Medium
CVE-2026-34390
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 74
Reset filters
Medium
CVE-2026-33052
MantisBT Has Authorization Bypass in Global Profile Creation
High
CVE-2026-33548
MantisBT has Stored HTML Injection/XSS when displaying Tags in Timeline
High
CVE-2026-33517
MantisBT Vulnerable to Stored HTML Injection in Tag Delete Confirmation
Critical
CVE-2026-30849
MantisBT is vulnerable to authentication bypass through the SOAP API on MySQL
Medium
CVE-2025-62520
MantisBT unauthorized disclosure of private project column configuration
Medium
CVE-2025-55155
MantisBT lacks verification when changing a user's email address
Medium
CVE-2025-46556
MantisBT Vulnerable to Denial-of-Service (DoS) via Excessive Note Length
High
CVE-2025-47776
MantisBT vulnerable to authentication bypass for some passwords due to PHP type juggling
Medium
CVE-2024-45792
MantisBT vulnerable to information disclosure with user profiles
Medium
CVE-2024-34081
Mantis Bug Tracker (MantisBT) vulnerable to cross-site scripting
Medium
CVE-2024-34080
MantisBT Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
High
CVE-2024-34077
Mantis Bug Tracker (MantisBT) allows user account takeover in the signup/reset password process
High
CVE-2024-23830
MantisBT Host Header Injection vulnerability
Medium
CVE-2023-44394
MantisBT may disclose project names to unauthorized users
Medium
CVE-2023-22476
MantisBT may expose private issues' summaries to unauthorized users
Medium
CVE-2022-33910
MantisBT XSS through crafted SVG documents in file_download.php
Medium
CVE-2021-33557
MantisBT allows XSS in manage_custom_field_edit_page.php
Medium
CVE-2020-35571
MantisBT XSS in manage_custom_field_update.php
Medium
CVE-2020-29605
MantisBT Incorrect Authorization in bug_actiongroup_page.php
Medium
CVE-2020-29604
MantisBT Missing Authorization access check in bug_actiongroup.php
Medium
CVE-2020-29603
MantisBT Insecure Storage in manage_proj_edit_page.php
High
CVE-2020-35849
MantisBT Incorrect Authorization for bug_revision_view_page.php check
Medium
CVE-2020-28413
MantisBT SQL Injection via mc_project_get_users function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.