Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
Typedeb
Namespacedebian
Namemediawiki
Version1:1.19.20+dfsg-2.3
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1:1.39.17-1+deb12u2
Latest_non_vulnerable_version1:1.43.8+dfsg-2
Affected_by_vulnerabilities
0
url VCID-1697-p35n-fber
vulnerability_id VCID-1697-p35n-fber
summary
Wikimedia MediaWiki allows CSRF
Wikimedia MediaWiki through 1.32.1 allows CSRF in logout feature.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12466
reference_id
reference_type
scores
0
value 0.0018
scoring_system epss
scoring_elements 0.39621
published_at 2026-04-02T12:55:00Z
1
value 0.0018
scoring_system epss
scoring_elements 0.39524
published_at 2026-04-21T12:55:00Z
2
value 0.0018
scoring_system epss
scoring_elements 0.39608
published_at 2026-04-18T12:55:00Z
3
value 0.0018
scoring_system epss
scoring_elements 0.39615
published_at 2026-04-08T12:55:00Z
4
value 0.0018
scoring_system epss
scoring_elements 0.3956
published_at 2026-04-07T12:55:00Z
5
value 0.0018
scoring_system epss
scoring_elements 0.39644
published_at 2026-04-04T12:55:00Z
6
value 0.0018
scoring_system epss
scoring_elements 0.39472
published_at 2026-04-01T12:55:00Z
7
value 0.0018
scoring_system epss
scoring_elements 0.39637
published_at 2026-04-16T12:55:00Z
8
value 0.0018
scoring_system epss
scoring_elements 0.39586
published_at 2026-04-13T12:55:00Z
9
value 0.0018
scoring_system epss
scoring_elements 0.39602
published_at 2026-04-12T12:55:00Z
10
value 0.0018
scoring_system epss
scoring_elements 0.39639
published_at 2026-04-11T12:55:00Z
11
value 0.0018
scoring_system epss
scoring_elements 0.39629
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12466
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
11
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12466.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12466.yaml
12
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
13
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-12466
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-12466
15
reference_url https://phabricator.wikimedia.org/T25227
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T25227
16
reference_url https://seclists.org/bugtraq/2019/Jun/12
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2019/Jun/12
17
reference_url https://www.debian.org/security/2019/dsa-4460
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2019/dsa-4460
18
reference_url https://github.com/advisories/GHSA-27fw-r78j-h898
reference_id GHSA-27fw-r78j-h898
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-27fw-r78j-h898
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2019-12466, GHSA-27fw-r78j-h898
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1697-p35n-fber
1
url VCID-1866-gt2g-1qfv
vulnerability_id VCID-1866-gt2g-1qfv
summary
MediaWiki Incorrect Access Control vulnerability
MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12469
reference_id
reference_type
scores
0
value 0.00153
scoring_system epss
scoring_elements 0.35983
published_at 2026-04-01T12:55:00Z
1
value 0.00153
scoring_system epss
scoring_elements 0.36026
published_at 2026-04-21T12:55:00Z
2
value 0.00153
scoring_system epss
scoring_elements 0.36093
published_at 2026-04-16T12:55:00Z
3
value 0.00153
scoring_system epss
scoring_elements 0.36092
published_at 2026-04-08T12:55:00Z
4
value 0.00153
scoring_system epss
scoring_elements 0.36042
published_at 2026-04-07T12:55:00Z
5
value 0.00153
scoring_system epss
scoring_elements 0.36207
published_at 2026-04-04T12:55:00Z
6
value 0.00153
scoring_system epss
scoring_elements 0.36178
published_at 2026-04-02T12:55:00Z
7
value 0.00153
scoring_system epss
scoring_elements 0.36052
published_at 2026-04-13T12:55:00Z
8
value 0.00153
scoring_system epss
scoring_elements 0.36078
published_at 2026-04-18T12:55:00Z
9
value 0.00153
scoring_system epss
scoring_elements 0.36116
published_at 2026-04-11T12:55:00Z
10
value 0.00153
scoring_system epss
scoring_elements 0.3611
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12469
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
11
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12469.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12469.yaml
12
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
13
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-12469
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-12469
15
reference_url https://phabricator.wikimedia.org/T222036
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T222036
16
reference_url https://seclists.org/bugtraq/2019/Jun/12
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2019/Jun/12
17
reference_url https://www.debian.org/security/2019/dsa-4460
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2019/dsa-4460
18
reference_url https://github.com/advisories/GHSA-x3fr-w7r5-x7rg
reference_id GHSA-x3fr-w7r5-x7rg
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x3fr-w7r5-x7rg
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2019-12469, GHSA-x3fr-w7r5-x7rg
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1866-gt2g-1qfv
2
url VCID-1993-aw6b-4kg7
vulnerability_id VCID-1993-aw6b-4kg7
summary security update
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8808
reference_id
reference_type
scores
0
value 0.00403
scoring_system epss
scoring_elements 0.60937
published_at 2026-04-21T12:55:00Z
1
value 0.00403
scoring_system epss
scoring_elements 0.60947
published_at 2026-04-16T12:55:00Z
2
value 0.00403
scoring_system epss
scoring_elements 0.60953
published_at 2026-04-18T12:55:00Z
3
value 0.00403
scoring_system epss
scoring_elements 0.60786
published_at 2026-04-01T12:55:00Z
4
value 0.00403
scoring_system epss
scoring_elements 0.60858
published_at 2026-04-02T12:55:00Z
5
value 0.00403
scoring_system epss
scoring_elements 0.60887
published_at 2026-04-04T12:55:00Z
6
value 0.00403
scoring_system epss
