Known vulnerabilities in WeGIA - page 2

Vendor: LabReDeS
Software: WeGIA
Software CPE: cpe:2.3:a:labredes:wegia:*:*:*:*:*:*:*:*
Total vulnerabilities: 205
Public exploits: 12
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WeGIA WeGIA is affected by 205 known vulnerabilities: 47 high, 112 medium, 46 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130450 - Use of a One-Way Hash without a Salt
CVE-2026-45027
CWE-759 Medium
No
No
3.7.3 07.05.2026 SB2026050782
#VU129029 - Resource exhaustion
CVE-2025-53531
CWE-400 Medium
No
No
3.3.0 02.05.2026 SB20260502156
#VU129028 - Resource exhaustion
CVE-2025-53530
CWE-400 Medium
No
No
3.3.0 02.05.2026 SB20260502156
#VU129055 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27499
CWE-79 Medium
No
No
3.2.10 03.03.2025 SB2025030359
#VU129035 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27420
CWE-79 Medium
No
No
3.2.16 02.03.2025 SB2025030113
#VU129027 - Allocation of Resources Without Limits or Throttling
CVE-2025-27419
CWE-770 High
No
No
3.2.16 02.03.2025 SB2025030113
#VU129036 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27418
CWE-79 Medium
No
No
3.2.16 01.03.2025 SB2025030113
#VU129037 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27417
CWE-79 Medium
No
No
3.2.16 01.03.2025 SB2025030113
#VU129022 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-26612
CWE-89 High
No
No
3.2.13 16.02.2025 SB2025021601
#VU129021 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-26611
CWE-89 High
No
No
3.2.13 16.02.2025 SB2025021601
#VU129020 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-26610
CWE-89 Medium
No
No
3.2.13 16.02.2025 SB2025021601
#VU129019 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-26609
CWE-89 High
No
No
3.2.13 16.02.2025 SB2025021601
#VU129018 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-26608
CWE-89 High
No
No
3.2.13 16.02.2025 SB2025021601
#VU129017 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-26607
CWE-89 High
No
No
3.2.13 16.02.2025 SB2025021601
#VU129016 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-26606
CWE-89 High
No
No
3.2.13 16.02.2025 SB2025021601
#VU129015 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-26605
CWE-89 Medium
No
No
3.2.13 16.02.2025 SB2025021601
#VU129031 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-24020
CWE-601 Low
No
No
3.2.11 21.01.2025 SB2025012199
#VU129032 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-23220
CWE-89 High
No
No
3.2.10 20.01.2025 SB2025030359
#VU129033 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-23219
CWE-89 High
No
No
3.2.10 20.01.2025 SB2025030359
#VU129034 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-23218
CWE-89 High
No
No
3.2.10 20.01.2025 SB2025030359


Showing elements 21 - 40 out of 205