org.apache.axis2:axis2-clustering (2.0.0), org.apache.axis2:axis2-webapp (2.0.0) +5 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat-tribes (>=11.0.0-m1, <=11.0.18)

org.apache.tomcat:tomcat-tribes MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =7.3.0-rc1, =8.0.0-rc2 - org.ow2.petals.axis2:axis2-clustering 2.0.0-petals-0 - org.ow2.petals.axis2:axis2-webapp 2.0.0-petals-0 Source cves: CVE-2026-29146 Source advisory: MEND:CVE-2026-29146...

org.apache.tomcat:tomcat-catalina-ha (11.0.20), org.apache.tomcat:tomcat-storeconfig (11.0.20) +1 more potentially affected by CVE-2026-34486 via org.apache.tomcat:tomcat-tribes (11.0.20)

org.apache.tomcat:tomcat-tribes MAVEN version 11.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-tribes and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 11.0.20 - org.apache.tomcat:tomcat-storeconfig 11.0.20 -...

org.apache.axis2:axis2-clustering (2.0.0), org.apache.axis2:axis2-webapp (2.0.0) +5 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat-tribes (>=11.0.0-m1, <=11.0.18)

org.apache.tomcat:tomcat-tribes MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =7.3.0-rc1, =8.0.0-rc2 - org.ow2.petals.axis2:axis2-clustering 2.0.0-petals-0 - org.ow2.petals.axis2:axis2-webapp 2.0.0-petals-0 Source cves: CVE-2026-29146 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-15989827...

CVE-2026-35474 WeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect']

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, open redirect has been found in WeGIA webapp. The redirect parameter is taken directly from $GET with no URL validation or whitelist check, then used verbatim in a header"Location: ..." call. This vulnerability is fixed in 3.6.9...

CVE-2026-35474

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, open redirect has been found in WeGIA webapp. The redirect parameter is taken directly from $GET with no URL validation or whitelist check, then used verbatim in a header"Location: ..." call. This vulnerability is fixed in 3.6.9...

PT-2026-30741

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, open redirect has been found in WeGIA webapp. The redirect parameter is taken directly from $ GET with no URL validation or whitelist check, then used verbatim in a header"Location: ..." call. This vulnerability is fixed in 3.6.9...

activedirectoryenum (>=0.4.7, <=0.5.0), cumulusci (>=3.18.0, <=3.20.0.dev1) +20 more potentially affected by CVE-2026-34073 via cryptography (3.1.0)

cryptography PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - activedirectoryenum =0.4.7, =3.18.0, =1.0.1, =1.0.0, =1.0.0, =0.1.0, =1.3.0, =3.0.0b1, =1.4.0, =1.5.1, =2.1.6 - opacus 0.9.1 - osia...

PT-2026-38212

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description Insufficient policy enforcement in WebApp allows a remote attacker to perform UI spoofing, which is the act of mimicking a legitimate user interface to deceive users, via a crafted HTML...

activedirectoryenum (>=0.4.7, <=0.5.0), cumulusci (>=3.18.0, <=3.20.0.dev1) +20 more potentially affected by CVE-2026-34073 via cryptography (3.1.0)

cryptography PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - activedirectoryenum =0.4.7, =3.18.0, =1.0.1, =1.0.0, =1.0.0, =0.1.0, =1.3.0, =3.0.0b1, =1.4.0, =1.5.1, =2.1.6 - opacus 0.9.1 - osia...

org.jasig.cas:cas-server-webapp (>=3.4-rc1, <=3.4.3), org.springframework.security:spring-security-cas-client (3.0.1.release) +8 more potentially affected by CVE-2026-22732 via org.springframework.security:spring-security-web (3.0.1.release)

org.springframework.security:spring-security-web MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - org.jasig.cas:cas-server-webapp =3.4-rc1, =3.4.3 -...

CVE-2019-25443

Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can supply malicious SQL payloads in the name, description, quantity, or catid parameters to add-item.php to execut...

CVE-2019-25443

Inventory Webapp is affected by CVE-2019-25443: an SQL injection in add-item.php allows unauthenticated users to manipulate queries via GET parameters (name, description, quantity, cat_id), enabling arbitrary database commands. The vulnerability affects the way input is incorporated into SQL stat...

CVE-2019-25443 Inventory Webapp SQL Injection via add-item.php

Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can supply malicious SQL payloads in the name, description, quantity, or catid parameters to add-item.php to execut...

CVE-2019-25443

Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can supply malicious SQL payloads in the name, description, quantity, or catid parameters to add-item.php to execut...

Inventory Webapp SQL注入漏洞

Inventory Webapp is a browser-based inventory management system developed by Inventory Company. The Inventory Webapp has a SQL injection vulnerability, which stems from SQL injections in GET parameters. This vulnerability could allow unverified attackers to manipulate database queries...

CVE-2019-25443: Improper Neutralization of Special Elements used in an SQL Command

Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can supply malicious SQL payloads in the name, description, quantity, or catid parameters to add-item.php to execut...

VulnCheck KEV: CVE-2025-55749

XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is using the XWiki Jetty package XJetty, a context is exposed to statically access any file located in the webapp/ folder. It allows accessing files which might contains credentials...

CVE-2024-41618

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to SQL Injection in the transactiondeletegroup function. The vulnerability is due to improper sanitization of user input in the TrDeleteArr parameter, which is directly incorporated into an SQL query...

CVE-2022-23605

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

CVE-2019-25234

SmartHouse Webapp 6.5.33 contains multiple cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform unauthorized actions. Attackers can exploit these vulnerabilities by tricking logged-in users into visiting malicious websites or injecting malicious...