Known vulnerabilities in WeGIA - page 7

Vendor: LabReDeS
Software: WeGIA
Software CPE: cpe:2.3:a:labredes:wegia:*:*:*:*:*:*:*:*
Total vulnerabilities: 205
Public exploits: 12
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WeGIA WeGIA is affected by 205 known vulnerabilities: 47 high, 112 medium, 46 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127886 - Information Exposure Through an Error Message
CVE-2026-42873
CWE-209 Low
No
No
3.6.10 25.04.2026 SB20260423174
#VU127885 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-42872
CWE-79 Medium
No
No
3.7.0 25.04.2026 SB20260425198
#VU127884 - Information Exposure Through an Error Message
CVE-2026-42871
CWE-209 Medium
No
No
3.7.0 25.04.2026 SB20260425198
#VU127883 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-42870
CWE-79 Medium
No
No
3.7.0 25.04.2026 SB20260425198
#VU127352 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-40286
CWE-79 Medium
No
No
3.6.10 23.04.2026 SB20260423174
#VU127350 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-40285
CWE-89 Medium
No
No
3.6.10 23.04.2026 SB20260423174
#VU127348 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-40284
CWE-79 Low
No
No
3.6.10 23.04.2026 SB20260423174
#VU127346 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-40283
CWE-79 Low
No
No
3.6.10 23.04.2026 SB20260423174
#VU127344 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-40282
CWE-79 Medium
No
No
3.6.10 23.04.2026 SB20260423174
#VU127342 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33991
CWE-89 Medium
No
No
3.6.7 23.04.2026 SB20260423172
#VU127340 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
3.6.7 23.04.2026 SB20260423172
#VU127339 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33133
CWE-89 Medium
No
No
3.6.7 23.04.2026 SB20260423172
#VU127336 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33135
CWE-79 Medium
No
No
3.6.7 23.04.2026 SB20260423172
#VU127334 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33136
CWE-79 Medium
No
No
3.6.7 23.04.2026 SB20260423172
#VU127326 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-31895
CWE-89 Medium
No
No
3.6.6 23.04.2026 SB20260423171
#VU128716 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-24957
CWE-89 High
No
No
3.2.12 01.02.2025 SB2025020101
#VU128717 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-24906
CWE-89 High
No
No
3.2.12 01.02.2025 SB2025020101
#VU128718 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-24905
CWE-89 High
No
No
3.2.12 01.02.2025 SB2025020101
#VU128720 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-24902
CWE-89 Medium
No
No
3.2.12 01.02.2025 SB2025020101
#VU128721 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-24901
CWE-89 Medium
No
No
3.2.12 01.02.2025 SB2025020101


Showing elements 121 - 140 out of 205