High
CVE-2026-62944
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 74
Reset filters
Medium
CVE-2026-52883
MantisBT: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIs
Medium
CVE-2026-52882
MantisBT: REST and SOAP API Issue Update Accepts Unreleased Product Versions From Updaters
Critical
CVE-2026-52881
MantisBT: Reflected XSS in admin/install.php via unescaped printf
Critical
CVE-2026-52847
MantisBT: Reflected XSS in admin/install.php
Medium
CVE-2026-49280
MantisBT: REST API unauthorized Issue status change
High
CVE-2026-49273
MantisBT: Remote Code Execution via eval() Class Hoisting in adm_config_set.php
Critical
CVE-2026-47156
MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator
High
CVE-2026-47142
MantisBT: SQL Injection via history_order Configuration Value
High
CVE-2026-44657
MantisBT Vulnerable to Stored XSS in File Download
High
CVE-2026-44655
MantisBT has Stored XSS on Move Attachments Admin Page
High
CVE-2026-42071
MantisBT has a Private Bugnote Attachment Content Leak via REST API
Medium
CVE-2026-42070
MantisBT: Authorization Bypass in Bugnote Editing via Issue Update API
Medium
CVE-2026-41897
MantisBT is Vulnerable to Reflected XSS in Rendering Dynamic Custom Textarea Field
High
CVE-2026-40607
MantisBT is Vulnerable to Stored XSS in Saved-Filter Owner Column
Medium
CVE-2026-40598
MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update Page
High
CVE-2026-40597
MantisBT has a Content Security Policy bypass via attachments
High
CVE-2026-40596
MantisBT is Vulnerable to XSS leading to account takeover via updating a user's font family preference
Medium
CVE-2026-39960
MantisBT is Vulnerable to Stored XSS in Custom Field Textarea Values
Medium
CVE-2026-34970
MantisBT: Bugnote Revision Page Leaks Private Issue Metadata After Issue Access Is Revoked
Medium
CVE-2026-34754
MantisBT has an Authorization Bypass that Allows Uploading Attachments to Private Issues via REST API
Medium
CVE-2026-34744
MantisBT has an authorization bypass that allows reading attachments after losing access to a private issue
Medium
CVE-2026-34579
MantisBT has an authorization bypass in private issue monitoring
High
CVE-2026-34463
MantisBT is Vulnerable to Stored HTML Injection/XSS in Clone Issue Form
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.