scoring_elements 0.60851
published_at 2026-04-07T12:55:00Z
7
value 0.00403
scoring_system epss
scoring_elements 0.609
published_at 2026-04-08T12:55:00Z
8
value 0.00403
scoring_system epss
scoring_elements 0.60916
published_at 2026-04-09T12:55:00Z
9
value 0.00403
scoring_system epss
scoring_elements 0.60938
published_at 2026-04-11T12:55:00Z
10
value 0.00403
scoring_system epss
scoring_elements 0.60924
published_at 2026-04-12T12:55:00Z
11
value 0.00403
scoring_system epss
scoring_elements 0.60905
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8808
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8808
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8808
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8809
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8809
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8810
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8810
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8811
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8811
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8812
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8814
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8815
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8815
8
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html
9
reference_url https://www.debian.org/security/2017/dsa-4036
reference_id
reference_type
scores
url https://www.debian.org/security/2017/dsa-4036
10
reference_url http://www.securitytracker.com/id/1039812
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1039812
11
reference_url https://security.archlinux.org/ASA-201711-20
reference_id ASA-201711-20
reference_type
scores
url https://security.archlinux.org/ASA-201711-20
12
reference_url https://security.archlinux.org/AVG-490
reference_id AVG-490
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-490
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-8808
reference_id CVE-2017-8808
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:P/A:N
1
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2017-8808
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
aliases CVE-2017-8808
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1993-aw6b-4kg7
3
url VCID-1f7s-dk69-mqg2
vulnerability_id VCID-1f7s-dk69-mqg2
summary The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-6727
reference_id
reference_type
scores
0
value 0.00407
scoring_system epss
scoring_elements 0.60993
published_at 2026-04-01T12:55:00Z
1
value 0.00407
scoring_system epss
scoring_elements 0.61069
published_at 2026-04-02T12:55:00Z
2
value 0.00407
scoring_system epss
scoring_elements 0.61097
published_at 2026-04-04T12:55:00Z
3
value 0.00407
scoring_system epss
scoring_elements 0.61063
published_at 2026-04-07T12:55:00Z
4
value 0.00407
scoring_system epss
scoring_elements 0.61111
published_at 2026-04-08T12:55:00Z
5
value 0.00407
scoring_system epss
scoring_elements 0.61127
published_at 2026-04-09T12:55:00Z
6
value 0.00407
scoring_system epss
scoring_elements 0.61148
published_at 2026-04-11T12:55:00Z
7
value 0.00407
scoring_system epss
scoring_elements 0.61134
published_at 2026-04-12T12:55:00Z
8
value 0.00407
scoring_system epss
scoring_elements 0.61115
published_at 2026-04-13T12:55:00Z
9
value 0.00407
scoring_system epss
scoring_elements 0.61156
published_at 2026-04-16T12:55:00Z
10
value 0.00407
scoring_system epss
scoring_elements 0.61162
published_at 2026-04-18T12:55:00Z
11
value 0.00407
scoring_system epss
scoring_elements 0.61144
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-6727
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6727
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6727
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799096
reference_id 799096
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799096
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2015-6727
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1f7s-dk69-mqg2
4
url VCID-1fr2-q23d-ekdf
vulnerability_id VCID-1fr2-q23d-ekdf
summary mediawiki: remote information disclosure
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0371.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0371.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-0371
reference_id
reference_type
scores
0
value 0.00212
scoring_system epss
scoring_elements 0.43709
published_at 2026-04-01T12:55:00Z
1
value 0.00212
scoring_system epss
scoring_elements 0.43763
published_at 2026-04-02T12:55:00Z
2
value 0.00212
scoring_system epss
scoring_elements 0.43787
published_at 2026-04-04T12:55:00Z
3
value 0.00212
scoring_system epss
scoring_elements 0.4372
published_at 2026-04-07T12:55:00Z
4
value 0.00212
scoring_system epss
scoring_elements 0.43771
published_at 2026-04-08T12:55:00Z
5
value 0.00212
scoring_system epss
scoring_elements 0.43775
published_at 2026-04-09T12:55:00Z
6
value 0.00212
scoring_system epss
scoring_elements 0.43795
published_at 2026-04-11T12:55:00Z
7
value 0.00212
scoring_system epss
scoring_elements 0.43762
published_at 2026-04-12T12:55:00Z
8
value 0.00212
scoring_system epss
scoring_elements 0.43746
published_at 2026-04-13T12:55:00Z
9
value 0.00212
scoring_system epss
scoring_elements 0.43808
published_at 2026-04-16T12:55:00Z
10
value 0.00212
scoring_system epss
scoring_elements 0.43799
published_at 2026-04-18T12:55:00Z
11
value 0.00212
scoring_system epss
scoring_elements 0.43732
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-0371
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0371
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0371
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2060015
reference_id 2060015
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2060015
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2017-0371
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1fr2-q23d-ekdf
5
