Skip to contentMediawiki Mediawik vulnerabilities
- mediawikiMediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers...CVE-2015-2936Fix available7.1 High
- mediawikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to...CVE-2015-2935Fix available5.0 Medium
- mediawikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 does not properly handle...CVE-2015-2934Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the Html class in MediaWiki before 1.19.24, 1.2x...CVE-2015-2933Fix available4.3 Medium
- mediawikiIncomplete blacklist vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x...CVE-2015-2932Fix available4.3 Medium
- mediawikiIncomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24,...CVE-2015-2931Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the Hovercards extension for MediaWiki allows remote...CVE-2014-94804.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the preview in the TemplateSandbox extension for...CVE-2014-94794.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the preview in the ExpandTemplates extension for...CVE-2014-94782.6 Low
- mediawikiMultiple cross-site scripting (XSS) vulnerabilities in the Listings extension for MediaWiki allow...CVE-2014-94774.3 Medium
- mediawikiMediaWiki 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote...CVE-2014-94765.0 Medium
- mediawikiMediaWiki 1.21.x, 1.22.x before 1.22.14, and 1.23.x before 1.23.7, when $wgContentHandlerUseDB is...CVE-2014-95072.6 Low
- mediawikiCross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1...CVE-2014-9475Fix available3.5 Low
- mediawikiThe wfMangleFlashPolicy function in OutputHandler.php in MediaWiki before 1.19.22, 1.20.x through...CVE-2014-9277Fix available7.5 High
- mediawikiCross-site request forgery (CSRF) vulnerability in the Special:ExpandedTemplates page in...CVE-2014-92765.1 Medium
- mediawikiThe (1) Special:Preferences and (2) Special:UserLogin pages in MediaWiki before 1.19.20, 1.22.x...CVE-2014-7295Fix available3.5 Low
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.19, 1.22.x before 1.22.11, and...CVE-2014-7199Fix available4.3 Medium
- mediawikiMediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not...CVE-2014-5243Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in mediawiki.page.image.pagination.js in MediaWiki 1.22...CVE-2014-52424.3 Medium
- mediawikiThe JSONP endpoint in includes/api/ApiFormatJson.php in MediaWiki before 1.19.18, 1.20.x through...CVE-2014-5241Fix available6.8 Medium
- mediawikiCross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1...CVE-2014-3966Fix available2.6 Low
- mediawikimaintenance/mwdoc-filter.php in MediaWiki before 1.20.3 allows remote attackers to read arbitrary...CVE-2013-18185.0 Medium
- mediawikiSession fixation vulnerability in the CentralAuth extension for MediaWiki before 1.18.6, 1.19.x...CVE-2012-53956.8 Medium
- mediawikiSession fixation vulnerability in Special:UserLogin in MediaWiki before 1.18.6, 1.19.x before 1...CVE-2012-5391Fix available6.8 Medium
- mediawikiMultiple cross-site request forgery (CSRF) vulnerabilities in the (1) CreateProperty, (2)...CVE-2014-34556.8 Medium
- mediawikiCross-site request forgery (CSRF) vulnerability in Special:CreateCategory in the SemanticForms...CVE-2014-34546.8 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the TimeMediaHandler extension for MediaWiki before 1...CVE-2013-45744.3 Medium
- mediawikiBuffer overflow in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x...CVE-2013-45717.5 High
- mediawikiThe zend_inline_hash_func function in php-luasandbox in the Scribuntu extension for MediaWiki...CVE-2013-45705.0 Medium
- mediawikiCross-site scripting vulnerability in includes/actions/InfoAction.phpCVE-2014-2853Fix available4.3 Medium
- mediawikiincludes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before...CVE-2014-2665Fix available4.0 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1...CVE-2013-6454Fix available4.3 Medium
- mediawikiMediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to...CVE-2013-6472Fix available5.0 Medium
- mediawikiMediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize...CVE-2013-6453Fix available7.5 High
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1...CVE-2013-6452Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.19.9 before 1.19.10, 1.2x before 1.21.4,...CVE-2013-6451Fix available6.1 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the formatHTML function in includes/api/ApiFormatBase...CVE-2014-22444.3 Medium
- mediawikiincludes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before...CVE-2014-2243Fix available5.8 Medium
- mediawikiincludes/upload/UploadBase.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and...CVE-2014-2242Fix available4.3 Medium
- mediawikiMediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF...CVE-2014-1610Public exploitFix availableEPSS 42.8%6.0 Medium
- brion vibber centralauth extension, mediawiki +1 moreThe CentralAuth extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x...CVE-2013-43047.5 High
- mediawikiThe CleanChanges extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1...CVE-2013-45694.3 Medium
- mediawikiCross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before...CVE-2012-53946.8 Medium
- mediawiki, fedoraproject fedora +1 moreThe CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before...CVE-2013-4572Fix available7.5 High
- mediawikiIncomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x...CVE-2013-4568Fix available4.3 Medium
- mediawikiIncomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x...CVE-2013-4567Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the ZeroRatedMobileAccess extension for MediaWiki 1...CVE-2013-45734.3 Medium
- mediawiki, fedoraproject fedora, gentoo linux +2 moreMediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password...CVE-2013-2032Fix available5.0 Medium
- mediawiki, gentoo linux +1 moreMediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site...CVE-2013-2031Fix available4.3 Medium
- mediawikiCross-site request forgery (CSRF) vulnerability in api/ApiQueryCheckUser.php in the CheckUser...CVE-2013-43066.8 Medium
- Show moreLoading…