cargo-audit-advisory-db-20250204-1.1 on GA media (moderate)

cargo-audit-advisory-db-20250204-1.1 on GA media Announcement ID: openSUSE-SU-2025:14726-1 Rating: moderate Cross-References: CVE-2024-52813 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2025:14726-1 cargo-audit-advisory-db-20250204-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20250204-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE-SU-2025:20071-1 Security update for sevctl

This update for sevctl fixes the following issues: Security issue fixed: - CVE-2023-50711: Fixed out of bounds memory accesses in a vendored dependency bsc1218502 Non-security issue fixed: - Update vendored dependencies and re-enable cargo update obs service bsc1229953...

PT-2025-5598 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.12 Description: A SQL Injection vulnerability was discovered in the WeGIA application, salvar cargo.php endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing...

GHSA-FQMF-W4XH-33RH vulnerabilities

Vulnerabilities for packages: cargo-audit...

GHSA-FQMF-W4XH-33RH vulnerabilities

Vulnerabilities for packages: cargo-audit...

CVE-2025-22620 vulnerabilities

Vulnerabilities for packages: cargo-audit...

CVE-2025-22620 vulnerabilities

Vulnerabilities for packages: cargo-audit...

CVE-2025-22618

WeGIA is affected by a Stored XSS in the adicionar_cargo.php endpoint, via the cargo parameter. The root cause is inadequate validation/sanitization of user input, allowing a malicious payload to be stored on the server and executed in a user’s browser when the affected page is loaded. The issue ...

CVE-2025-22618 WeGIA Cross-Site Scripting (XSS) Stored endpoint 'adicionar_cargo.php' parameter 'cargo'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarcargo.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into...

PT-2025-4604 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.6 Description: A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionar cargo.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has a cross-site scripting vulnerability that stems from a stored cross-site scripting vulnerability contained in the cargo parameter of the adicionarcargo.php file...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA version 2.3.6, which stems from a stored cross-site scripting vulnerability contained in the cargo parameter of the control.php page...

CVE-2025-22141 WeGIA SQL Injection (Blind Time-Based) endpoint 'verificar_recursos_cargo.php' parameter 'cargo'

WeGIA is a web manager for charitable institutions. A SQL Injection vulnerability was identified in the /dao/verificarrecursoscargo.php endpoint, specifically in the cargo parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity...

PT-2025-4377 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.8 Description: A SQL Injection vulnerability was identified in the "/dao/verificar recursos cargo.php" endpoint, specifically in the cargo parameter. This vulnerability allows attackers to execute arbitrary SQL...

WordPress WPCargo Track & Trace plugin <= 8.0.2 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WPCargo Track & Trace versions = 8.0.2...

UBUNTU-CVE-2024-8237

A Denial of Service DoS issue has been discovered in GitLab CE/EE affecting all versions prior to 12.6 prior to 17.4.5, 17.5 prior to 17.5.3, and 17.6 prior to 17.6.1. An attacker could cause a denial of service with a crafted cargo.toml file...

GitLab Enterprise Edition和GitLab Community Edition 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition and GitLab Community...

GHSA-QG5G-GV98-5FFH vulnerabilities

Vulnerabilities for packages: wasm-pack, wash, qdrant, xh, wasmcloud, cargo-audit, ntpd-rs, uv, fnm, tealdeer, parseable, zed, pixi, wadm...

PT-2024-9290 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 12.6 GitLab CE/EE versions 17.4 prior to 17.4.5 GitLab CE/EE versions 17.5 prior to 17.5.3 GitLab CE/EE versions 17.6 prior to 17.6.1 Description: A Denial of Service DoS issue has been discovered in GitLab CE/E...