High
CVE-2026-40597
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filters
High
CVE-2026-40596
MantisBT is Vulnerable to XSS leading to account takeover via updating a user's font family preference
Medium
CVE-2026-39960
MantisBT is Vulnerable to Stored XSS in Custom Field Textarea Values
High
CVE-2026-39850
Yii 2: Local file inclusion via view parameter name collision
Medium
CVE-2026-34970
MantisBT: Bugnote Revision Page Leaks Private Issue Metadata After Issue Access Is Revoked
Medium
CVE-2026-34754
MantisBT has an Authorization Bypass that Allows Uploading Attachments to Private Issues via REST API
Medium
CVE-2026-34744
MantisBT has an authorization bypass that allows reading attachments after losing access to a private issue
Medium
CVE-2026-34579
MantisBT has an authorization bypass in private issue monitoring
High
CVE-2026-34463
MantisBT is Vulnerable to Stored HTML Injection/XSS in Clone Issue Form
Medium
CVE-2026-34390
MantisBT Vulnerable to Privilege Escalation from Manager to Administrator
Medium
CVE-2026-33052
MantisBT Has Authorization Bypass in Global Profile Creation
Critical
ghsa-h29g-c9cx-c73q
torrentpier has PHP Serialize Injections
High
CVE-2026-44521
elFinder MySQL has a SQL Injection in its Volume Driver (elFinderVolumeMySQL)
Medium
CVE-2026-44833
Snipe-IT has an open redirect vulnerability
High
CVE-2023-49316
Phpseclib needs guardrails on large binaryfield integers
Critical
CVE-2026-37709
Snipe-IT has insecure permissions in file uploads
High
CVE-2026-44832
Snipe-IT has Privilege Escalation via API Permissions Assignment
Medium
CVE-2026-44831
Snipe-IT has Stored XSS via Component Checkout Notes (v8.4.0)
Medium
CVE-2026-44298
Kimai has an arbitrary file read in its invoice PDF renderer (admin)
Medium
CVE-2026-44737
Grav: Stored XSS via page title (data[header][title]) in admin panel
High
CVE-2024-27355
phpseclib guardrails needed on OID length
Critical
CVE-2026-44212
PrestaShop has a stored XSS executable in customer service view
Low
ghsa-h4fw-6r7f-w494
Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy
Medium
CVE-2026-42879
FacturaScripts Vulnerable to Authenticated Remote Code Execution (RCE) via GIF Image Upload in Product Images
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.