This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vendor Profiles

LabRedesCefetRJ

Number 100 by total vulnerabilities in the catalog.

Computed from the whole catalog when the site is built.

Compare with another vendor

Total vulnerabilities

190

Critical

65

High

28

Known Exploited

0

Exploit available

6

Network, no login needed

63.2%

Of 190 scored records

New vulnerabilities per year, by severity
  • Critical
  • High
  • Medium
  • Low
  • None or not scored
Show as table
PeriodTotalCriticalHighMediumLowNone or not scored
2026 (incomplete)5613142801
2025134521457110

Top products

ProductTotalCritical/High
WeGIA19093

Top bug types

Bug typeTotalCritical/High
Cross-Site Scripting818
SQL Injection6161
URL Redirection to Untrusted Site ('Open Redirect')160
Authentication Issues76
Command Injection54
Allocation of Resources Without Limits or Throttling33
Information Disclosure31
Path Traversal33
Cross-Site Request Forgery22
Insecure Direct Object Reference21

Newest vulnerabilities

CVETitlePublishedSeverityEPSS
CVE-2026-61719WeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" FieldHigh0.2%
CVE-2026-61673WeGIA: Stored DOM XSS in listar_despachos.php Allows Account TakeoverMedium0.3%
CVE-2026-61671WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle ClassesHigh0.2%
CVE-2026-55684WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.phpCritical0.5%
CVE-2026-55683WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.phpCritical0.6%
CVE-2026-55682WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.phpHigh0.4%
CVE-2026-55681WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameterHigh0.6%
CVE-2026-55680WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameterCritical0.5%
CVE-2026-55679WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code InjectionMedium0.5%
CVE-2026-54767WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.phpCritical0.8%