Vulnerability index

Browse CVEs

249 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Cargo CRITICAL 9.8
CVE-2026-14363

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Exte…

Fix: 3.9.1+
Fix from $2,300 2026-07-01
Mediawiki MEDIUM 6.1
CVE-2026-14358

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Charts Ext…

Fix: 1.43.9 / 1.44.6+
Fix from $1,600 2026-07-01
Cargo CRITICAL 9.8
CVE-2026-58521

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Exte…

Fix: 3.9.1+
Fix from $2,300 2026-07-01
Mediawiki MEDIUM 6.1
CVE-2026-58520

URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Fl…

Fix: 1.43.9 / 1.44.6+
Fix from $1,600 2026-07-01
Mediawiki HIGH 8.8
CVE-2026-8857

A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTimeline.Pl, includes/Timeline.Ph…

Fix: 1.43.9 / 1.44.6+
Fix from $1,950 2026-07-01
Mediawiki MEDIUM 6.1
CVE-2026-58037

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This v…

Fix: 1.43.9 / 1.44.6+
Fix from $1,600 2026-07-01
Mediawiki MEDIUM 6.1
CVE-2026-58038

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation timeline. This vu…

Fix: 1.43.9 / 1.44.6+
Fix from $1,600 2026-07-01
Mediawiki HIGH 7.5
CVE-2026-58036

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p…

Mitigation only
Fix from $1,950 2026-07-01
Mediawiki MEDIUM 6.5
CVE-2026-58029

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, …

Fix: 1.43.9 / 1.44.6+
Fix from $1,600 2026-07-01
Mediawiki MEDIUM 6.5
CVE-2026-58033

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p…

Fix: 1.43.9 / 1.44.6+
Fix from $1,600 2026-07-01
Mediawiki MEDIUM 6.1
CVE-2026-58030

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation SyntaxHighlight_GeS…

Fix: 1.43.9 / 1.44.6+
Fix from $1,600 2026-07-01
Mediawiki MEDIUM 6.1
CVE-2026-58032

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This v…

Fix: 1.43.9 / 1.44.6+
Fix from $1,600 2026-07-01
Mediawiki MEDIUM 5.4
CVE-2026-58028

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedi…

Fix: 1.43.9 / 1.44.6+
Fix from $1,600 2026-07-01
Mediawiki CRITICAL 9.8
CVE-2026-58025

Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Imp…

Fix: 1.43.9 / 1.44.6+
Fix from $2,300 2026-07-01
Mediawiki MEDIUM 6.5
CVE-2026-58027

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with…

Fix: 1.43.9 / 1.44.6+
Fix from $1,600 2026-07-01
Mediawiki MEDIUM 5.7
CVE-2026-58024

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p…

Fix: 1.43.9 / 1.44.6+
Fix from $1,600 2026-07-01
Mediawiki MEDIUM 5.7
CVE-2026-58026

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p…

Fix: 1.43.9 / 1.44.6+
Fix from $1,600 2026-07-01
Mediawiki HIGH 8.8
CVE-2026-13706

Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShort…

Fix: 1.43.9 / 1.44.6+
Fix from $1,950 2026-07-01
Mediawiki HIGH 7.6
CVE-2026-13707

Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/Backend/MWOAuthServer.Php. …

Fix: 1.43.9 / 1.44.6+
Fix from $1,950 2026-07-01
Mediawiki MEDIUM 5.4
CVE-2026-58031

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This v…

Mitigation only
Fix from $1,600 2026-07-01
Cargo MEDIUM 5.4
CVE-2026-58519

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Exte…

Fix: 3.9.1+
Fix from $1,600 2026-07-01
Mediawiki MEDIUM 6.3
CVE-2026-58518

Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request Forgery. …

Fix: 1.3.3+
Fix from $1,600 2026-07-01
Mediawiki MEDIUM 6.1
CVE-2026-34095

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/ActionEntryPoint.Php, include…

Fix: 1.43.7 / 1.44.4+
Fix from $1,600 2026-05-11
Mediawiki MEDIUM 5.3
CVE-2026-34093

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p…

Fix: 1.43.7 / 1.44.4+
Fix from $1,600 2026-05-11
Mediawiki HIGH 7.5
CVE-2026-34087

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation OATHAuth. This issue affects OATHAuth: from * befor…

Fix: 1.43.7 / 1.44.4+
Fix from $1,950 2026-05-11
Mediawiki HIGH 7.5
CVE-2026-34088

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * bef…

Fix: 1.43.7 / 1.44.4+
Fix from $1,950 2026-05-11
Checkuser HIGH 7.5
CVE-2026-34090

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser. This issue affects CheckUser: from 1.45.…

Fix: 1.45.2+
Fix from $1,950 2026-05-11
Mediawiki HIGH 7.5
CVE-2026-34091

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * bef…

Fix: 1.43.7 / 1.44.4+
Fix from $1,950 2026-05-11
Mediawiki HIGH 7.5
CVE-2026-34092

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p…

Fix: 1.43.7 / 1.44.4+
Fix from $1,950 2026-05-11
Cargo MEDIUM 6.1
CVE-2026-39841

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allow…

Fix: 3.8.7+
Fix from $1,600 2026-04-07