Browse CVEs

MEDIUM 5.4 CVE-2020-15275 MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malicious javas… Moinmoin 1.9.11+ Fix from $1,6002020-11-11 MEDIUM 6.1 CVE-2016-7148 MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scri… Moinmoin No fix yet Fix from $1,6002016-11-10 MEDIUM 6.1 CVE-2016-7146 MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "… Moinmoin No fix yet Fix from $1,6002016-11-10 MEDIUM 6.4 CVE-2012-6080 Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5… Moinmoin Patch available Fix from $1,6002013-01-03 MEDIUM 6.0 CVE-2012-6081EPSS 31% Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in M… Moinmoin after 1.9.5 Fix from $1,6002013-01-03 MEDIUM 6.0 CVE-2012-6495EPSS 19% Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMo… Moinmoin after 1.9.5 Fix from $1,6002013-01-03 MEDIUM 6.0 CVE-2012-4404 security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "… Moinmoin Mitigation only Fix from $1,6002012-09-10 MEDIUM 5.0 CVE-2010-1238 MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer fields to have… Moinmoin Mitigation only Fix from $1,6002010-04-05 HIGH 7.5 CVE-2009-4762 MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, … Moinmoin Patch available Fix from $1,9502010-03-29 HIGH 7.5 CVE-2010-0669 MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors. Moinmoin after 1.8.6 Fix from $1,9502010-02-26 HIGH 7.5 CVE-2010-0717 The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecifie… Moinmoin after 1.8.6 Fix from $1,9502010-02-26 MEDIUM 6.8 CVE-2010-0668 Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related … Moinmoin Patch available Fix from $1,6002010-02-26 MEDIUM 5.0 CVE-2010-0667 MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable… Moinmoin Mitigation only Fix from $1,6002010-02-26 MEDIUM 6.8 CVE-2008-6603 MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended… Moinmoin No fix yet Fix from $1,6002009-04-03 MEDIUM 5.0 CVE-2008-6548 The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include… Moinmoin Mitigation only Fix from $1,6002009-03-30 MEDIUM 5.0 CVE-2008-6549 The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-… Moinmoin No fix yet Fix from $1,6002009-03-30