url VCID-1hwd-avxk-fqbs
vulnerability_id VCID-1hwd-avxk-fqbs
summary The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted links combined with page view statistics.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8628
reference_id
reference_type
scores
0
value 0.00435
scoring_system epss
scoring_elements 0.62879
published_at 2026-04-21T12:55:00Z
1
value 0.00435
scoring_system epss
scoring_elements 0.629
published_at 2026-04-18T12:55:00Z
2
value 0.00435
scoring_system epss
scoring_elements 0.62748
published_at 2026-04-01T12:55:00Z
3
value 0.00435
scoring_system epss
scoring_elements 0.62806
published_at 2026-04-02T12:55:00Z
4
value 0.00435
scoring_system epss
scoring_elements 0.62835
published_at 2026-04-04T12:55:00Z
5
value 0.00435
scoring_system epss
scoring_elements 0.62799
published_at 2026-04-07T12:55:00Z
6
value 0.00435
scoring_system epss
scoring_elements 0.6285
published_at 2026-04-08T12:55:00Z
7
value 0.00435
scoring_system epss
scoring_elements 0.62867
published_at 2026-04-09T12:55:00Z
8
value 0.00435
scoring_system epss
scoring_elements 0.62885
published_at 2026-04-11T12:55:00Z
9
value 0.00435
scoring_system epss
scoring_elements 0.62874
published_at 2026-04-12T12:55:00Z
10
value 0.00435
scoring_system epss
scoring_elements 0.62852
published_at 2026-04-13T12:55:00Z
11
value 0.00435
scoring_system epss
scoring_elements 0.62892
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8628
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8628
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8628
2
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html
3
reference_url https://phabricator.wikimedia.org/T109724
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T109724
4
reference_url http://www.openwall.com/lists/oss-security/2015/12/21/8
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/12/21/8
5
reference_url http://www.openwall.com/lists/oss-security/2015/12/23/7
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/12/23/7
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8628
reference_id CVE-2015-8628
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:N/A:N
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2015-8628
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2015-8628
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1hwd-avxk-fqbs
6
url VCID-1na8-nyq1-yfcy
vulnerability_id VCID-1na8-nyq1-yfcy
summary An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20270.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20270.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-20270
reference_id
reference_type
scores
0
value 0.00205
scoring_system epss
scoring_elements 0.42583
published_at 2026-04-01T12:55:00Z
1
value 0.00205
scoring_system epss
scoring_elements 0.42655
published_at 2026-04-13T12:55:00Z
2
value 0.00205
scoring_system epss
scoring_elements 0.42672
published_at 2026-04-12T12:55:00Z
3
value 0.00205
scoring_system epss
scoring_elements 0.42708
published_at 2026-04-11T12:55:00Z
4
value 0.00205
scoring_system epss
scoring_elements 0.42685
published_at 2026-04-09T12:55:00Z
5
value 0.00205
scoring_system epss
scoring_elements 0.42673
published_at 2026-04-08T12:55:00Z
6
value 0.00205
scoring_system epss
scoring_elements 0.42622
published_at 2026-04-07T12:55:00Z
7
value 0.00205
scoring_system epss
scoring_elements 0.42682
published_at 2026-04-04T12:55:00Z
8
value 0.00205
scoring_system epss
scoring_elements 0.42654
published_at 2026-04-02T12:55:00Z
9
value 0.00223
scoring_system epss
scoring_elements 0.44911
published_at 2026-04-21T12:55:00Z
10
value 0.00223
scoring_system epss
scoring_elements 0.44961
published_at 2026-04-18T12:55:00Z
11
value 0.00223
scoring_system epss
scoring_elements 0.44968
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-20270
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1922136
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1922136
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://github.com/advisories/GHSA-9w8r-397f-prfh
reference_id
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9w8r-397f-prfh
13
reference_url https://github.com/pygments/pygments
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pygments/pygments
14
reference_url https://github.com/pygments/pygments/commit/f91804ff4772e3ab41f46e28d370f57898700333
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pygments/pygments/commit/f91804ff4772e3ab41f46e28d370f57898700333
15
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/pygments/PYSEC-2021-140.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/pygments/PYSEC-2021-140.yaml
16
reference_url https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html
17
reference_url https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-20270
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-20270
19
reference_url https://www.debian.org/security/2021/dsa-4889
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4889
20
reference_url https://www.oracle.com/security-alerts/cpuoct2021.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuoct2021.html
21
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984664
reference_id 984664
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984664
22
reference_url https://security.archlinux.org/AVG-1662
reference_id AVG-1662
reference_type
scores
0
value Low
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1662
23
reference_url https://security.archlinux.org/AVG-1775
reference_id AVG-1775
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1775
24
reference_url https://access.redhat.com/errata/RHSA-2021:0781
reference_id RHSA-2021:0781
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0781
25
reference_url https://access.redhat.com/errata/RHSA-2021:3252
reference_id RHSA-2021:3252
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3252
26
reference_url https://access.redhat.com/errata/RHSA-2021:4139
