Browse CVEs

HIGH 7.5 CVE-2026-58036 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p… Mediawiki Mitigation only Fix from $1,9502026-07-01 MEDIUM 5.4 CVE-2026-58031 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This v… Mediawiki Mitigation only Fix from $1,6002026-07-01 MEDIUM 6.1 CVE-2019-15124 In the MobileFrontend extension for MediaWiki, XSS exists within the edit summary field of the watchlist feed. This affects REL1_31, REL1_32, and REL… Mobilefrontend No fix yet Fix from $1,6002020-03-19 MEDIUM 5.3 CVE-2014-1686 MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation. Mediawiki No fix yet Fix from $1,6002018-04-16 CRITICAL 9.8 CVE-2014-9487 The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service… Mediawiki Mitigation only Fix from $2,3002017-10-17 MEDIUM 6.0 CVE-2014-1610EPSS 43% MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attac… Mediawiki No fix yet Fix from $1,6002014-01-30 MEDIUM 5.0 CVE-2012-4885 The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to cause a denial of service (infinite loop) v… Mediawiki Mitigation only Fix from $1,6002012-09-09 MEDIUM 6.8 CVE-2012-1580 Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers … Mediawiki Mitigation only Fix from $1,6002012-09-09 MEDIUM 5.0 CVE-2012-1579 The resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private data such as CSRF tokens in a JavaScript file, which … Mediawiki No fix yet Fix from $1,6002012-09-09 MEDIUM 5.0 CVE-2012-1581 MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote attacker… Mediawiki Mitigation only Fix from $1,6002012-09-09 MEDIUM 6.8 CVE-2012-1578 Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allow remote attackers to hijac… Mediawiki Mitigation only Fix from $1,6002012-09-09 MEDIUM 5.0 CVE-2008-5687 MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might allow remo… Mediawiki Mitigation only Fix from $1,6002008-12-19