Known vulnerabilities in MediaWiki - page 7

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52586 - Improper input validation
CVE-2021-31555
CWE-20 Medium
No
No
1.31.13, 1.35.2 26.04.2021 SB2021042609
#VU52580 - Improper input validation
CVE-2021-31556
CWE-20 Medium
No
No
1.31.13, 1.35.2 26.04.2021 SB2021042609
SB2021100441
SB2021100442
and 1 more
#VU52576 -
CVE-2021-31554
Medium
No
No
1.31.13, 1.35.2 26.04.2021 SB2021042609
#VU52575 -
CVE-2021-31552
Medium
No
No
1.31.13, 1.35.2 26.04.2021 SB2021042609
#VU52574 - Unquoted Search Path or Element
CVE-2021-31553
CWE-428 Medium
No
No
1.31.13, 1.35.2 26.04.2021 SB2021042609
#VU52573 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31549
CWE-200 Low
No
No
1.31.13, 1.35.2 26.04.2021 SB2021042609
#VU52567 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31545
CWE-200 Medium
No
No
1.31.13, 1.35.2 26.04.2021 SB2021042609
#VU52560 -
CVE-2021-31547
Low
No
No
1.31.13, 1.35.2 26.04.2021 SB2021042609
#VU52559 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31546
CWE-200 Medium
No
No
1.31.13, 1.35.2 26.04.2021 SB2021042609
#VU52557 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-31551
CWE-79 Low
No
No
1.31.13, 1.35.2 26.04.2021 SB2021042609
#VU52554 - Exposure of sensitive information to an unauthorized actor
CVE-2021-31557
CWE-200 Medium
No
No
1.31.13, 1.35.2 26.04.2021 SB2021042609
#VU52553 -
CVE-2021-31548
Medium
No
No
1.31.13, 1.35.2 26.04.2021 SB2021042609
#VU52032 - Exposure of sensitive information to an unauthorized actor
CVE-2021-30153
CWE-200 Low
No
No
1.31.13, 1.35.2 12.04.2021 SB2021041202
#VU52029 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-30154
CWE-79 Low
No
No
1.31.13, 1.35.2 12.04.2021 SB2021041202
SB2021041203
SB2021071701
#VU52028 - Improper Access Control
CVE-2021-30158
CWE-284 Medium
No
No
1.31.13, 1.35.2 12.04.2021 SB2021041202
SB2021041203
SB2021071701
#VU52027 - Improper Access Control
CVE-2021-30159
CWE-284 Medium
No
No
1.31.13, 1.35.2 12.04.2021 SB2021041202
SB2021041203
SB2021071701
#VU52026 - Improper Access Control
CVE-2021-30155
CWE-284 Medium
No
No
1.31.13, 1.35.2 12.04.2021 SB2021041202
SB2021041203
SB2021071701
#VU52025 - Permissions, Privileges, and Access Controls
CVE-2021-30152
CWE-264 Low
No
No
1.31.13, 1.35.2 12.04.2021 SB2021041202
SB2021041203
SB2021071701
#VU51776 - Resource Management Errors
CVE-2021-27291
CWE-399 Medium
No
No
1.31.13, 1.35.2 30.03.2021 SB2021031407
SB2021033004
SB2021041202
and 17 more
#VU51449 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-20270
CWE-835 Low
No
No
1.31.13, 1.35.2 14.03.2021 SB2021031407
SB2021031410
SB2021041202
and 14 more


Showing elements 121 - 140 out of 293