Known vulnerabilities in MediaWiki - page 14

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU41697 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4574
CWE-79 Low
No
No
- 12.05.2014 SB2014051202
#VU41740 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-2853
CWE-79 Low
No
No
- 29.04.2014 SB2014042902
SB2015020704
#VU41782 - Cross-Site Request Forgery (CSRF)
CVE-2014-2665
CWE-352 Low
No
No
- 20.04.2014 SB2014042001
SB2015020704
SB2014042803
and 1 more
#VU41980 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-2242
CWE-79 Low
No
No
- 02.03.2014 SB2014030205
SB2015020704
SB2014031333
and 2 more
#VU41981 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2014-2243
CWE-362 Medium
No
No
- 02.03.2014 SB2014030205
SB2015020704
SB2014031333
#VU41982 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-2244
CWE-79 Low
No
No
- 02.03.2014 SB2014030205
SB2015020704
SB2014031333
#VU42094 - Improper input validation
CVE-2014-1610
CWE-20 Low
Available
No
- 31.01.2014 SB2014013103
SB2015020704
SB2014012905
and 1 more
#VU42237 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4567
CWE-79 Low
No
No
- 13.12.2013 SB2013112504
SB2013112014
SB2014012905
#VU42238 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4568
CWE-79 Low
No
No
- 13.12.2013 SB2013112504
SB2013112014
SB2014012905
#VU42239 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4569
CWE-200 Medium
No
No
- 13.12.2013 SB2013112504
#VU42240 - Cross-Site Request Forgery (CSRF)
CVE-2012-5394
CWE-352 Medium
No
No
- 13.12.2013 SB2013112504
#VU42314 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4573
CWE-79 Low
No
No
- 25.11.2013 SB2013112504
#VU42368 - Improper input validation
CVE-2013-2114
CWE-20 Medium
No
No
- 18.11.2013 SB2013111808
SB2013052209
#VU42417 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4301
CWE-200 Medium
No
No
- 27.10.2013 SB2013101204
SB2013090301
#VU42418 - Cross-Site Request Forgery (CSRF)
CVE-2013-4302
CWE-352 Medium
No
No
- 27.10.2013 SB2013101204
SB2013090301
#VU31881 - Cross-Site Request Forgery (CSRF)
CVE-2013-4306
CWE-352 Medium
No
No
1.21.2 12.10.2013 SB2013101203
#VU42473 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4305
CWE-79 Low
No
No
- 12.10.2013 SB2013101204
#VU42588 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4307
CWE-79 Low
No
No
- 12.09.2013 SB2013091202
#VU43599 - Improper input validation
CVE-2012-4885
CWE-20 Medium
No
No
- 10.09.2012 SB2012091003
#VU43600 - Cross-Site Request Forgery (CSRF)
CVE-2012-1579
CWE-352 Medium
No
No
- 10.09.2012 SB2012091003


Showing elements 261 - 280 out of 293