29540 matches found
CVE-2025-54058 WeGIA SQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarEndereco.php Endpoint
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.6 in the idatendidofamiliares parameter of the /html/funcionario/dependenteeditarEndereco.php endpoint. This vulnerability...
CVE-2025-53946 WeGIA vulnerable to SQL Injection in endpoint profile_paciente.php parameter id_fichamedica
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.5 in the idfuncionario parameter of the /html/saude/profilepaciente.php endpoint. This vulnerability allows attacker to...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via the DingDing alert integration. An attacker can access sensitive information by leveraging Viewer-level permissions to interact with the integration. Remediation Upgrade...
GHSA-46M5-8HPJ-P5P5 Grafana's insecure DingDing Alert integration exposes sensitive information
Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 10.4.19+security-01, 11.2.10+security-01, 11.3.7+security-01, 11.4.5+security-01,...
The vulnerability of the Golang programming language, related to insufficient protection of sensitive data, allows attackers to gain access to potentially confidential information.
The vulnerability of the Golang programming language is related to the insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to potentially confidential information...
PT-2025-29954 · Hcl · Hcl Connections
Name of the Vulnerable Software and Affected Versions: HCL Connections affected versions not specified Description: HCL Connections is susceptible to an information disclosure issue. This could allow a user to access sensitive information that they are not authorized to view, resulting from...
Grafana 安全漏洞
Grafana is a set of open source monitoring tools from Grafana open source that provides a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. A security vulnerability exists in Grafana that stems from inadequate protecti...
PT-2025-29916 · Wegia · Wegia
Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.6 Description: WeGIA is an open source web manager. A SQL Injection issue was identified that allows an attacker to manipulate SQL queries and access sensitive database information. The vulnerability exists in the...
Code-Projects Online Appointment Booking System 注入漏洞
Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System has a SQL injection vulnerability that originates from improper handling of the parameter city in the file /admin/getmanagerregion.php, which can be exploited by an attacker to obtain...
Code-Projects Online Appointment Booking System 注入漏洞
Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System has a SQL injection vulnerability that originates from improper handling of the parameter Username in the file /admin/adddoctor.php, which can be exploited by an attacker to obtain sensiti...
CVE-2025-53886
Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, when using Directus Flows with the WebHook trigger all incoming request details are logged including security sensitive data like access and refresh tokens in...
CVE-2025-53885
Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, when using Directus Flows to handle CRUD events for users it is possible to log the incoming data to console using the "Log to Console" operation and a template...
WordPress JetSmartFilters <= 3.6.7 - Sensitive Data Exposure Vulnerability
Sensitive Data Exposure Vulnerability discovered by stealthcopter in WordPress Plugin JetSmartFilters versions = 3.6.7...
WordPress JetWooBuilder <= 2.1.20 - Sensitive Data Exposure Vulnerability
Sensitive Data Exposure Vulnerability discovered by stealthcopter in WordPress Plugin JetWooBuilder versions = 2.1.20...
WordPress JetMenu <= 2.4.11.1 - Sensitive Data Exposure Vulnerability
Sensitive Data Exposure Vulnerability discovered by stealthcopter in WordPress Plugin JetMenu versions = 2.4.11.1...
WordPress JetPopup plugin <= 2.0.15 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by stealthcopter in WordPress Plugin JetPopup versions = 2.0.15...
WordPress JetTricks <= 1.5.4.1 - Sensitive Data Exposure Vulnerability
Sensitive Data Exposure Vulnerability discovered by stealthcopter in WordPress Plugin JetTricks versions = 1.5.4.1...
WordPress JetBlocks For Elementor <= 1.3.18 - Sensitive Data Exposure Vulnerability
Sensitive Data Exposure Vulnerability discovered by stealthcopter in WordPress Plugin JetBlocks For Elementor versions = 1.3.18...