NA - CVE-2025-24962 - reNgine is an automated reconnaissance...
reNgine is an automated reconnaissance framework for web applications. In affected versions a user can inject commands via the nmap_cmd parameters. This issue has been addressed in commit...
NA - CVE-2024-35177 - Wazuh is a free and open source platform used...
Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based...
NA - CVE-2024-47770 - Wazuh is a free and open source platform used...
Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based...
NA - CVE-2025-22129 - Tuleap is an Open Source Suite to improve...
Tuleap is an Open Source Suite to improve management of software developments and collaboration. In affected versions an unauthorized user might get access to restricted information. This issue has...
NA - CVE-2025-23210 - phpoffice/phpspreadsheet is a pure PHP library...
phpoffice/phpspreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions have been found to have a Bypass of the Cross-site Scripting (XSS) sanitizer using the...
NA - CVE-2025-24029 - Tuleap is an Open Source Suite to improve...
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymous ones if the widget is used in the dashboard of a public project) might get...
NA - CVE-2025-24371 - CometBFT is a distributed, Byzantine...
CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine. In the `blocksync` protocol peers send their `base` and `latest` heights when they connect to a...
NA - CVE-2025-24901 - WeGIA is a Web Manager for Charitable...
WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, `deletar_permissao.php` endpoint. This vulnerability could allow an...
NA - CVE-2025-24902 - WeGIA is a Web Manager for Charitable...
WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, `salvar_cargo.php` endpoint. This vulnerability could allow an authorized...
NA - CVE-2025-24905 - WeGIA is a Web Manager for Charitable...
WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, `get_codigobarras_cobranca.php` endpoint. This vulnerability could allow...