reference_id RHSA-2021:4139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4139
27
reference_url https://access.redhat.com/errata/RHSA-2021:4150
reference_id RHSA-2021:4150
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4150
28
reference_url https://access.redhat.com/errata/RHSA-2021:4151
reference_id RHSA-2021:4151
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4151
29
reference_url https://usn.ubuntu.com/4885-1/
reference_id USN-4885-1
reference_type
scores
url https://usn.ubuntu.com/4885-1/
30
reference_url https://usn.ubuntu.com/4897-2/
reference_id USN-4897-2
reference_type
scores
url https://usn.ubuntu.com/4897-2/
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-20270, GHSA-9w8r-397f-prfh, PYSEC-2021-140
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1na8-nyq1-yfcy
7
url VCID-22yj-98wv-skc9
vulnerability_id VCID-22yj-98wv-skc9
summary security update
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8815
reference_id
reference_type
scores
0
value 0.00395
scoring_system epss
scoring_elements 0.60423
published_at 2026-04-18T12:55:00Z
1
value 0.00395
scoring_system epss
scoring_elements 0.60374
published_at 2026-04-13T12:55:00Z
2
value 0.00395
scoring_system epss
scoring_elements 0.60415
published_at 2026-04-21T12:55:00Z
3
value 0.00395
scoring_system epss
scoring_elements 0.60251
published_at 2026-04-01T12:55:00Z
4
value 0.00395
scoring_system epss
scoring_elements 0.60327
published_at 2026-04-02T12:55:00Z
5
value 0.00395
scoring_system epss
scoring_elements 0.60353
published_at 2026-04-04T12:55:00Z
6
value 0.00395
scoring_system epss
scoring_elements 0.60322
published_at 2026-04-07T12:55:00Z
7
value 0.00395
scoring_system epss
scoring_elements 0.60371
published_at 2026-04-08T12:55:00Z
8
value 0.00395
scoring_system epss
scoring_elements 0.60387
published_at 2026-04-09T12:55:00Z
9
value 0.00395
scoring_system epss
scoring_elements 0.60407
published_at 2026-04-11T12:55:00Z
10
value 0.00395
scoring_system epss
scoring_elements 0.60394
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8815
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8808
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8808
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8809
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8809
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8810
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8810
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8811
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8811
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8812
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8814
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8815
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8815
8
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html
9
reference_url https://www.debian.org/security/2017/dsa-4036
reference_id
reference_type
scores
url https://www.debian.org/security/2017/dsa-4036
10
reference_url http://www.securitytracker.com/id/1039812
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1039812
11
reference_url https://security.archlinux.org/ASA-201711-20
reference_id ASA-201711-20
reference_type
scores
url https://security.archlinux.org/ASA-201711-20
12
reference_url https://security.archlinux.org/AVG-490
reference_id AVG-490
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-490
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-8815
reference_id CVE-2017-8815
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:P/A:N
1
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2017-8815
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
aliases CVE-2017-8815
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-22yj-98wv-skc9
8
url VCID-29fv-52ge-mbft
vulnerability_id VCID-29fv-52ge-mbft
summary mediawiki: "Mark all pages visited" on the watchlist does not require a CSRF token
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0362.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0362.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-0362
reference_id
reference_type
scores
0
value 0.0015
scoring_system epss
scoring_elements 0.35437
published_at 2026-04-01T12:55:00Z
1
value 0.0015
scoring_system epss
scoring_elements 0.35636
published_at 2026-04-02T12:55:00Z
2
value 0.0015
scoring_system epss
scoring_elements 0.35661
published_at 2026-04-04T12:55:00Z
3
value 0.0015
scoring_system epss
scoring_elements 0.35542
published_at 2026-04-07T12:55:00Z
4
value 0.0015
scoring_system epss
scoring_elements 0.35588
published_at 2026-04-08T12:55:00Z
5
value 0.0015
scoring_system epss
scoring_elements 0.35613
published_at 2026-04-09T12:55:00Z
6
value 0.0015
scoring_system epss
scoring_elements 0.35622
published_at 2026-04-11T12:55:00Z
7
value 0.0015
scoring_system epss
scoring_elements 0.35578
published_at 2026-04-12T12:55:00Z
8
value 0.0015
scoring_system epss
scoring_elements 0.35555
published_at 2026-04-13T12:55:00Z
9
value 0.0015
scoring_system epss
scoring_elements 0.35595
published_at 2026-04-16T12:55:00Z
10
value 0.0015
scoring_system epss
scoring_elements 0.35584
published_at 2026-04-18T12:55:00Z
11
value 0.0015
scoring_system epss
scoring_elements 0.35535
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-0362
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0362
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0362
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1569737
reference_id 1569737
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1569737
4
reference_url https://security.archlinux.org/ASA-201704-3
reference_id ASA-201704-3
reference_type
scores
url https://security.archlinux.org/ASA-201704-3
5
reference_url https://security.archlinux.org/AVG-236
reference_id AVG-236
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-236
