Known vulnerabilities in MediaWiki - page 15

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU43601 - Cross-Site Request Forgery (CSRF)
CVE-2012-1580
CWE-352 Medium
No
No
- 10.09.2012 SB2012091003
#VU43602 - Permissions, Privileges, and Access Controls
CVE-2012-1581
CWE-264 Medium
No
No
- 10.09.2012 SB2012091003
#VU43603 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-1582
CWE-79 Low
No
No
- 10.09.2012 SB2012091003
#VU43605 - Cross-Site Request Forgery (CSRF)
CVE-2012-1578
CWE-352 Medium
No
No
- 10.09.2012 SB2012091003
#VU43923 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2698
CWE-79 Low
Available
No
- 29.06.2012 SB2012062902
#VU45032 - Improper Authentication
CVE-2011-1766
CWE-287 Medium
No
No
- 24.05.2011 SB2011052402
#VU45104 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-1579
CWE-79 Low
No
No
- 27.04.2011 SB2011042701
#VU45105 - Improper input validation
CVE-2011-1580
CWE-20 Low
No
No
- 27.04.2011 SB2011042701
#VU45107 - Exposure of sensitive information to an unauthorized actor
CVE-2010-2787
CWE-200 Medium
No
No
- 27.04.2011 SB2011042703
#VU45108 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-2788
CWE-79 Low
No
No
- 27.04.2011 SB2011042703
#VU45109 - Improper Control of Generation of Code ('Code Injection')
CVE-2010-2789
CWE-94 Medium
No
No
- 27.04.2011 SB2011042704
#VU45376 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-0047
CWE-79 Low
No
No
- 04.02.2011 SB2011011104
#VU45470 - Improper input validation
CVE-2011-0003
CWE-20 Medium
No
No
- 11.01.2011 SB2011011104


Showing elements 281 - 300 out of 293