Lucene search
+L

7 matches found

EUVD
EUVD
•added 2026/09/28 12:30 a.m.•20 views

EUVD-2026-88028

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is possible to launch the attack remotely. Attacks of this...

2.6CVSS3.5AI score0.00179EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/27 10:17 p.m.•19 views

CVE-2026-100881

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is possible to launch the attack remotely. Attacks of this...

2.6CVSS0.00179EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/27 9:15 p.m.•12 views

CVE-2026-100881 zhistaredu StarTraining application.yml cross site scripting

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is possible to launch the attack remotely. Attacks of this...

2.6CVSS3.8AI score0.00179EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/27 9:15 p.m.•34 views

CVE-2026-100881 zhistaredu StarTraining application.yml cross site scripting

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is possible to launch the attack remotely. Attacks of this...

2.6CVSS0.00179EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/27 9:15 p.m.•24 views

CVE-2026-100881

The zhistaredu StarTraining application (versions up to 3.8.1 ) is vulnerable to cross-site scripting (XSS) . The root cause involves the manipulation of the xss.enabled argument during the processing of the application.yml file. This vulnerability can be triggered remotely, though the attack com...

2.6CVSS3.5AI score0.00179EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•13 views

CVE-2026-100881: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is possible to launch the attack remotely. Attacks of this...

2.6CVSS3.8AI score0.00179EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/27 12:00 a.m.•11 views

PT-2026-99707

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is possible to launch the attack remotely. Attacks of this...

2.6CVSS3.8AI score0.00179EPSS
SaveExploits0References9
Rows per page
Query Builder