Login Request a demo
MI
Product
microweber/microweber
by microweber · last CVE Dec 15, 2023
78
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities78In the news0Timeline
Severity mix
Critical 3High 13Medium 62Low 0
Severity
All severities78Critical3High13Medium62Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add microweber/microweber to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-1877
9.8
2%
Apr 5
Command Injection in microweber/microweber
Affected: before 1.3.3
CVE-2022-2368
9.8
1%
Jul 11
Authentication Bypass by Spoofing in microweber/microweber
Affected: before 1.2.20
CVE-2022-0895
9.8
2%
Mar 10
Static Code Injection in microweber/microweber
Affected: before 1.3
CVE-2023-2240
8.8
1%
Apr 22
Improper Privilege Management in microweber/microweber
Affected: before 1.3.4
CVE-2022-1631
8.8
9%
May 9
Users Account Pre-Takeover or Users Account Takeover. in microweber/microweber
Affected: before 1.2.15
CVE-2022-0896
8.8
1%
Mar 9
Improper Neutralization of Special Elements Used in a Template Engine in microweber/microweber
Affected: before 1.3
CVE-2023-5318
7.5
1%
Sep 30
Use of Hard-coded Credentials in microweber/microweber
Affected: before 2.0
CVE-2022-1036
7.5
1%
Mar 22
Able to create an account with long password leads to memory corruption / Integer Overflow in microweber/microweber
Affected: before 1.2.12
CVE-2022-0913
7.5
1%
Mar 11
Integer Overflow or Wraparound in microweber/microweber
Affected: before 1.3
CVE-2022-0777
7.5
1%
Mar 1
Weak Password Recovery Mechanism for Forgotten Password in microweber/microweber
Affected: before 1.3
CVE-2022-0666
7.5
44%
Feb 18
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber
Affected: before 1.2.11
CVE-2022-0660
7.5
7%
Feb 18
Generation of Error Message Containing Sensitive Information in microweber/microweber
Affected: before 1.2.11
CVE-2022-0282
7.5
1%
Jan 20
Cross-site Scripting in microweber/microweber
Affected: before 1.2.11
CVE-2022-0281
7.5
10%
Jan 20
Exposure of Sensitive Information to an Unauthorized Actor in microweber/microweber
Affected: before 1.2.11
CVE-2022-4732
7.2
38%
Dec 24
Unrestricted Upload of File with Dangerous Type in microweber/microweber
Affected: before 1.3.2
CVE-2022-0557
7.2
51%
Feb 11
OS Command Injection in microweber/microweber
Affected: before 1.2.11
CVE-2022-0921
6.7
2%
Mar 11
Abusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber
Affected: before 1.2.12
CVE-2023-6566
6.5
0%
Dec 7
Business Logic Errors in microweber/microweber
Affected: before 2.0
CVE-2023-2239
6.5
1%
Apr 22
Exposure of Private Personal Information to an Unauthorized Actor in microweber/microweber
Affected: before 1.3.4
CVE-2022-0724
6.5
1%
Feb 23
Insecure Storage of Sensitive Information in microweber/microweber
Affected: before 1.3
CVE-2022-0721
6.5
1%
Feb 23
Insertion of Sensitive Information Into Debugging Code in microweber/microweber
Affected: before 1.3
CVE-2022-0504
6.5
1%
Feb 8
Generation of Error Message Containing Sensitive Information in microweber/microweber
Affected: before 1.2.11
CVE-2022-0505
6.5
1%
Feb 8
Cross-Site Request Forgery (CSRF) in microweber/microweber
Affected: before 1.2.11
CVE-2022-0277
6.5
1%
Jan 20
Incorrect Permission Assignment for Critical Resource in microweber/microweber
Affected: before 1.2.11
CVE-2023-5244
6.1
1%
Sep 28
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 2.0
CVE-2022-4647
6.1
1%
Dec 22
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: before 1.3.2
CVE-2022-4617
6.1
1%
Dec 21
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 1.3.2
CVE-2022-3245
6.1
1%
Sep 20
Code Injection in display of tag title on saving tags in microweber/microweber
Affected: before 1.3.2
CVE-2022-3242
6.1
2%
Sep 20
HTML code Injection in template search keyword in microweber/microweber
Affected: before 1.3.2
CVE-2022-2470
6.1
1%
Jul 22
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 1.2.21
CVE-2022-2353
6.1
1%
Jul 9
Cross-Site Request Forgery (CSRF) in microweber/microweber
Affected: before 1.2.20
CVE-2022-2252
6.1
1%
Jun 29
Open Redirect in microweber/microweber
Affected: before 1.2.19
CVE-2022-2174
6.1
3%
Jun 22
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 1.2.18
CVE-2022-2130
6.1
3%
Jun 20
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 1.2.17
CVE-2022-1584
6.1
1%
May 4
Reflected XSS in microweber/microweber
Affected: before 1.2.16
CVE-2022-1555
6.1
1%
May 4
DOM XSS in microweber ver 1.2.15 in microweber/microweber
Affected: before 1.2.16
CVE-2022-1504
6.1
1%
Apr 27
XSS in /demo/module/?module=HERE in microweber/microweber
Affected: before 1.2.15
CVE-2022-1439
6.1
3%
Apr 22
Reflected XSS on demo.microweber.org/demo/module/ in microweber/microweber
Affected: before 1.2.15
CVE-2022-0929
6.1
1%
Mar 12
XSS on dynamic_text module in microweber/microweber
Affected: before 1.2.11
CVE-2022-0690
6.1
1%
Feb 19
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 1.2.11
CVE-2022-0678
6.1
2%
Feb 19
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 1.2.11
CVE-2022-0597
6.1
3%
Feb 15
Open Redirect in microweber/microweber
Affected: before 1.2.11
CVE-2022-0560
6.1
1%
Feb 11
Open Redirect in microweber/microweber
Affected: before 1.2.11
CVE-2022-0968
5.5
4%
Mar 15
The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in microweber/microweber
Affected: before 1.2.12
CVE-2022-0961
5.5
1%
Mar 15
The microweber application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber
Affected: before 1.2.12
CVE-2023-3142
5.4
0%
Jun 7
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: before 2.0
CVE-2023-1881
5.4
0%
Apr 5
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: before 1.3.3
CVE-2023-0608
5.4
1%
Feb 1
Cross-site Scripting (XSS) - DOM in microweber/microweber
Affected: before 1.3.2
CVE-2022-2777
5.4
0%
Aug 11
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: before 1.3.1
CVE-2022-2300
5.4
1%
Jul 4
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: before 1.2.19
Page 1 of 2 · 78 total
12