CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Reflected cross-site scripting (XSS) vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL. The vulnerable parameters are 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_EK.ASP'.
Reflected cross-site scripting (XSS) vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL. The vulnerable parameters are 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_DLG.ASP'.
Reflected cross-site scripting (XSS) vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL. The vulnerable parameters are 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_DLG.ASP'.
Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_DHL.ASP' are affected.
AndSoft e-TMS version v25.03 contains a reflected XSS vulnerability. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL. The vulnerability affects the 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_DELCROIX.ASP'.
Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_CYLOG.ASP' are affected.
Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_CATOLD.ASP' are affected.
Reflected XSS vulnerability in AndSoft's e-TMS v25.03. It allows an attacker to execute JavaScript in the victim's browser via a malicious URL. Parameters 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in 'SuppConn in /clt/LOGINFRM_CON.ASP' are affected.
Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_CAT.ASP' are affected.
Reflected XSS vulnerability in AndSoft's e-TMS v25.03. It allows an attacker to execute JavaScript in the victim's browser via a malicious URL. Parameters 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in '/clt/LOGINFRM_original.ASP' are affected.
Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_BET.ASP' are affected.
Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_LXA.ASP' are affected.
Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_DJO.ASP' are affected.
Reflected XSS vulnerability in AndSoft's e-TMS v25.03. An attacker can execute JavaScript in the victim's browser by sending a malicious URL. The 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM.ASP' are affected.
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' parameter in '/clt/TRACK_REQUEST.ASP'.
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' and 'reset' parameters in '/clt/changepassword.asp'.
Reflected XSS vulnerability in AndSoft's e-TMS v25.03. It allows an attacker to execute JavaScript in the victim's browser by sending a malicious URL. The 'l' parameter in '/clt/resetPassword.asp' is affected.
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'm' parameter in '/lib/asp/alert.asp'.
A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root. Affects Tumbleweed before version 4.98.2-lp156.248.1.
Incorrect Cross-Origin Resource Sharing (CORS) configuration in Hiberus Sintra. CORS allows browsers to make cross-domain requests in a controlled manner. This request has an “Origin” header that identifies the domain making the initial request and defines the protocol between a browser and a server to see if the request is allowed. An attacker can exploit this and potentially perform privileged actions and access confidential information when Access-Control-Allow-Credentials is enabled.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS