mediawiki vulnerabilities (Debian)
300 vulnerabilities.
mediawikiDebianMediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail...5.0 MediummediawikiDebianMediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not properly...4.0 MediummediawikiDebianMediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not throttle file...6.8 MediummediawikiDebianThe chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x...6.8 MediummediawikiDebianThe chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x...3.5 LowmediawikiDebianCross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before...4.3 MediummediawikiDebianThe ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1...7.5 HighmediawikiDebianThe Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25...5.0 MediummediawikiDebianThe Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if...5.0 MediummediawikiDebianMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows...7.1 HighmediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1...4.3 MediummediawikiDebianCross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows...6.8 MediummediawikiDebianCross-site scripting (XSS) vulnerability in the Scribunto extension for MediaWiki allows remote...4.3 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1...4.3 MediummediawikiDebianMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM or Zend...7.1 HighmediawikiDebianMediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers...7.1 HighmediawikiDebianMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to...5.0 MediummediawikiDebianMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 does not properly handle...4.3 MediummediawikiDebianCross-site scripting (XSS) vulnerability in the Html class in MediaWiki before 1.19.24, 1.2x...4.3 MediummediawikiDebianIncomplete blacklist vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x...4.3 MediummediawikiDebianIncomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24,...4.3 MediummediawikiDebianCross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1...3.5 LowmediawikiDebianThe wfMangleFlashPolicy function in OutputHandler.php in MediaWiki before 1.19.22, 1.20.x through...7.5 HighmediawikiDebianThe (1) Special:Preferences and (2) Special:UserLogin pages in MediaWiki before 1.19.20, 1.22.x...3.5 LowmediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.19, 1.22.x before 1.22.11, and...4.3 MediummediawikiDebianMediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not...4.3 MediummediawikiDebianThe JSONP endpoint in includes/api/ApiFormatJson.php in MediaWiki before 1.19.18, 1.20.x through...6.8 MediummediawikiDebianCross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1...2.6 LowmediawikiDebianSession fixation vulnerability in Special:UserLogin in MediaWiki before 1.18.6, 1.19.x before 1...6.8 MediummediawikiDebianincludes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before...4.0 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1...4.3 MediummediawikiDebianMediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to...5.0 MediummediawikiDebianMediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize...7.5 HighmediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1...4.3 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki 1.19.9 before 1.19.10, 1.2x before 1.21.4,...6.1 MediummediawikiDebianincludes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before...5.8 MediummediawikiDebianincludes/upload/UploadBase.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and...4.3 MediummediawikiDebianMediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF...6.0 MediummediawikiDebianThe CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before...7.5 HighmediawikiDebianIncomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x...4.3 MediummediawikiDebianIncomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x...4.3 MediummediawikiDebianMediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password...5.0 MediummediawikiDebianMediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site...4.3 MediummediawikiDebianincludes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x...6.1 MediummediawikiDebianincludes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x...5.0 MediummediawikiDebian(1) ApiBlock.php, (2) ApiCreateAccount.php, (3) ApiLogin.php, (4) ApiMain.php, (5)...5.0 MediummediawikiDebianUnrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6...6.8 MediummediawikiDebianThe wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote...5.0 MediummediawikiDebianCross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3...4.3 MediummediawikiDebianMediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password...5.0 Medium- Show moreLoading…