CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 31/10/2023 |
| CVE-2023-5318 | ALTO7.5 | Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0. | 30/09/2023 |
| CVE-2023-5244 | MÉDIO6.1 | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 2.0. | 28/09/2023 |
| CVE-2023-3142 | MÉDIO5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0. | 07/06/2023 |
| CVE-2023-2239 | MÉDIO6.5 | Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4. | 22/04/2023 |
| CVE-2023-2240 | ALTO8.8 | Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4. | 22/04/2023 |
| CVE-2023-2014 | MÉDIO4.8 | Cross-site Scripting (XSS) - Generic in GitHub repository microweber/microweber prior to 1.3.3. | 13/04/2023 |
| CVE-2023-1881 | MÉDIO5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3. | 05/04/2023 |
| CVE-2023-1877 | CRÍTICO9.8 | Command Injection in GitHub repository microweber/microweber prior to 1.3.3. | 05/04/2023 |
| CVE-2023-1081 | MÉDIO4.8 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3. | 28/02/2023 |
| CVE-2021-32856 | MÉDIO6.1 | Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted in versions 1.2.9 and | 21/02/2023 |
| CVE-2023-0608 | MÉDIO5.4 | Cross-site Scripting (XSS) - DOM in GitHub repository microweber/microweber prior to 1.3.2. | 01/02/2023 |
| CVE-2022-4732 | ALTO7.2 | Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2. | 27/12/2022 |
| CVE-2022-4647 | MÉDIO6.1 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.2. | 22/12/2022 |
| CVE-2022-4617 | MÉDIO6.1 | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.2. | 21/12/2022 |
| CVE-2022-0698 | MÉDIO6.1 | Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter. | 25/11/2022 |
| CVE-2022-33012 | ALTO8.8 | Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack. | 22/11/2022 |