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2017-0362
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-29fv-52ge-mbft
9
url VCID-2abz-k2yv-zkbp
vulnerability_id VCID-2abz-k2yv-zkbp
summary security update
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8809
reference_id
reference_type
scores
0
value 0.18083
scoring_system epss
scoring_elements 0.95188
published_at 2026-04-21T12:55:00Z
1
value 0.18083
scoring_system epss
scoring_elements 0.95183
published_at 2026-04-16T12:55:00Z
2
value 0.18083
scoring_system epss
scoring_elements 0.95187
published_at 2026-04-18T12:55:00Z
3
value 0.18083
scoring_system epss
scoring_elements 0.9514
published_at 2026-04-01T12:55:00Z
4
value 0.18083
scoring_system epss
scoring_elements 0.9515
published_at 2026-04-02T12:55:00Z
5
value 0.18083
scoring_system epss
scoring_elements 0.95152
published_at 2026-04-04T12:55:00Z
6
value 0.18083
scoring_system epss
scoring_elements 0.95154
published_at 2026-04-07T12:55:00Z
7
value 0.18083
scoring_system epss
scoring_elements 0.95162
published_at 2026-04-08T12:55:00Z
8
value 0.18083
scoring_system epss
scoring_elements 0.95166
published_at 2026-04-09T12:55:00Z
9
value 0.18083
scoring_system epss
scoring_elements 0.95172
published_at 2026-04-11T12:55:00Z
10
value 0.18083
scoring_system epss
scoring_elements 0.95173
published_at 2026-04-12T12:55:00Z
11
value 0.18083
scoring_system epss
scoring_elements 0.95175
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8809
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8808
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8808
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8809
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8809
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8810
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8810
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8811
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8811
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8812
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8814
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8815
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8815
8
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html
9
reference_url https://www.debian.org/security/2017/dsa-4036
reference_id
reference_type
scores
url https://www.debian.org/security/2017/dsa-4036
10
reference_url http://www.securitytracker.com/id/1039812
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1039812
11
reference_url https://security.archlinux.org/ASA-201711-20
reference_id ASA-201711-20
reference_type
scores
url https://security.archlinux.org/ASA-201711-20
12
reference_url https://security.archlinux.org/AVG-490
reference_id AVG-490
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-490
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-8809
reference_id CVE-2017-8809
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2017-8809
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
aliases CVE-2017-8809
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2abz-k2yv-zkbp
10
url VCID-2fva-bc2j-dban
vulnerability_id VCID-2fva-bc2j-dban
summary MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not throttle file uploads, which allows remote authenticated users to have unspecified impact via multiple file uploads.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8003
reference_id
reference_type
scores
0
value 0.00522
scoring_system epss
scoring_elements 0.66897
published_at 2026-04-21T12:55:00Z
1
value 0.00522
scoring_system epss
scoring_elements 0.66795
published_at 2026-04-01T12:55:00Z
2
value 0.00522
scoring_system epss
scoring_elements 0.66833
published_at 2026-04-02T12:55:00Z
3
value 0.00522
scoring_system epss
scoring_elements 0.66859
published_at 2026-04-04T12:55:00Z
4
value 0.00522
scoring_system epss
scoring_elements 0.66831
published_at 2026-04-07T12:55:00Z
5
value 0.00522
scoring_system epss
scoring_elements 0.6688
published_at 2026-04-08T12:55:00Z
6
value 0.00522
scoring_system epss
scoring_elements 0.66893
published_at 2026-04-09T12:55:00Z
7
value 0.00522
scoring_system epss
scoring_elements 0.66913
published_at 2026-04-11T12:55:00Z
8
value 0.00522
scoring_system epss
scoring_elements 0.66899
published_at 2026-04-12T12:55:00Z
9
value 0.00522
scoring_system epss
scoring_elements 0.66867
published_at 2026-04-13T12:55:00Z
10
value 0.00522
scoring_system epss
scoring_elements 0.669
published_at 2026-04-16T12:55:00Z
11
value 0.00522
scoring_system epss
scoring_elements 0.66914
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8003
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8003
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8003
2
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html
3
reference_url https://phabricator.wikimedia.org/T91850
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T91850
4
reference_url http://www.securitytracker.com/id/1034028
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1034028
5
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8003
reference_id CVE-2015-8003
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:N/I:N/A:C
url https://nvd.nist.gov/vuln/detail/CVE-2015-8003
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2015-8003
risk_score 3.0
exploitability 0.5
weighted_severity 6.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2fva-bc2j-dban
11
url VCID-2wcb-hty6-uyez
vulnerability_id VCID-2wcb-hty6-uyez
summary Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki Core - Feed Utils allows WebView Injection.This issue affects Mediawiki Core - Feed Utils: from 1.39 through 1.43.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-32072
reference_id
reference_type
scores
0
value 0.00454
scoring_system epss
scoring_elements 0.63766
published_at 2026-04-02T12:55:00Z
1
value 0.00544
scoring_system epss
scoring_elements 0.67788
published_at 2026-04-21T12:55:00Z
2
value 0.00544
scoring_system epss
scoring_elements 0.67805
published_at 2026-04-18T12:55:00Z
3
value 0.00544
scoring_system epss
scoring_elements 0.67791
published_at 2026-04-12T12:55:00Z
4
value 0.00544
scoring_system epss
scoring_elements 0.67757
published_at 2026-04-13T12:55:00Z
5
value 0.00544
scoring_system epss
scoring_elements 0.67793
published_at 2026-04-16T12:55:00Z
6
value 0.00544
scoring_system epss
scoring_elements 0.67735
published_at 2026-04-04T12:55:00Z
7
value 0.00544
scoring_system epss
scoring_elements 0.67715
published_at 2026-04-07T12:55:00Z
8
value 0.00544
scoring_system epss
scoring_elements 0.67767
published_at 2026-04-08T12:55:00Z
9
value 0.00544
scoring_system epss
scoring_elements 0.67781
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-32072
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32072
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32072
2
reference_url https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1120134
reference_id 1120134
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-11T16:39:44Z/
url https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1120134
3
reference_url https://phabricator.wikimedia.org/T386175
reference_id T386175
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-11T16:39:44Z/
url https://phabricator.wikimedia.org/T386175
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-32072
risk_score 2.0
exploitability 0.5
weighted_severity 4.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2wcb-hty6-uyez
12
url VCID-2xja-2whv-fqe4
vulnerability_id VCID-2xja-2whv-fqe4
summary mediawiki: diff-multi-sameuser ("X intermediate revisions by the same user not shown") ignores username suppression
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-45362.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-45362.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-45362
reference_id
reference_type
scores
0
value 0.00392
scoring_system epss
scoring_elements 0.60186
published_at 2026-04-02T12:55:00Z
1
value 0.00392
scoring_system epss
scoring_elements 0.60211
published_at 2026-04-04T12:55:00Z
2
value 0.00392
scoring_system epss
scoring_elements 0.6018
published_at 2026-04-07T12:55:00Z
3
value 0.00392
scoring_system epss
scoring_elements 0.6023
published_at 2026-04-08T12:55:00Z
4
value 0.00392
scoring_system epss
scoring_elements 0.60244
published_at 2026-04-09T12:55:00Z
5
value 0.00392
scoring_system epss
scoring_elements 0.60265
published_at 2026-04-11T12:55:00Z
6
value 0.00392
scoring_system epss
scoring_elements 0.60251
published_at 2026-04-12T12:55:00Z
7
value 0.00392
scoring_system epss
scoring_elements 0.60234
published_at 2026-04-13T12:55:00Z
8
value 0.00392
scoring_system epss
scoring_elements 0.60273
published_at 2026-04-16T12:55:00Z
9
value 0.00392
scoring_system epss
scoring_elements 0.60281
published_at 2026-04-18T12:55:00Z
10
value 0.00392
scoring_system epss
scoring_elements 0.60267
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-45362
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3550
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3550
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45360
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45360
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45362
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45362
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45363
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45363
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2247805
reference_id 2247805
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2247805
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2023-45362
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2xja-2whv-fqe4
13
url VCID-32f4-khen-3yez
vulnerability_id VCID-32f4-khen-3yez
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which could result in a Denial of Service condition.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30159.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30159.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-30159
reference_id
reference_type
scores
0
value 0.00866
scoring_system epss
scoring_elements 0.75081
published_at 2026-04-01T12:55:00Z
1
value 0.00866
scoring_system epss
scoring_elements 0.75083
published_at 2026-04-02T12:55:00Z
2
value 0.00866
scoring_system epss
scoring_elements 0.75112
published_at 2026-04-04T12:55:00Z
3
value 0.00866
scoring_system epss
scoring_elements 0.75089
published_at 2026-04-07T12:55:00Z
4
value 0.00866
scoring_system epss
scoring_elements 0.75123
published_at 2026-04-08T12:55:00Z
5
value 0.00866
scoring_system epss
scoring_elements 0.75135
published_at 2026-04-12T12:55:00Z
6
value 0.00866
scoring_system epss
scoring_elements 0.75157
published_at 2026-04-11T12:55:00Z
7
value 0.00866
scoring_system epss
scoring_elements 0.75124
published_at 2026-04-13T12:55:00Z
8
value 0.00873
scoring_system epss
scoring_elements 0.75287
published_at 2026-04-21T12:55:00Z
9
value 0.00873
scoring_system epss
scoring_elements 0.75289
published_at 2026-04-16T12:55:00Z
10
value 0.00873
scoring_system epss
scoring_elements 0.75296
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-30159
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1948638
reference_id 1948638
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1948638
11
reference_url https://security.archlinux.org/AVG-1775
reference_id AVG-1775
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1775
12
reference_url https://security.gentoo.org/glsa/202107-40
reference_id GLSA-202107-40
reference_type
scores
url https://security.gentoo.org/glsa/202107-40
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-30159
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-32f4-khen-3yez
14
url VCID-3s9f-prpy-hbcx
