Ddevcode-it

Products

Exploited and recent CVEs

• CVE-2026-35470 High 8.8 OpenSTAManager has a SQL Injection via righe Parameter in confronta_righe Modals 0.4%
• CVE-2026-35168 High 8.8 OpenSTAManager: SQL Injection via Aggiornamenti Module 0.7%
• CVE-2026-28805 High 8.8 OpenSTAManager: Time-Based Blind SQL Injection via `options[stato]` Parameter 0.5%
• CVE-2026-29782 High 7.2 OpenSTAManager: Remote Code Execution via Insecure Deserialization in OAuth2 0.6%
• CVE-2026-27012 Critical 9.8 Unauthenticated privilege escalation in OpenSTAManager via modules/utenti/actions.php 0.6%
• CVE-2026-24415 Medium 5.1 OpenSTAManager affected by reflected XSS in modifica_iva.php via righe parameter 0.3%
• CVE-2025-69212 Critical 9.4 OpenSTAManager has an OS Command Injection in P7M File Processing 1.9%
• CVE-2025-69214 High 8.7 OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint) 0.5%
• CVE-2025-69216 High 8.7 OpenSTAManager has an SQL Injection in Scadenzario Print Template 0.4%
• CVE-2026-24416 High 8.7 OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module 0.4%
• CVE-2026-24417 High 8.7 OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service 0.4%
• CVE-2026-24418 High 8.7 OpenSTAManager has an SQL Injection vulnerability in the Scadenzario bulk operations module 0.4%
• CVE-2026-24419 High 8.7 OpenSTAManager has an SQL Injection in the Prima Nota module 0.4%
• CVE-2025-69215 High 8.7 OpenSTAManager has an SQL Injection in the Stampe Module 0.4%
• CVE-2025-69213 High 8.7 OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint) 0.5%
• CVE-2025-65103 High 8.8 OpenSTAManager has an authenticated SQL Injection vulnerability in API via 'display' parameter 0.4%