org.apache.storm:storm-webapp-bin (>=2.0.0, <=2.8.5) potentially affected by CVE-2026-35565 via org.apache.storm:storm-webapp (>=2.0.0, <=2.8.5)

org.apache.storm:storm-webapp MAVEN version =2.0.0, =2.0.0, =2.8.5 Source cves: CVE-2026-35565 Source advisory: SNYK:JAVA-ORGAPACHESTORM-16321660...

org.apache.axis2:axis2-clustering (2.0.0), org.apache.axis2:axis2-webapp (2.0.0) +5 more potentially affected by CVE-2026-34487 via org.apache.tomcat:tomcat-tribes (>=11.0.0-m1, <=11.0.20)

org.apache.tomcat:tomcat-tribes MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =7.3.0-rc1, =8.0.0-rc3 - org.ow2.petals.axis2:axis2-clustering 2.0.0-petals-0 - org.ow2.petals.axis2:axis2-webapp 2.0.0-petals-0 Source cves: CVE-2026-34487 Source advisory: OSV:GHSA-X4M4-345F-5H5G...

org.apache.tomcat:tomcat-catalina-ha (11.0.20), org.apache.tomcat:tomcat-storeconfig (11.0.20) +1 more potentially affected by CVE-2026-34486 via org.apache.tomcat:tomcat-tribes (11.0.20)

org.apache.tomcat:tomcat-tribes MAVEN version 11.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-tribes and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 11.0.20 - org.apache.tomcat:tomcat-storeconfig 11.0.20 -...

org.apache.axis2:axis2-clustering (2.0.0), org.apache.axis2:axis2-webapp (2.0.0) +5 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat-tribes (>=11.0.0-m1, <=11.0.18)

org.apache.tomcat:tomcat-tribes MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =7.3.0-rc1, =8.0.0-rc2 - org.ow2.petals.axis2:axis2-clustering 2.0.0-petals-0 - org.ow2.petals.axis2:axis2-webapp 2.0.0-petals-0 Source cves: CVE-2026-29146 Source advisory: GHSA-H468-7PVH-8VR8...

org.apache.tomcat:tomcat-catalina-ha (11.0.20), org.apache.tomcat:tomcat-storeconfig (11.0.20) +1 more potentially affected by CVE-2026-34486 via org.apache.tomcat:tomcat-tribes (11.0.20)

org.apache.tomcat:tomcat-tribes MAVEN version 11.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-tribes and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 11.0.20 - org.apache.tomcat:tomcat-storeconfig 11.0.20 -...

org.apache.axis2:axis2-clustering (2.0.0), org.apache.axis2:axis2-webapp (2.0.0) +5 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat-tribes (>=11.0.0-m1, <=11.0.18)

org.apache.tomcat:tomcat-tribes MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =7.3.0-rc1, =8.0.0-rc2 - org.ow2.petals.axis2:axis2-clustering 2.0.0-petals-0 - org.ow2.petals.axis2:axis2-webapp 2.0.0-petals-0 Source cves: CVE-2026-29146 Source advisory: MEND:CVE-2026-29146...

org.apache.tomcat:tomcat-catalina-ha (11.0.20), org.apache.tomcat:tomcat-storeconfig (11.0.20) +1 more potentially affected by CVE-2026-34486 via org.apache.tomcat:tomcat-tribes (11.0.20)

org.apache.tomcat:tomcat-tribes MAVEN version 11.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-tribes and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 11.0.20 - org.apache.tomcat:tomcat-storeconfig 11.0.20 -...

org.apache.axis2:axis2-clustering (2.0.0), org.apache.axis2:axis2-webapp (2.0.0) +5 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat-tribes (>=11.0.0-m1, <=11.0.18)

org.apache.tomcat:tomcat-tribes MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =7.3.0-rc1, =8.0.0-rc2 - org.ow2.petals.axis2:axis2-clustering 2.0.0-petals-0 - org.ow2.petals.axis2:axis2-webapp 2.0.0-petals-0 Source cves: CVE-2026-29146 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-15989827...

CVE-2026-35474

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, open redirect has been found in WeGIA webapp. The redirect parameter is taken directly from $GET with no URL validation or whitelist check, then used verbatim in a header"Location: ..." call. This vulnerability is fixed in 3.6.9...

CVE-2026-35474 WeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect']

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, open redirect has been found in WeGIA webapp. The redirect parameter is taken directly from $GET with no URL validation or whitelist check, then used verbatim in a header"Location: ..." call. This vulnerability is fixed in 3.6.9...

PT-2026-30741

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, open redirect has been found in WeGIA webapp. The redirect parameter is taken directly from $ GET with no URL validation or whitelist check, then used verbatim in a header"Location: ..." call. This vulnerability is fixed in 3.6.9...

activedirectoryenum (>=0.4.7, <=0.5.0), cumulusci (>=3.18.0, <=3.20.0.dev1) +20 more potentially affected by CVE-2026-34073 via cryptography (3.1.0)

cryptography PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - activedirectoryenum =0.4.7, =3.18.0, =1.0.1, =1.0.0, =1.0.0, =0.1.0, =1.3.0, =3.0.0b1, =1.4.0, =1.5.1, =2.1.6 - opacus 0.9.1 - osia...

PT-2026-38212

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description Insufficient policy enforcement in WebApp allows a remote attacker to perform UI spoofing, which is the act of mimicking a legitimate user interface to deceive users, via a crafted HTML...

activedirectoryenum (>=0.4.7, <=0.5.0), cumulusci (>=3.18.0, <=3.20.0.dev1) +20 more potentially affected by CVE-2026-34073 via cryptography (3.1.0)

cryptography PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - activedirectoryenum =0.4.7, =3.18.0, =1.0.1, =1.0.0, =1.0.0, =0.1.0, =1.3.0, =3.0.0b1, =1.4.0, =1.5.1, =2.1.6 - opacus 0.9.1 - osia...

org.jasig.cas:cas-server-webapp (>=3.4-rc1, <=3.4.3), org.springframework.security:spring-security-cas-client (3.0.1.release) +8 more potentially affected by CVE-2026-22732 via org.springframework.security:spring-security-web (3.0.1.release)

org.springframework.security:spring-security-web MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - org.jasig.cas:cas-server-webapp =3.4-rc1, =3.4.3 -...

CVE-2019-25443

Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can supply malicious SQL payloads in the name, description, quantity, or catid parameters to add-item.php to execut...

CVE-2019-25443 Inventory Webapp SQL Injection via add-item.php

Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can supply malicious SQL payloads in the name, description, quantity, or catid parameters to add-item.php to execut...

CVE-2019-25443

Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can supply malicious SQL payloads in the name, description, quantity, or catid parameters to add-item.php to execut...

CVE-2019-25443

Inventory Webapp is affected by CVE-2019-25443: an SQL injection in add-item.php allows unauthenticated users to manipulate queries via GET parameters (name, description, quantity, cat_id), enabling arbitrary database commands. The vulnerability affects the way input is incorporated into SQL stat...

CVE-2019-25443: Improper Neutralization of Special Elements used in an SQL Command

Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can supply malicious SQL payloads in the name, description, quantity, or catid parameters to add-item.php to execut...