Skip to content
OpenAdvisories

Archive

3 March 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-24415 Public exploit

    OpenSTAManager affected by reflected XSS in modifica_iva.php via righe parameter

    OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contains Reflected XSS vulnerabilities in invoice/order/contract modification modals. The application fails to properly sanitize use…

  • Medium 4.3
    CVE-2026-3494 Public exploit

    MariaDB Server Audit Plugin Comment Handling Bypass

    In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen…