CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0913 – Integer Overflow or Wraparound in microweber/microweber
https://notcve.org/view.php?id=CVE-2022-0913
Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3. Un Desbordamiento de Enteros o Wraparound en el repositorio de GitHub microweber/microweber versiones anteriores a 1.3 • https://github.com/microweber/microweber/commit/7559e141d0707f8eeff2f9aeaa5a0ca2e3fe6583 https://huntr.dev/bounties/f5f3e468-663b-4df0-8340-a2d77e4cc75f • CWE-190: Integer Overflow or Wraparound •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0906 – Unrestricted file upload leads to stored XSS in microweber/microweber
https://notcve.org/view.php?id=CVE-2022-0906
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12. Una subida de archivos sin restricciones conlleva a un ataque de tipo XSS almacenado en el repositorio de GitHub microweber/microweber versiones anteriores a 1.1.12 • https://github.com/microweber/microweber/commit/d9bae9df873c2d2a13a2eb08d512019d49ebca68 https://huntr.dev/bounties/87ed3b42-9824-49b0-91a5-fd908a0601e8 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0895 – Static Code Injection in microweber/microweber
https://notcve.org/view.php?id=CVE-2022-0895
Static Code Injection in GitHub repository microweber/microweber prior to 1.3. Una Inyección de Código Estático en el repositorio de GitHub microweber/microweber versiones anteriores a 1.3 • https://github.com/microweber/microweber/commit/b2baab6e582b2efe63788d367a2bb61a2fa26470 https://huntr.dev/bounties/3c070828-fd00-476c-be33-9c877172363d • CWE-96: Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0896 – Improper Neutralization of Special Elements Used in a Template Engine in microweber/microweber
https://notcve.org/view.php?id=CVE-2022-0896
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3. Una Neutralización Inapropiada de Elementos Especiales Usados en un Motor de Plantillas en el repositorio de GitHub microweber/microweber versiones anteriores a 1.3 • https://github.com/microweber/microweber/commit/e0224462b3dd6b1f7c6ec1197413afc6019bc3b5 https://huntr.dev/bounties/113056f1-7a78-4205-9f42-940ad41d8df0 • CWE-94: Improper Control of Generation of Code ('Code Injection') CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0777 – Weak Password Recovery Mechanism for Forgotten Password in microweber/microweber
https://notcve.org/view.php?id=CVE-2022-0777
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3. Un Mecanismo de Recuperación de Contraseñas Débil para el Olvido de Contraseñas en el repositorio de GitHub microweber/microweber versiones anteriores a 1.3. • https://github.com/microweber/microweber/commit/a3944cf9d1d8c41a48297ddc98302934e2511b0f https://huntr.dev/bounties/b36be8cd-544f-42bd-990d-aa1a46df44d7 • CWE-640: Weak Password Recovery Mechanism for Forgotten Password •