İçeriğe atla
Noroxi

devcode kayıtları

devcode üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%29,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

17 kayıt
  • CVE-2026-27012
    39İzleyin

    Unauthenticated privilege escalation in OpenSTAManager via modules/utenti/actions.php

    KritikCVSS 9,8İstismar yokEPSS %1

    devcode · openstamanager3 Mar 2026

  • CVE-2025-69212
    38İzleyin

    OpenSTAManager has an OS Command Injection in P7M File Processing

    KritikCVSS 9,4Kavram kanıtıEPSS %2

    devcode · openstamanager6 Şub 2026

  • CVE-2026-35168
    35İzleyin

    OpenSTAManager: SQL Injection via Aggiornamenti Module

    YüksekCVSS 8,8İstismar yokEPSS %1

    devcode · openstamanager2 Nis 2026

  • CVE-2026-28805
    35İzleyin

    OpenSTAManager: Time-Based Blind SQL Injection via `options[stato]` Parameter

    YüksekCVSS 8,8İstismar yokEPSS %1

    devcode · openstamanager2 Nis 2026

  • CVE-2026-35470
    35İzleyin

    OpenSTAManager has a SQL Injection via righe Parameter in confronta_righe Modals

    YüksekCVSS 8,8İstismar yokEPSS %0

    devcode · openstamanager6 Nis 2026

  • CVE-2025-69214
    34İzleyin

    OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager6 Şub 2026

  • CVE-2025-69213
    34İzleyin

    OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager4 Şub 2026

  • CVE-2025-69215
    34İzleyin

    OpenSTAManager has an SQL Injection in the Stampe Module

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager4 Şub 2026

  • CVE-2026-24416
    34İzleyin

    OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager6 Şub 2026

  • CVE-2026-24417
    34İzleyin

    OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager6 Şub 2026

  • CVE-2026-24418
    34İzleyin

    OpenSTAManager has an SQL Injection vulnerability in the Scadenzario bulk operations module

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager6 Şub 2026

  • CVE-2025-69216
    34İzleyin

    OpenSTAManager has an SQL Injection in Scadenzario Print Template

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager6 Şub 2026

  • CVE-2026-24419
    34İzleyin

    OpenSTAManager has an SQL Injection in the Prima Nota module

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager6 Şub 2026

  • CVE-2026-29782
    28İzleyin

    OpenSTAManager: Remote Code Execution via Insecure Deserialization in OAuth2

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    devcode · openstamanager2 Nis 2026

  • CVE-2026-38751
    28İzleyin

    OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality (modules/aggiorna

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    devcode · openstamanager4 May 2026

  • CVE-2023-38878
    24İzleyin

    A reflected cross-site scripting (XSS) vulnerability in DevCode OpenSTAManager versions 2.4.24 to 2.4.47 may allow a remote attacker to exec

    OrtaCVSS 6,1İstismar yokEPSS %1

    devcode · openstamanager11 Eyl 2023

  • CVE-2026-24415
    20İzleyin

    OpenSTAManager affected by reflected XSS in modifica_iva.php via righe parameter

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    devcode · openstamanager3 Mar 2026