Known vulnerabilities in MediaWiki - page 13

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU40970 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9507
CWE-79 Low
No
No
- 04.01.2015 SB2015010403
SB2015020704
#VU40971 - Command injection
CVE-2014-9277
CWE-77 Medium
No
No
- 04.01.2015 SB2015010403
SB2015020704
#VU40972 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9276
CWE-79 Low
No
No
- 04.01.2015 SB2015010403
SB2015020704
#VU41238 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-7295
CWE-79 Low
No
No
- 07.10.2014 SB2014100703
SB2015020704
SB2014100210
and 1 more
#VU41250 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-7199
CWE-79 Low
No
No
- 30.09.2014 SB2014093009
SB2015020704
SB2014092604
and 1 more
#VU41383 - Cross-Site Request Forgery (CSRF)
CVE-2014-5241
CWE-352 Medium
No
No
- 22.08.2014 SB2014082205
SB2015020704
SB2014092406
and 1 more
#VU41384 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-5242
CWE-79 Low
No
No
- 22.08.2014 SB2014082205
SB2015020704
SB2014092406
and 1 more
#VU41385 - Improper input validation
CVE-2014-5243
CWE-20 Medium
No
No
- 22.08.2014 SB2014082205
SB2015020704
SB2014092406
and 1 more
#VU41570 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3966
CWE-79 Low
No
No
- 06.06.2014 SB2014060607
SB2014062603
SB2014062604
and 2 more
#VU41587 - Exposure of sensitive information to an unauthorized actor
CVE-2013-1818
CWE-200 Medium
No
No
- 02.06.2014 SB2014060204
#VU41591 - Improper input validation
CVE-2012-5391
CWE-20 Medium
No
No
- 02.06.2014 SB2014060208
SB2013020504
#VU41592 - Improper input validation
CVE-2012-5395
CWE-20 Medium
No
No
- 02.06.2014 SB2014060208
#VU41688 - Cross-Site Request Forgery (CSRF)
CVE-2014-3454
CWE-352 Medium
No
No
- 12.05.2014 SB2014051202
#VU41689 - Cross-Site Request Forgery (CSRF)
CVE-2014-3455
CWE-352 Medium
No
No
- 12.05.2014 SB2014051202
#VU41690 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-6452
CWE-79 Low
No
No
- 12.05.2014 SB2014051202
SB2015020704
SB2014011420
and 1 more
#VU41691 - Improper input validation
CVE-2013-6453
CWE-20 Medium
No
No
- 12.05.2014 SB2014051202
SB2015020704
SB2014011420
and 1 more
#VU41692 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-6454
CWE-79 Low
No
No
- 12.05.2014 SB2014051202
SB2015020704
SB2014011420
and 1 more
#VU41693 - Exposure of sensitive information to an unauthorized actor
CVE-2013-6472
CWE-200 Medium
No
No
- 12.05.2014 SB2014051202
SB2015020704
SB2014011420
and 1 more
#VU41695 - Improper input validation
CVE-2013-4570
CWE-20 Medium
No
No
- 12.05.2014 SB2014051202
#VU41696 - Memory corruption
CVE-2013-4571
CWE-119 Medium
No
No
- 12.05.2014 SB2014051202


Showing elements 241 - 260 out of 293