Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

120 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-0906	Modificada	Media (4.8)	0.62%	—	Microweber	10/3/2022	17/6/2026	Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12.
CVE-2022-0895	Modificada	Crítica (9.8)	1.7%	—	Microweber	10/3/2022	17/6/2026	Static Code Injection in GitHub repository microweber/microweber prior to 1.3.
CVE-2022-0896	Modificada	Alta (8.8)	1.4%	—	Microweber	9/3/2022	17/6/2026	Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3.
CVE-2022-0855	Modificada	Media (6.1)	0.99%	—	Microweber Whmcs	4/3/2022	17/6/2026	Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcs_plugin prior to 0.0.4.
CVE-2022-0777	Modificada	Alta (7.5)	1.2%	—	Microweber	1/3/2022	17/6/2026	Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3.
CVE-2022-0723	Modificada	Media (5.4)	0.90%	—	Microweber	26/2/2022	17/6/2026	Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.11.
CVE-2022-0763	Modificada	Media (4.8)	0.62%	—	Microweber	26/2/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.
CVE-2022-0762	Modificada	Media (4.3)	0.65%	—	Microweber	26/2/2022	17/6/2026	Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3.
CVE-2022-0724	Modificada	Media (6.5)	1.3%	—	Microweber	23/2/2022	17/6/2026	Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3.
CVE-2022-0721	Modificada	Media (6.5)	1.4%	—	Microweber	23/2/2022	17/6/2026	Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3.
CVE-2022-0719	Modificada	Media (5.4)	0.91%	—	Microweber	23/2/2022	17/6/2026	Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.
CVE-2022-0688	Modificada	Media (4.9)	0.92%	—	Microweber	20/2/2022	17/6/2026	Business Logic Errors in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0690	Modificada	Media (6.1)	1.1%	—	Microweber	19/2/2022	17/6/2026	Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0689	Modificada	Media (5.3)	1.0%	—	Microweber	19/2/2022	17/6/2026	Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0678	Modificada	Media (6.1)	2.3%	💥 Exploit	Microweber	19/2/2022	17/6/2026	Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0666	Modificada	Alta (7.5)	44%	💥 Exploit	Microweber	18/2/2022	17/6/2026	CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0660	Modificada	Alta (7.5)	6.9%	💥 Exploit	Microweber	18/2/2022	17/6/2026	Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0638	Modificada	Media (4.3)	0.36%	—	Microweber	17/2/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0597	Modificada	Media (6.1)	3.0%	💥 Exploit	Microweber	15/2/2022	17/6/2026	Open Redirect in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0596	Modificada	Media (4.3)	0.62%	—	Microweber	15/2/2022	17/6/2026	Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0560	Modificada	Media (6.1)	1.0%	—	Microweber	11/2/2022	17/6/2026	Open Redirect in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0557	Modificada	Alta (7.2)	51%	💥 Exploit	Microweber	11/2/2022	17/6/2026	OS Command Injection in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0558	Modificada	Media (5.4)	0.90%	—	Microweber	10/2/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0506	Modificada	Media (5.4)	0.63%	—	Microweber	8/2/2022	17/6/2026	Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0505	Modificada	Media (6.5)	0.68%	—	Microweber	8/2/2022	17/6/2026	Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.