vulnerability_id VCID-3s9f-prpy-hbcx
summary
Cross-site Scripting
The jQuery library, which is included in rdoc, mishandles `jQuery.extend(true, {}, ...)` because of Object.prototype pollution. If an unsanitized source object contained an enumerable `__proto__` property, it could extend the native `Object.prototype.`
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html
2
reference_url http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html
3
reference_url http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html
4
reference_url http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html
5
reference_url https://access.redhat.com/errata/RHBA-2019:1570
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://access.redhat.com/errata/RHBA-2019:1570
6
reference_url https://access.redhat.com/errata/RHSA-2019:1456
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://access.redhat.com/errata/RHSA-2019:1456
7
reference_url https://access.redhat.com/errata/RHSA-2019:2587
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://access.redhat.com/errata/RHSA-2019:2587
8
reference_url https://access.redhat.com/errata/RHSA-2019:3023
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://access.redhat.com/errata/RHSA-2019:3023
9
reference_url https://access.redhat.com/errata/RHSA-2019:3024
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://access.redhat.com/errata/RHSA-2019:3024
10
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json
reference_id
reference_type
scores
0
value 5.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json
11
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-11358
reference_id
reference_type
scores
0
value 0.01856
scoring_system epss
scoring_elements 0.8299
published_at 2026-04-04T12:55:00Z
1
value 0.01856
scoring_system epss
scoring_elements 0.82988
published_at 2026-04-07T12:55:00Z
2
value 0.01856
scoring_system epss
scoring_elements 0.83012
published_at 2026-04-08T12:55:00Z
3
value 0.01856
scoring_system epss
scoring_elements 0.8302
published_at 2026-04-09T12:55:00Z
4
value 0.01856
scoring_system epss
scoring_elements 0.83035
published_at 2026-04-11T12:55:00Z
5
value 0.01856
scoring_system epss
scoring_elements 0.83028
published_at 2026-04-12T12:55:00Z
6
value 0.01856
scoring_system epss
scoring_elements 0.83024
published_at 2026-04-13T12:55:00Z
7
value 0.02362
scoring_system epss
scoring_elements 0.84954
published_at 2026-04-21T12:55:00Z
8
value 0.02646
scoring_system epss
scoring_elements 0.85754
published_at 2026-04-16T12:55:00Z
9
value 0.02646
scoring_system epss
scoring_elements 0.85759
published_at 2026-04-18T12:55:00Z
10
value 0.02717
scoring_system epss
scoring_elements 0.8586
published_at 2026-04-01T12:55:00Z
11
value 0.02717
scoring_system epss
scoring_elements 0.85871
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-11358
12
reference_url https://backdropcms.org/security/backdrop-sa-core-2019-009
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://backdropcms.org/security/backdrop-sa-core-2019-009
13
reference_url https://blog.jquery.com/2019/04/10/jquery-3-4-0-released
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://blog.jquery.com/2019/04/10/jquery-3-4-0-released
14
reference_url https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
23
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
25
reference_url http://seclists.org/fulldisclosure/2019/May/10
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url http://seclists.org/fulldisclosure/2019/May/10
26
reference_url http://seclists.org/fulldisclosure/2019/May/11
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url http://seclists.org/fulldisclosure/2019/May/11
27
reference_url http://seclists.org/fulldisclosure/2019/May/13
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url http://seclists.org/fulldisclosure/2019/May/13
28
reference_url https://github.com/django/django/commit/34ec52269ade54af31a021b12969913129571a3f
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/34ec52269ade54af31a021b12969913129571a3f
29
reference_url https://github.com/django/django/commit/95649bc08547a878cebfa1d019edec8cb1b80829
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/95649bc08547a878cebfa1d019edec8cb1b80829
30
reference_url https://github.com/django/django/commit/baaf187a4e354bf3976c51e2c83a0d2f8ee6e6ad
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/baaf187a4e354bf3976c51e2c83a0d2f8ee6e6ad
31
reference_url https://github.com/jquery/jquery
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/jquery/jquery
32
reference_url https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b
33
reference_url https://github.com/jquery/jquery/pull/4333
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://github.com/jquery/jquery/pull/4333
34
reference_url https://github.com/maximebf/php-debugbar/commit/847216e60544258c881f2733d699bbcfeefac0fc
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/maximebf/php-debugbar/commit/847216e60544258c881f2733d699bbcfeefac0fc
35
reference_url https://github.com/maximebf/php-debugbar/issues/447
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/maximebf/php-debugbar/issues/447
36
reference_url https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#434
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#434
37
reference_url https://hackerone.com/reports/454365
reference_id
reference_type
scores
0
value 5.6
scoring_system cvssv3
scoring_elements
url https://hackerone.com/reports/454365
38
reference_url https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
39
reference_url https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc@%3Ccommits.airflow.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc@%3Ccommits.airflow.apache.org%3E
40
reference_url https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3E
41
reference_url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
