Known vulnerabilities in WeGIA - page 9

Vendor: LabReDeS
Software: WeGIA
Software CPE: cpe:2.3:a:labredes:wegia:*:*:*:*:*:*:*:*
Total vulnerabilities: 205
Public exploits: 12
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WeGIA WeGIA is affected by 205 known vulnerabilities: 47 high, 112 medium, 46 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128705 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-30367
CWE-89 Medium
No
No
3.2.6 27.03.2025 SB20250327162
#VU128709 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-30363
CWE-79 Medium
No
No
3.2.6 27.03.2025 SB20250327162
#VU128711 - Improper Authentication
CVE-2025-30361
CWE-287 Medium
No
No
3.2.6 27.03.2025 SB20250327162
#VU128712 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-29782
CWE-79 Medium
No
No
3.2.17 14.03.2025 SB2025031486
#VU129055 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27499
CWE-79 Medium
No
No
3.2.10 03.03.2025 SB2025030359
#VU129035 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27420
CWE-79 Medium
No
No
3.2.16 02.03.2025 SB2025030113
#VU129027 - Allocation of Resources Without Limits or Throttling
CVE-2025-27419
CWE-770 High
No
No
3.2.16 02.03.2025 SB2025030113
#VU129036 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27418
CWE-79 Medium
No
No
3.2.16 01.03.2025 SB2025030113
#VU129032 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-23220
CWE-89 High
No
No
3.2.10 20.01.2025 SB2025030359
#VU129033 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-23219
CWE-89 High
No
No
3.2.10 20.01.2025 SB2025030359
#VU129034 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-23218
CWE-89 High
No
No
3.2.10 20.01.2025 SB2025030359
#VU129054 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23038
CWE-79 Medium
No
No
3.2.8 14.01.2025 SB20250327163
#VU129039 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23037
CWE-79 Medium
No
No
3.2.8 13.01.2025 SB20250327163
#VU129040 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23036
CWE-79 Medium
No
No
3.2.8 13.01.2025 SB20250327163
#VU129041 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23035
CWE-79 Medium
No
No
3.2.8 13.01.2025 SB20250327163
#VU129042 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23034
CWE-79 Medium
No
No
3.2.8 13.01.2025 SB20250327163
#VU129043 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23033
CWE-79 Medium
No
No
3.2.8 13.01.2025 SB20250327163
#VU129044 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23032
CWE-79 Medium
No
No
3.2.8 13.01.2025 SB20250327163
#VU129046 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23031
CWE-79 Medium
No
No
3.2.8 13.01.2025 SB20250327163
#VU129047 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23030
CWE-79 Medium
No
No
3.2.8 13.01.2025 SB20250327163


Showing elements 161 - 180 out of 205