MI
Product
microweber/microweber
78
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 13Medium 62Low 0
Watch
Add microweber/microweber to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-2240 | 8.8 | Apr 22 | Improper Privilege Management in microweber/microweber Affected: before 1.3.4 |
| CVE-2022-1631 | 8.8 | May 9 | Users Account Pre-Takeover or Users Account Takeover. in microweber/microweber Affected: before 1.2.15 |
| CVE-2022-0896 | 8.8 | Mar 9 | Improper Neutralization of Special Elements Used in a Template Engine in microweber/microweber Affected: before 1.3 |
| CVE-2023-5318 | 7.5 | Sep 30 | Use of Hard-coded Credentials in microweber/microweber Affected: before 2.0 |
| CVE-2022-1036 | 7.5 | Mar 22 | Able to create an account with long password leads to memory corruption / Integer Overflow in microweber/microweber Affected: before 1.2.12 |
| CVE-2022-0913 | 7.5 | Mar 11 | Integer Overflow or Wraparound in microweber/microweber Affected: before 1.3 |
| CVE-2022-0777 | 7.5 | Mar 1 | Weak Password Recovery Mechanism for Forgotten Password in microweber/microweber Affected: before 1.3 |
| CVE-2022-0666 | 7.5 | Feb 18 | CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0660 | 7.5 | Feb 18 | Generation of Error Message Containing Sensitive Information in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0282 | 7.5 | Jan 20 | Cross-site Scripting in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0281 | 7.5 | Jan 20 | Exposure of Sensitive Information to an Unauthorized Actor in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-4732 | 7.2 | Dec 24 | Unrestricted Upload of File with Dangerous Type in microweber/microweber Affected: before 1.3.2 |
| CVE-2022-0557 | 7.2 | Feb 11 | OS Command Injection in microweber/microweber Affected: before 1.2.11 |
Showing 13