Known vulnerabilities in MediaWiki - page 6

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57203 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-42043
CWE-79 Low
No
No
1.31.16, 1.35.4, 1.36.2 11.10.2021 SB2021101108
#VU57202 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-42041
CWE-79 Low
No
No
1.31.16, 1.35.4, 1.36.2 11.10.2021 SB2021101108
#VU57201 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-42040
CWE-835 Medium
No
No
1.31.16, 1.35.4, 1.36.2 11.10.2021 SB2021101108
#VU57200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-42042
CWE-79 Low
No
No
1.31.16, 1.35.4, 1.36.2 11.10.2021 SB2021101108
#VU57199 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-42044
CWE-79 Low
No
No
1.31.16, 1.35.4, 1.36.2 11.10.2021 SB2021101108
#VU56983 - Permissions, Privileges, and Access Controls
CVE-2021-41801
CWE-264 Medium
No
No
1.31.16, 1.35.4, 1.36.2 01.10.2021 SB2021100104
SB2021100620
#VU56982 - Improper Access Control
CVE-2021-41800
CWE-284 Medium
No
No
1.31.16, 1.35.4, 1.36.2 01.10.2021 SB2021100104
SB2021100620
SB2021100441
and 2 more
#VU56981 - Resource exhaustion
CVE-2021-41799
CWE-400 Medium
No
No
1.31.16, 1.35.4, 1.36.2 01.10.2021 SB2021100104
SB2021100620
SB2021100441
and 2 more
#VU56980 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41798
CWE-79 Medium
Available
No
1.31.16, 1.35.4, 1.36.2 01.10.2021 SB2021100104
SB2021100620
SB2021100441
and 2 more
#VU54648 - Improper Access Control
CVE-2021-36126
CWE-284 High
No
No
1.31.15, 1.35.3, 1.36.1 09.07.2021 SB2021070908
#VU54647 - Incorrect Permission Assignment for Critical Resource
CVE-2021-36129
CWE-732 Low
No
No
1.31.15, 1.35.3, 1.36.1 09.07.2021 SB2021070908
#VU54646 - Exposure of sensitive information to an unauthorized actor
CVE-2021-36127
CWE-200 Low
No
No
1.31.15, 1.35.3, 1.36.1 09.07.2021 SB2021070908
#VU54645 - Improper Authentication
CVE-2021-36128
CWE-287 High
No
No
1.31.15, 1.35.3, 1.36.1 09.07.2021 SB2021070908
#VU54644 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-36125
CWE-835 Medium
No
No
1.31.15, 1.35.3, 1.36.1 09.07.2021 SB2021070908
#VU54643 - Exposure of sensitive information to an unauthorized actor
CVE-2021-29483
CWE-200 Medium
No
No
1.31.15, 1.35.3, 1.36.1 09.07.2021 SB2021070908
#VU54642 - Improper Authorization
CVE-2021-36132
CWE-285 Medium
No
No
1.31.15, 1.35.3, 1.36.1 09.07.2021 SB2021070908
#VU54641 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36131
CWE-79 Low
No
No
1.31.15, 1.35.3, 1.36.1 09.07.2021 SB2021070908
#VU54640 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36130
CWE-79 Low
No
No
1.31.15, 1.35.3, 1.36.1 09.07.2021 SB2021070908
#VU54499 - Improper Access Control
CVE-2021-35197
CWE-284 Low
No
No
1.31.15, 1.35.3, 1.36.1 01.07.2021 SB2021070121
SB2021070122
SB2021071701
and 4 more
#VU52552 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-31550
CWE-79 Low
No
No
1.31.13, 1.35.2 26.04.2021 SB2021042609


Showing elements 101 - 120 out of 293