.m.•15 views

CLSA-2026-1790928189 TuxCare security update for keras (3 CVEs)

TuxCare rebuilt keras to address 3 CVEs. Fixed in 2.15.0.post3+tuxcare...

9.8CVSS8.1AI score0.01745EPSS
SaveExploits3
CVE
CVE
•added 2026/10/02 6:56 a.m.•18 views

CVE-2026-97219

The MStore API WordPress plugin before version 4.22.1 is vulnerable to a payment bypass due to a lack of restriction on which fields of an order a customer can update. This allows any authenticated user with a self-registerable account to modify the status of their own unpaid orders to a paid or ...

4.3CVSS5.9AI score0.00185EPSS
SaveExploits0References1
Nuclei
Nuclei
•added 2026/10/02 2:11 a.m.•56 views

Zoho manageengine - Cross-Site Scripting

Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...

6.1CVSS6.1AI score0.99293EPSS
SaveExploits4References4
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•12 views

PT-2026-104171

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTransportista” parameter is affected – endpoint “/es/carriers/update”...

4.8CVSS6.2AI score0.00234EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•10 views

PT-2026-104159

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “name” parameter is affected – endpoint “/es/attachmenttypes/update/203336”...

4.8CVSS6.2AI score0.00315EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•11 views

PT-2026-104170

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomZonaGeo” parameter is affected – endpoint “/es/geozones/update/149979”...

4.8CVSS6.2AI score0.00234EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•10 views

PT-2026-104174

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTipoCli” parameter is affected – endpoint “/es/clientypes/update/109441”...

4.8CVSS6.2AI score0.00379EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•12 views

PT-2026-104172

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomRuta” parameter is affected – endpoint “/es/routes/update/693”...

4.8CVSS6.2AI score0.00234EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•17 views

PT-2026-104344

Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.2CVSS5.7AI score0.00139EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•18 views

PT-2026-104341

Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

7.6CVSS5.9AI score0.00296EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•15 views

PT-2026-104173

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomGrupoEmpresarial” parameter is affected – endpoint "/es/corporategroups/update/246”...

4.8CVSS6.2AI score0.00379EPSS
SaveExploits0References2
Rows per page
Query Builder