CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12. |
| 12/03/2022 |
| CVE-2022-0929 | MEDIUM6.1 | XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11. | 12/03/2022 |
| CVE-2022-0926 | MEDIUM4.8 | File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12. | 12/03/2022 |
| CVE-2022-0921 | MEDIUM6.7 | Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12. | 11/03/2022 |
| CVE-2022-0928 | MEDIUM5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12. | 11/03/2022 |
| CVE-2022-0913 | HIGH7.5 | Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3. | 11/03/2022 |
| CVE-2022-0912 | MEDIUM4.8 | Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11. | 11/03/2022 |
| CVE-2022-0906 | MEDIUM4.8 | Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12. | 10/03/2022 |
| CVE-2022-0895 | CRITICAL9.8 | Static Code Injection in GitHub repository microweber/microweber prior to 1.3. | 10/03/2022 |
| CVE-2022-0896 | HIGH8.8 | Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3. | 09/03/2022 |
| CVE-2022-0855 | MEDIUM6.1 | Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcs_plugin prior to 0.0.4. | 04/03/2022 |
| CVE-2022-0777 | HIGH7.5 | Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3. | 01/03/2022 |
| CVE-2022-0723 | MEDIUM5.4 | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.11. | 26/02/2022 |
| CVE-2022-0763 | MEDIUM4.8 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3. | 26/02/2022 |
| CVE-2022-0762 | MEDIUM4.3 | Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3. | 26/02/2022 |
| CVE-2022-0724 | MEDIUM6.5 | Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3. | 23/02/2022 |
| CVE-2022-0721 | MEDIUM6.5 | Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3. | 23/02/2022 |