Known vulnerabilities in WeGIA - page 6

Vendor: LabReDeS
Software: WeGIA
Software CPE: cpe:2.3:a:labredes:wegia:*:*:*:*:*:*:*:*
Total vulnerabilities: 205
Public exploits: 12
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WeGIA WeGIA is affected by 205 known vulnerabilities: 47 high, 112 medium, 46 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128705 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-30367
CWE-89 Medium
No
No
3.2.6 27.03.2025 SB20250327162
#VU128709 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-30363
CWE-79 Medium
No
No
3.2.6 27.03.2025 SB20250327162
#VU128711 - Improper Authentication
CVE-2025-30361
CWE-287 Medium
No
No
3.2.6 27.03.2025 SB20250327162
#VU128712 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-29782
CWE-79 Medium
No
No
3.2.17 14.03.2025 SB2025031486
#VU129025 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-27140
CWE-78 High
No
No
3.2.15 24.02.2025 SB2025022301
#VU128714 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-27133
CWE-89 Medium
No
No
3.2.15 23.02.2025 SB2025022301
#VU128713 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-27096
CWE-89 Medium
No
No
3.2.14 20.02.2025 SB2025021748
#VU128719 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-26617
CWE-89 High
No
No
3.2.14 17.02.2025 SB2025021748
#VU129023 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-26616
CWE-22 High
No
No
3.2.14 17.02.2025 SB2025021748
#VU129026 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-26615
CWE-22 High
No
No
3.2.14 17.02.2025 SB2025021748
#VU128722 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-26614
CWE-89 Medium
No
No
3.2.14 17.02.2025 SB2025021748
#VU129024 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-26613
CWE-78 High
No
No
3.2.14 17.02.2025 SB2025021748
#VU128715 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-24958
CWE-89 Medium
No
No
3.2.12 01.02.2025 SB2025020101
#VU129054 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23038
CWE-79 Medium
No
No
3.2.8 14.01.2025 SB20250327163
#VU129039 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23037
CWE-79 Medium
No
No
3.2.8 13.01.2025 SB20250327163
#VU129040 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23036
CWE-79 Medium
No
No
3.2.8 13.01.2025 SB20250327163
#VU129041 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23035
CWE-79 Medium
No
No
3.2.8 13.01.2025 SB20250327163
#VU129042 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23034
CWE-79 Medium
No
No
3.2.8 13.01.2025 SB20250327163
#VU129043 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23033
CWE-79 Medium
No
No
3.2.8 13.01.2025 SB20250327163
#VU129044 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23032
CWE-79 Medium
No
No
3.2.8 13.01.2025 SB20250327163


Showing elements 101 - 120 out of 205