Skip to contentMediawiki vulnerabilities
Newest
- mediawiki, debian linux +1 moreMake rawHTML mode not apply to system messagesCVE-2017-0368Fix available5.3 Medium
- mediawiki, debian linux +1 moreSVG filter evasion using default attribute values in DTD declarationCVE-2017-0366Fix available5.4 Medium
- mediawiki, debian linux +1 moreXSS in SearchHighlighter::highlightText() [requires non-default config]CVE-2017-0365Fix available4.7 Medium
- mediawiki, debian linux +1 moreSpecial:Search allows redirects to any interwiki linkCVE-2017-0364Fix available6.1 Medium
- mediawiki, debian linux +1 moreSpecial:UserLogin?returnto=interwiki:foo will redirect to external sitesCVE-2017-0363Fix available6.1 Medium
- mediawiki, debian linux +1 more"Mark all pages visited" on the watchlist does not require a CSRF tokenCVE-2017-0362Fix available8.8 High
- mediawiki, debian linux +1 moreapi.log contains passwords in plaintextCVE-2017-0361Fix available7.8 High
- mediawikiMediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote...CVE-2016-6336Fix available6.5 Medium
- mediawikiMediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 does not generate head...CVE-2016-6335Fix available7.5 High
- mediawikiCross-site scripting (XSS) vulnerability in the Parser::replaceInternalLinks2 method in MediaWiki...CVE-2016-6334Fix available6.1 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the CSS user subpage preview feature in MediaWiki...CVE-2016-6333Fix available6.1 Medium
- mediawikiMediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1, when ...CVE-2016-6332Fix available7.5 High
- mediawikiApiParse in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows...CVE-2016-6331Fix available7.5 High
- mediawikiThe (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads,...CVE-2015-8628Fix available5.3 Medium
- mediawikiMediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do...CVE-2015-8627Fix available5.3 Medium
- mediawikiThe User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x...CVE-2015-8626Fix available9.8 Critical
- mediawikiMediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do...CVE-2015-86257.5 High
- mediawikiThe User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12, 1.24.x before...CVE-2015-8624Fix available8.8 High
- mediawikiThe User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12 and 1.24.x...CVE-2015-8623Fix available8.8 High
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25...CVE-2015-8622Fix available6.1 Medium
- mediawikiMediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail...CVE-2015-8005Fix available5.0 Medium
- mediawikiMediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not properly...CVE-2015-8004Fix available4.0 Medium
- mediawikiMediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not throttle file...CVE-2015-8003Fix available6.8 Medium
- mediawikiThe chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x...CVE-2015-8002Fix available6.8 Medium
- mediawikiThe chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x...CVE-2015-8001Fix available3.5 Low
- mediawikiCross-site scripting (XSS) vulnerability in contrib/cssgen.php in the GeSHi, as used in the...CVE-2015-67344.3 Medium
- mediawikiGeSHi, as used in the SyntaxHighlight_GeSHi extension and MediaWiki before 1.23.10, 1.24.x before...CVE-2015-67335.0 Medium
- mediawikiCross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before...CVE-2015-6730Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before...CVE-2015-67294.3 Medium
- mediawikiThe ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1...CVE-2015-6728Fix available7.5 High
- mediawiki, canonical ubuntu linux +1 moreThe Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25...CVE-2015-6727Fix available5.0 Medium
- mediawikiThe Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if...CVE-2013-7444Fix available5.0 Medium
- mediawikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows...CVE-2015-2942Fix available7.1 High
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1...CVE-2015-2941Fix available4.3 Medium
- mediawiki checkuserCross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows...CVE-2015-2940Fix available6.8 Medium
- mediawiki scribuntoCross-site scripting (XSS) vulnerability in the Scribunto extension for MediaWiki allows remote...CVE-2015-2939Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1...CVE-2015-2938Fix available4.3 Medium
- mediawikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM or Zend...CVE-2015-2937Fix available7.1 High
- mediawikiMediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers...CVE-2015-2936Fix available7.1 High
- mediawikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to...CVE-2015-2935Fix available5.0 Medium
- mediawikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 does not properly handle...CVE-2015-2934Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the Html class in MediaWiki before 1.19.24, 1.2x...CVE-2015-2933Fix available4.3 Medium
- mediawikiIncomplete blacklist vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x...CVE-2015-2932Fix available4.3 Medium
- mediawikiIncomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24,...CVE-2015-2931Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the Hovercards extension for MediaWiki allows remote...CVE-2014-94804.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the preview in the TemplateSandbox extension for...CVE-2014-94794.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the preview in the ExpandTemplates extension for...CVE-2014-94782.6 Low
- mediawikiMultiple cross-site scripting (XSS) vulnerabilities in the Listings extension for MediaWiki allow...CVE-2014-94774.3 Medium
- mediawikiMediaWiki 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote...CVE-2014-94765.0 Medium
- mediawikiMediaWiki 1.21.x, 1.22.x before 1.22.14, and 1.23.x before 1.23.7, when $wgContentHandlerUseDB is...CVE-2014-95072.6 Low
- Show moreLoading…