İçeriğe atla
Noroxi

moinmo kayıtları

moinmo üreticisine ait 26 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %3,8
Pre-auth RCE
1
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

26 kayıt
  • CVE-2020-25074
    41Planlayın

    The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request.

    KritikCVSS 9,8İstismar yokEPSS %7

    moinmo · moinmoin10 Kas 2020

  • CVE-2012-6081
    35İzleyin

    Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) act

    OrtaCVSS 6,0SilahlaştırılmışEPSS %35

    moinmo · moinmoin2 Oca 2013

  • CVE-2009-4762
    31İzleyin

    MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchic

    YüksekCVSS 7,5İstismar yokEPSS %3

    moinmo · moinmoin29 Mar 2010

  • CVE-2010-0717
    31İzleyin

    The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has u

    YüksekCVSS 7,5İstismar yokEPSS %2

    moinmo · moinmoin26 Şub 2010

  • CVE-2010-0669
    31İzleyin

    MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors.

    YüksekCVSS 7,5İstismar yokEPSS %2

    moinmo · moinmoin26 Şub 2010

  • CVE-2012-6495
    30İzleyin

    Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions

    OrtaCVSS 6,0Kavram kanıtıEPSS %19

    moinmo · moinmoin2 Oca 2013

  • CVE-2010-0668
    28İzleyin

    Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors,

    OrtaCVSS 6,8İstismar yokEPSS %2

    moinmo · moinmoin26 Şub 2010

  • CVE-2008-6603
    27İzleyin

    MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass

    OrtaCVSS 6,8İstismar yokEPSS %2

    moinmo · moinmoin3 Nis 2009

  • CVE-2012-6080
    26İzleyin

    Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 thro

    OrtaCVSS 6,4İstismar yokEPSS %4

    moinmo · moinmoin2 Oca 2013

  • CVE-2012-4404
    25İzleyin

    security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Kno

    OrtaCVSS 6,0İstismar yokEPSS %2

    moinmo · moinmoin10 Eyl 2012

  • CVE-2017-5934
    25İzleyin

    Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbi

    OrtaCVSS 6,1İstismar yokEPSS %2

    moinmo · moinmoin15 Eki 2018

  • CVE-2016-9119
    24İzleyin

    Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbit

    OrtaCVSS 6,1İstismar yokEPSS %1

    moinmo · moinmoin30 Oca 2017

  • CVE-2016-7146
    24İzleyin

    MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, relat

    OrtaCVSS 6,1İstismar yokEPSS %1

    moinmo · moinmoin10 Kas 2016

  • CVE-2016-7148
    24İzleyin

    MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross

    OrtaCVSS 6,1İstismar yokEPSS %1

    moinmo · moinmoin10 Kas 2016

  • CVE-2020-15275
    22İzleyin

    malicious SVG attachment causing stored XSS vulnerability in MoinMoin

    OrtaCVSS 5,4İstismar yokEPSS %2

    moinmo · moinmoin11 Kas 2020

  • CVE-2010-1238
    21İzleyin

    MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer field

    OrtaCVSS 5,0İstismar yokEPSS %2

    moinmo · moinmoin5 Nis 2010

  • CVE-2010-0667
    21İzleyin

    MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment

    OrtaCVSS 5,0İstismar yokEPSS %2

    moinmo · moinmoin26 Şub 2010

  • CVE-2008-6549
    20İzleyin

    The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are no

    OrtaCVSS 5,0İstismar yokEPSS %1

    moinmo · moinmoin29 Mar 2009

  • CVE-2008-6548
    20İzleyin

    The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorize

    OrtaCVSS 5,0İstismar yokEPSS %1

    moinmo · moinmoin29 Mar 2009

  • CVE-2010-2487
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote a

    OrtaCVSS 4,3İstismar yokEPSS %3

    moinmo · moinmoin5 Ağu 2010

  • CVE-2010-2970
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or

    OrtaCVSS 4,3İstismar yokEPSS %3

    moinmo · moinmoin5 Ağu 2010

  • CVE-2010-2969
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject

    OrtaCVSS 4,3İstismar yokEPSS %3

    moinmo · moinmoin5 Ağu 2010

  • CVE-2009-1482
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject a

    OrtaCVSS 4,3İstismar yokEPSS %3

    moinmo · moinmoin29 Nis 2009

  • CVE-2012-6082
    18İzleyin

    Cross-site scripting (XSS) vulnerability in the rsslink function in theme/__init__.py in MoinMoin 1.9.5 allows remote attackers to inject ar

    OrtaCVSS 4,3İstismar yokEPSS %2

    moinmo · moinmoin2 Oca 2013

  • CVE-2010-0828
    15İzleyin

    Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authentic

    DüşükCVSS 3,5İstismar yokEPSS %2

    moinmo · moinmoin5 Nis 2010