Approved changes feed: RSS · Atom
cpe:2.3:a:wakyma:wakyma:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Wakyma (f60fe6e5-f32c-5c09-9ec7-f49dcf55fb76) |
|---|---|
| Product | Wakyma (a1112d22-6ba6-550f-9ff6-fe0c6022d723) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3024 |
vulnerable | 2026-06-08 08:01:17.362126 |
Stored Cross-Site Scripting (XSS) vulnerability in the Wakyma application web
Stored Cross-Site Scripting (XSS) vulnerability in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/configuracion/agenda/modelo-formulario-evento'. A user with permission to create personalized accounts could exploit this vulnerability simply by creating a malicious survey that would harm the entire veterinary team. At the same time, a user with low privileges could exploit this vulnerability to access unauthorized data and perform actions with elevated privileges.
Published: 2026-03-16T10:13:37.130Z
Updated: 2026-03-16T13:25:02.460Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3023 |
vulnerable | 2026-06-08 08:01:17.361585 |
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'. This vulnerability could allow an authenticated user to alter a POST request to the affected endpoint for the purpose of injecting NoSQL commands, allowing them to list both pets and owner names.
Published: 2026-03-16T10:12:53.281Z
Updated: 2026-03-16T13:25:33.440Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3022 |
vulnerable | 2026-06-08 08:01:17.361113 |
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/hospitalization/generate-hospitalization-summary'. This vulnerability could allow an authenticated user to alter a POST request to the affected endpoint for the purpose of injecting special NoSQL commands, resulting in the attacker being able to obtain customer reports.
Published: 2026-03-16T10:11:30.207Z
Updated: 2026-03-16T15:26:40.413Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3021 |
vulnerable | 2026-06-08 08:01:17.360141 |
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web
Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/centro/equipo/empleado'. This vulnerability could allow an authenticated user to alter a GET request to the affected endpoint for the purpose of injecting special NoSQL commands. This would lead to the enumeration of sensitive employee data.
Published: 2026-03-16T10:11:11.742Z
Updated: 2026-03-16T15:27:11.828Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.