İçeriğe atla
Noroxi

mediawiki kayıtları

mediawiki üreticisine ait 466 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %0,4
Pre-auth RCE
10
Düzeltme kaydı olan
%60,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

466 kayıt
  • CVE-2017-0372
    60Bu hafta

    Parameters injection in SyntaxHighlight results in multiple vulnerabilities

    KritikCVSS 9,8SilahlaştırılmışEPSS %11

    mediawiki · mediawiki13 Nis 2018

  • CVE-2022-29904
    44Planlayın

    The SemanticDrilldown extension for MediaWiki through 1.37.2 (before e688bdba6434591b5dff689a45e4d53459954773) allows SQL injection with cer

    KritikCVSS 9,8İstismar yokEPSS %16

    mediawiki · mediawiki29 Nis 2022

  • CVE-2017-8809
    41Planlayın

    api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability.

    KritikCVSS 9,8Kavram kanıtıEPSS %7

    mediawiki · mediawiki15 Kas 2017

  • CVE-2014-1610
    40Planlayın

    MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows rem

    OrtaCVSS 6,0SilahlaştırılmışEPSS %42

    mediawiki · mediawiki30 Oca 2014

  • CVE-2019-12468
    40Planlayın

    An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.27.0 through 1.32.1.

    KritikCVSS 9,8İstismar yokEPSS %3

    mediawiki · mediawiki10 Tem 2019

  • CVE-2015-8009
    40Planlayın

    The MWOAuthDataStore::lookup_token function in Extension:OAuth for MediaWiki 1.25.x before 1.25.3, 1.24.x before 1.24.4, and before 1.23.11

    KritikCVSS 9,8İstismar yokEPSS %2

    mediawiki · mediawiki25 Tem 2017

  • CVE-2020-29007
    40Planlayın

    The Score extension through 0.3.0 for MediaWiki has a remote code execution vulnerability due to improper sandboxing of the GNU LilyPond exe

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    mediawiki · score15 Nis 2023

  • CVE-2014-9487
    40Planlayın

    The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial o

    KritikCVSS 9,8İstismar yokEPSS %2

    mediawiki · mediawiki17 Eki 2017

  • CVE-2015-8626
    40Planlayın

    The User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 generate

    KritikCVSS 9,8İstismar yokEPSS %1

    mediawiki · mediawiki23 Mar 2017

  • CVE-2021-31556
    39İzleyin

    An issue was discovered in the Oauth extension for MediaWiki through 1.35.2.

    KritikCVSS 9,8İstismar yokEPSS %1

    mediawiki · mediawiki12 Ağu 2021

  • CVE-2022-28205
    39İzleyin

    An issue was discovered in MediaWiki through 1.37.1.

    KritikCVSS 9,8İstismar yokEPSS %1

    mediawiki · mediawiki30 Mar 2022

  • CVE-2021-36128
    39İzleyin

    An issue was discovered in the CentralAuth extension in MediaWiki through 1.36.

    KritikCVSS 9,8İstismar yokEPSS %1

    mediawiki · mediawiki2 Tem 2021

  • CVE-2022-28206
    39İzleyin

    An issue was discovered in MediaWiki through 1.37.1.

    KritikCVSS 9,8İstismar yokEPSS %1

    mediawiki · mediawiki30 Mar 2022

  • CVE-2022-28209
    39İzleyin

    An issue was discovered in Mediawiki through 1.37.1.

    KritikCVSS 9,8İstismar yokEPSS %1

    mediawiki · mediawiki30 Mar 2022

  • CVE-2022-29906
    39İzleyin

    The admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66) omits a check

    KritikCVSS 9,8İstismar yokEPSS %1

    mediawiki · mediawiki29 Nis 2022

  • CVE-2020-10534
    39İzleyin

    In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked

    KritikCVSS 9,8İstismar yokEPSS %1

    mediawiki · mediawiki12 Mar 2020

  • CVE-2021-36126
    39İzleyin

    An issue was discovered in the AbuseFilter extension in MediaWiki through 1.36.

    KritikCVSS 9,8İstismar yokEPSS %1

    mediawiki · mediawiki2 Tem 2021

  • CVE-2023-29141
    39İzleyin

    An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3.

    KritikCVSS 9,8İstismar yokEPSS %1

    mediawiki · mediawiki31 Mar 2023

  • CVE-2023-37303
    39İzleyin

    An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3.

    KritikCVSS 9,8İstismar yokEPSS %0

    mediawiki · mediawiki30 Haz 2023

  • CVE-2024-34502
    39İzleyin

    An issue was discovered in WikibaseLexeme in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1.41.x before 1.41.1.

    KritikCVSS 9,8İstismar yokEPSS %0

    mediawiki · mediawiki5 May 2024

  • CVE-2023-45363
    37İzleyin

    An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1.

    YüksekCVSS 7,5İstismar yokEPSS %23

    mediawiki · mediawiki9 Eki 2023

  • CVE-2017-0367
    36İzleyin

    Having LocalisationCache directory default to system tmp directory is insecure

    YüksekCVSS 8,8İstismar yokEPSS %1

    mediawiki · mediawiki13 Nis 2018

  • CVE-2021-41801
    35İzleyin

    The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control.

    YüksekCVSS 8,8İstismar yokEPSS %1

    mediawiki · mediawiki11 Eki 2021

  • CVE-2020-35625
    35İzleyin

    An issue was discovered in the Widgets extension for MediaWiki through 1.35.1.

    YüksekCVSS 8,8İstismar yokEPSS %1

    mediawiki · mediawiki21 Ara 2020

  • CVE-2021-36132
    35İzleyin

    An issue was discovered in the FileImporter extension in MediaWiki through 1.36.

    YüksekCVSS 8,8İstismar yokEPSS %1

    mediawiki · mediawiki2 Tem 2021