Total
39561 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-59756 | 1 Andsoft | 1 E-tms | 2025-10-02 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in 'SuppConn in /clt/LOGINFRM_CON.ASP'. | |||||
| CVE-2025-59774 | 1 Andsoft | 1 E-tms | 2025-10-02 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_VON.ASP'. | |||||
| CVE-2025-59773 | 1 Andsoft | 1 E-tms | 2025-10-02 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_TP.ASP'. | |||||
| CVE-2025-59772 | 1 Andsoft | 1 E-tms | 2025-10-02 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_SIL.ASP'. | |||||
| CVE-2025-59771 | 1 Andsoft | 1 E-tms | 2025-10-02 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_MRK.ASP'. | |||||
| CVE-2025-59770 | 1 Andsoft | 1 E-tms | 2025-10-02 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_MON.ASP'. | |||||
| CVE-2025-59769 | 1 Andsoft | 1 E-tms | 2025-10-02 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_MOL.ASP'. | |||||
| CVE-2025-59768 | 1 Andsoft | 1 E-tms | 2025-10-02 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_MNG.ASP'. | |||||
| CVE-2025-59767 | 1 Andsoft | 1 E-tms | 2025-10-02 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_LVE.ASP'. | |||||
| CVE-2025-59766 | 1 Andsoft | 1 E-tms | 2025-10-02 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_LT.ASP'. | |||||
| CVE-2025-59765 | 1 Andsoft | 1 E-tms | 2025-10-02 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_LF.ASP'. | |||||
| CVE-2025-10341 | 1 Perfexcrm | 1 Perfex Crm | 2025-10-02 | N/A | 6.1 MEDIUM |
| HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'company' at the endpoint '/clients/client/x. | |||||
| CVE-2025-10342 | 1 Perfexcrm | 1 Perfex Crm | 2025-10-02 | N/A | 6.1 MEDIUM |
| HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'name' at the endpoint '/subscriptions/create'. | |||||
| CVE-2025-10343 | 1 Perfexcrm | 1 Perfex Crm | 2025-10-02 | N/A | 6.1 MEDIUM |
| HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'expense_name' at the endpoint '/expenses/expense'. | |||||
| CVE-2025-10344 | 1 Perfexcrm | 1 Perfex Crm | 2025-10-02 | N/A | 6.1 MEDIUM |
| HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'name' and 'clientid' at the endpoint '/projects/project/x'. | |||||
| CVE-2025-10345 | 1 Perfexcrm | 1 Perfex Crm | 2025-10-02 | N/A | 6.1 MEDIUM |
| HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'name' and 'address' at the endpoint 'admin/leads/lead'. | |||||
| CVE-2025-10346 | 1 Perfexcrm | 1 Perfex Crm | 2025-10-02 | N/A | 6.1 MEDIUM |
| HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'subject' at the endpoint 'knoewledge_base/article'. | |||||
| CVE-2025-59746 | 1 Andsoft | 1 E-tms | 2025-10-02 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'm' parameter in '/lib/asp/alert.asp'. | |||||
| CVE-2025-59747 | 1 Andsoft | 1 E-tms | 2025-10-02 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' parameter in '/clt/resetPassword.asp'. | |||||
| CVE-2025-59748 | 1 Andsoft | 1 E-tms | 2025-10-02 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' and 'reset' parameters in '/clt/changepassword.asp'. | |||||