Low
CVE-2026-44701
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filters
High
CVE-2026-38751
OpenSTAManager contains an arbitrary file upload vulnerability in its module update functionality
High
CVE-2026-35470
OpenSTAManager has a SQL Injection via righe Parameter in confronta_righe Modals
High
CVE-2026-35168
OpenSTAManager: SQL Injection via Aggiornamenti Module
High
CVE-2026-29782
OpenSTAManager Affected by Remote Code Execution via Insecure Deserialization in OAuth2
High
CVE-2026-28805
OpenSTAManager has a Time-Based Blind SQL Injection via `options[stato]` Parameter
Critical
CVE-2026-27012
OpenSTAManager affected by unauthenticated privilege escalation via modules/utenti/actions.php
Medium
CVE-2026-24415
OpenSTAManager Affected by XSS in modifica_iva.php via righe parameter
High
CVE-2026-24419
OpenSTAManager has a SQL Injection in the Prima Nota module
High
CVE-2026-24418
OpenSTAManager has a SQL Injection vulnerability in the Scadenzario bulk operations module
High
CVE-2026-24417
OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service
High
CVE-2026-24416
OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module
High
CVE-2025-69216
OpenSTAManager has a SQL Injection in Scadenzario Print Template
High
CVE-2025-69214
OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)
Critical
CVE-2025-69212
OpenSTAManager has an OS Command Injection in P7M File Processing
High
CVE-2025-69215
OpenSTAManager has an SQL Injection in the Stampe Module
High
CVE-2025-69213
OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)
High
CVE-2025-65103
OpenSTAManager has Authenticated SQL Injection in API via 'display' parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.