Lucene search
K

6 matches found

EUVD
EUVD
added 2026/01/16 7:47 p.m.2 views

EUVD-2026-3120

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarDescricao and...

4.8CVSS6.3AI score0.00017EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/01/16 7:40 p.m.4 views

CVE-2026-23726 WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, An Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and...

4.8CVSS6.4AI score0.00017EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/01/16 7:38 p.m.1 views

CVE-2026-23725

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, a Stored Cross-Site Scripting XSS vulnerability was identified in the html/pet/adotantes/cadastroadotante.php and html/pet/adotantes/informacaoadotantes.php endpoint of the WeGIA application. The application does not sanitize...

5.4CVSS5.5AI score0.00017EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2026/01/16 7:38 p.m.3 views

CVE-2026-23725 WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, a Stored Cross-Site Scripting XSS vulnerability was identified in the html/pet/adotantes/cadastroadotante.php and html/pet/adotantes/informacaoadotantes.php endpoint of the WeGIA application. The application does not sanitize...

5.3CVSS5.4AI score0.00017EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2024/12/12 6:58 a.m.2 views

SUSE CVE-2024-53862

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...

7.5CVSS7.1AI score0.00321EPSS
Exploits1References3
Prion
Prion
added 2020/04/28 8:15 p.m.17 views

Code injection

Electron-Cash-SLP before version 3.6.2 has a vulnerability. All token creators that use the "Mint Tool" feature of the Electron Cash SLP Edition are at risk of sending the minting authority baton to the wrong SLP address. Sending the mint baton to the wrong address will give another party the...

6.4CVSS8.4AI score0.00292EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder