2797 matches found
CVE-2022-0895
Static Code Injection in GitHub repository microweber/microweber prior to 1.3...
Code injection
Static Code Injection in GitHub repository microweber/microweber prior to 1.3...
PT-2022-13509 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3 Description: The issue concerns static code injection in the microweber/microweber GitHub repository. Microweber is a content management system CMS that features drag and drop functionality...
CVE-2022-0896
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3...
Input validation
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0896
CVE-2022-0896 affects microweber/microweber before 1.3, with an improper neutralization vulnerability in the template engine that enables cross-site scripting in user-provided data (e.g., blog comments). Multiple sources (NVD, Red Hat, OSV, CNVD, CVE records) corroborate the issue, describing a t...
GHSA-7R79-MRP6-8MHQ Rate limit missing in microweber
Microweber prior to version 1.3 does not rate limit password reset emails...
Rate limit missing in microweber
Microweber prior to version 1.3 does not rate limit password reset emails...
Microweber 授权问题漏洞
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. An email bombing vulnerability exists in versions of Microweber prior to 1.3. The vulnerability stems from a failure to ra...
WordPress Google Sheet Connector for Easy Digital Downloads plugin <= 1.2 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Google Sheet Connector for Easy Digital Downloads plugin versions = 1.2. Solution Update the WordPress Google Sheet Connector for Easy Digital Downloads plugin to the latest available version at least 1.3...
GHSA-6M26-25Q2-CQ46 Cross-site Scripting in microweber
Microweber Cross-site Scripting XSS - Stored XSS vulnerability on admin page up to version 1.3...
CVE-2022-0762
Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0763
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0763 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-25640
In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificateverify message from the handshake, and never present a certificate...
CVE-2022-25638
In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the sigalgo field differs between the certificateverify message and the certificate message...
Authentication flaw
In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificateverify message from the handshake, and never present a certificate...
Input validation
In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the sigalgo field differs between the certificateverify message and the certificate message...
CVE-2022-25640
In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificateverify message from the handshake, and never present a certificate...
CVE-2022-25640
In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificateverify message from the handshake, and never present a certificate...