Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 A weakness has been identified in Microweber up to 2.0.20. This affects the function userfiles_path of the file /api_nosession/thumbnail_img of the component API Endpoint. Executing a manipulation of the argument cache_path_relative can lead to path traversal. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Join the discussion | CVE Database V5 | 06/15/2026, 00:00:08 UTC Added: 06/15/2026, 00:20:37 UTC |
0 Cross Site Scripting vulnerability in the "/admin/category/create" endpoint of Microweber 2.0.19. An attacker can manipulate the "rel_id" parameter in a crafted URL and lure a user with admin privileges into visiting it, achieving JavaScript code execution in the victim's browser. The issue was reported to the developers and fixed in version 2.0.20. Join the discussion | CVE Database V5 | 02/05/2026, 00:00:00 UTC Added: 02/05/2026, 17:15:09 UTC |
0 Cross Site Scripting vulnerability in the "/admin/order/abandoned" endpoint of Microweber 2.0.19. An attacker can manipulate the "orderDirection" parameter in a crafted URL and lure a user with admin privileges into visiting it, achieving JavaScript code execution in the victim's browser. The issue was reported to the developers and fixed in version 2.0.20. Join the discussion | CVE Database V5 | 02/05/2026, 00:00:00 UTC Added: 02/05/2026, 17:15:09 UTC |
0 Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users Join the discussion | CVE Database V5 | 01/10/2025, 00:00:00 UTC Added: 02/25/2026, 21:40:13 UTC |
0 Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=admin__backup Join the discussion | CVE Database V5 | 01/10/2025, 00:00:00 UTC Added: 02/25/2026, 21:40:13 UTC |
0 Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name (Internal Name) field in the Add new campaign function Join the discussion | CVE Database V5 | 01/10/2025, 00:00:00 UTC Added: 02/25/2026, 21:40:13 UTC |
0 A Reflected Cross-site scripting (XSS) vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unauthenticated remote attackers to inject arbitrary web script or HTML via the 'keywords' parameter. Join the discussion | CVE Database V5 | 08/06/2024, 00:00:00 UTC Added: 07/05/2026, 01:22:23 UTC |
0 microweber 2.0.16 was discovered to contain a Cross Site Scripting (XSS) vulnerability via userfiles\modules\settings\admin.php. Join the discussion | CVE Database V5 | 08/05/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:15 UTC |
0 microweber 2.0.16 was discovered to contain a Cross Site Scripting (XSS) vulnerability via userfiles\modules\tags\add_tagging_tagged.php. Join the discussion | CVE Database V5 | 08/05/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:15 UTC |
Showing 1 to 9 of 9 results