High
CVE-2026-24416
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filters
High
CVE-2025-69216
OpenSTAManager has a SQL Injection in Scadenzario Print Template
Critical
CVE-2025-69212
OpenSTAManager has an OS Command Injection in P7M File Processing
Low
CVE-2026-22254
Winter CMS has Stored Cross-site Scripting (XSS) in Asset Manager
High
CVE-2025-69215
OpenSTAManager has an SQL Injection in the Stampe Module
High
CVE-2025-69213
OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)
High
CVE-2026-25514
FacturaScripts has SQL Injection in Autocomplete Actions
High
CVE-2026-25513
FacturaScripts has SQL Injection in API ORDER BY Clause
High
CVE-2025-67853
Moodle Affected by Improper Restriction of Excessive Authentication Attempts
Medium
CVE-2025-67856
Moodle has an authorization logic flaw
High
CVE-2025-67848
Moodle authentication bypass vulnerability
High
CVE-2025-67849
Moodle Cross-site Scripting (XSS) vulnerability
Medium
CVE-2026-25522
Craft Commerce has Stored XSS in Shipping Zone (Name & Description) Fields Leading to Potential Privilege Escalation
Medium
CVE-2026-25490
Craft Commerce has Stored XSS in Inventory Location Address Leading to Potential Privilege Escalation
Medium
CVE-2026-25489
Craft Commerce has Stored XSS in Tax Zones (Name & Description) Leading to Potential Privilege Escalation
Medium
CVE-2026-25488
Craft Commerce has Stored XSS in Tax Categories (Name & Description) Fields Leading to Potential Privilege Escalation
Medium
CVE-2026-25487
Craft CMS has Stored XSS in Tax Rates Name Leading to Potential Privilege Escalation
Medium
CVE-2026-25486
Craft Commerce has Stored XSS in Shipping Methods Name Field Leading to Potential Privilege Escalation
Medium
CVE-2026-25485
Craft Commerce has Stored XSS in Shipping Categories (Name & Description) Fields Leading to Potential Privilege Escalation
Medium
CVE-2026-25483
Craft Commerce has Stored XSS via Order Status Message with potential database exfiltration
Medium
CVE-2026-25482
Craft Commerce has Stored DOM XSS in Order Status Name (Reflects in "Recent Orders" Dashboard Widget)
Critical
CVE-2026-25510
CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor
Medium
CVE-2026-25509
CI4MS Vulnerable to User Email Enumeration via Password Reset Flow
High
CVE-2026-23997
FacturaScripts has Stored Cross-Site Scripting (XSS) in "Observations" field via History View
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.