High
CVE-2023-45363
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 28
Reset filters
Critical
CVE-2023-29141
X-Forwarded-For header allows brute-forcing autoblocked IP addresses
Medium
CVE-2021-41800
MediaWiki allows a denial of service
Medium
CVE-2020-25813
MediaWiki Special:UserRights exposes the existence of hidden users
Medium
CVE-2020-25815
MediaWiki Cross-site Scripting (XSS) vulnerability
Medium
CVE-2020-25814
MediaWiki Cross-site Scripting (XSS) vulnerability
Medium
CVE-2020-25828
MediaWiki Cross-site Scripting (XSS) vulnerability
High
CVE-2020-25827
OATHAuth extension in MediaWiki is not implementing rate limit
Medium
CVE-2020-25812
MediaWiki Cross-site Scripting (XSS) vulnerability
Medium
CVE-2020-15005
img_auth.php may leak private extension images into the public cache
Medium
CVE-2020-10959
MediaWiki Open Redirect vulnerability
Medium
CVE-2020-10960
MediaWiki makeCollapsible allows applying event handler to any CSS selector
Medium
CVE-2019-19709
Possible to circumvent title-blacklist
Medium
CVE-2019-16738
MediaWiki information disclosure
High
CVE-2019-12474
Wikimedia information leak vulnerability
High
CVE-2019-12473
Wikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple
High
CVE-2019-12472
MediaWiki Incorrect Access Control vulnerability
Medium
CVE-2019-12471
MediaWiki Cross-site Scripting (XSS)
Medium
CVE-2019-12470
Wikimedia MediaWik exposed suppressed log in RevisionDelete page
Medium
CVE-2019-12469
MediaWiki Incorrect Access Control vulnerability
High
CVE-2019-12466
Wikimedia MediaWiki allows CSRF
Critical
CVE-2019-12468
Wikimedia MediaWiki Incorrect Access Control vulnerability
Medium
CVE-2019-12467
MediaWiki Incorrect Access Control vulnerability
Medium
CVE-2014-2853
Cross-site scripting vulnerability in includes/actions/InfoAction.php
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.