High
CVE-2026-24419
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
High
CVE-2026-24418
OpenSTAManager has a SQL Injection vulnerability in the Scadenzario bulk operations module
High
CVE-2026-24417
OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service
High
CVE-2026-24416
OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module
High
CVE-2025-69216
OpenSTAManager has a SQL Injection in Scadenzario Print Template
High
CVE-2025-69214
OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)
Critical
CVE-2025-69212
OpenSTAManager has an OS Command Injection in P7M File Processing
Low
CVE-2025-70792
Microweber Cross-site Scripting vulnerability
Low
CVE-2025-70791
Microweber has a Cross-site Scripting vulnerability
Low
CVE-2026-22254
Winter CMS has Stored Cross-site Scripting (XSS) in Asset Manager
Unrated
CVE-2026-1917
drupal/login_disable - SA-CONTRIB-2026-008
Medium
CVE-2026-25597
PrestaShop affected by time based enumeration in FO login form
High
CVE-2025-69215
OpenSTAManager has an SQL Injection in the Stampe Module
High
CVE-2025-69213
OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)
High
CVE-2026-25514
FacturaScripts has SQL Injection in Autocomplete Actions
High
CVE-2026-25513
FacturaScripts has SQL Injection in API ORDER BY Clause
High
CVE-2025-67853
Moodle Affected by Improper Restriction of Excessive Authentication Attempts
Medium
CVE-2025-67856
Moodle has an authorization logic flaw
Medium
CVE-2025-67855
Moodle vulnerable to Cross-site Scripting
Medium
CVE-2025-67857
Moodle Inserts Sensitive Information Into Sent Data
Low
CVE-2025-67852
Moodle Open Redirect vulnerability
High
CVE-2025-67848
Moodle authentication bypass vulnerability
High
CVE-2025-67849
Moodle Cross-site Scripting (XSS) vulnerability
High
CVE-2025-67850
Moodle vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.