Known vulnerabilities in WeGIA - page 4

Vendor: LabReDeS
Software: WeGIA
Software CPE: cpe:2.3:a:labredes:wegia:*:*:*:*:*:*:*:*
Total vulnerabilities: 205
Public exploits: 12
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WeGIA WeGIA is affected by 205 known vulnerabilities: 47 high, 112 medium, 46 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128674 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-55168
CWE-89 Medium
No
No
3.4.8 30.04.2026 SB2026043089
#VU128673 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-55169
CWE-22 High
No
No
3.4.8 30.04.2026 SB2026043089
#VU128672 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-55167
CWE-89 Medium
No
No
3.4.8 30.04.2026 SB2026043089
#VU128671 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-57761
CWE-89 Medium
No
No
3.4.10 30.04.2026 SB2026043090
#VU128670 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-55170
CWE-79 Medium
No
No
3.4.8 30.04.2026 SB2026043089
#VU128669 - Improper Authentication
CVE-2025-55171
CWE-287 Medium
No
No
3.4.8 30.04.2026 SB2026043089
#VU127886 - Information Exposure Through an Error Message
CVE-2026-42873
CWE-209 Low
No
No
3.6.10 25.04.2026 SB20260423174
#VU127885 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-42872
CWE-79 Medium
No
No
3.7.0 25.04.2026 SB20260425198
#VU127884 - Information Exposure Through an Error Message
CVE-2026-42871
CWE-209 Medium
No
No
3.7.0 25.04.2026 SB20260425198
#VU127883 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-42870
CWE-79 Medium
No
No
3.7.0 25.04.2026 SB20260425198
#VU127352 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-40286
CWE-79 Medium
No
No
3.6.10 23.04.2026 SB20260423174
#VU127350 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-40285
CWE-89 Medium
No
No
3.6.10 23.04.2026 SB20260423174
#VU127348 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-40284
CWE-79 Low
No
No
3.6.10 23.04.2026 SB20260423174
#VU127346 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-40283
CWE-79 Low
No
No
3.6.10 23.04.2026 SB20260423174
#VU127344 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-40282
CWE-79 Medium
No
No
3.6.10 23.04.2026 SB20260423174
#VU127342 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33991
CWE-89 Medium
No
No
3.6.7 23.04.2026 SB20260423172
#VU127340 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
3.6.7 23.04.2026 SB20260423172
#VU127339 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33133
CWE-89 Medium
No
No
3.6.7 23.04.2026 SB20260423172
#VU127336 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33135
CWE-79 Medium
No
No
3.6.7 23.04.2026 SB20260423172
#VU127334 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33136
CWE-79 Medium
No
No
3.6.7 23.04.2026 SB20260423172


Showing elements 61 - 80 out of 205