42
reference_url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
43
reference_url https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844@%3Ccommits.airflow.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844@%3Ccommits.airflow.apache.org%3E
44
reference_url https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3E
45
reference_url https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f@%3Ccommits.airflow.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f@%3Ccommits.airflow.apache.org%3E
46
reference_url https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3E
47
reference_url https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7@%3Ccommits.airflow.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7@%3Ccommits.airflow.apache.org%3E
48
reference_url https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3E
49
reference_url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
50
reference_url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
51
reference_url https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205@%3Ccommits.airflow.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205@%3Ccommits.airflow.apache.org%3E
52
reference_url https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3E
53
reference_url https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6@%3Ccommits.roller.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6@%3Ccommits.roller.apache.org%3E
54
reference_url https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E
55
reference_url https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E
56
reference_url https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E
57
reference_url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
58
reference_url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
59
reference_url https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9@%3Cissues.flink.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9@%3Cissues.flink.apache.org%3E
60
reference_url https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3E
61
reference_url https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa@%3Cissues.flink.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa@%3Cissues.flink.apache.org%3E
62
reference_url https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3E
63
reference_url https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766@%3Cdev.syncope.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766@%3Cdev.syncope.apache.org%3E
64
reference_url https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3E
65
reference_url https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08@%3Cissues.flink.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08@%3Cissues.flink.apache.org%3E
66
reference_url https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3E
67
reference_url https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355@%3Cdev.flink.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355@%3Cdev.flink.apache.org%3E
68
reference_url https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3E
69
reference_url https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734@%3Cdev.storm.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734@%3Cdev.storm.apache.org%3E
70
reference_url https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3E
71
reference_url https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73@%3Cissues.flink.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73@%3Cissues.flink.apache.org%3E
72
reference_url https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3E
73
reference_url https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d@%3Cissues.flink.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d@%3Cissues.flink.apache.org%3E
74
reference_url https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3E
75
reference_url https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E
76
reference_url https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E
77
reference_url https://lists.debian.org/debian-lts-announce/2019/05/msg00006.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.debian.org/debian-lts-announce/2019/05/msg00006.html
78
reference_url https://lists.debian.org/debian-lts-announce/2019/05/msg00029.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.debian.org/debian-lts-announce/2019/05/msg00029.html
79
reference_url https://lists.debian.org/debian-lts-announce/2020/02/msg00024.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.debian.org/debian-lts-announce/2020/02/msg00024.html
80
reference_url https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
81
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA
82
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI
83
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO
84
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP
85
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F
86
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5
87
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA
88
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI
89
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO
90
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP
91
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F
92
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5
93
reference_url https://seclists.org/bugtraq/2019/Apr/32
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://seclists.org/bugtraq/2019/Apr/32
94
reference_url https://seclists.org/bugtraq/2019/Jun/12
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://seclists.org/bugtraq/2019/Jun/12
95
reference_url https://seclists.org/bugtraq/2019/May/18
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://seclists.org/bugtraq/2019/May/18
96
reference_url https://security.netapp.com/advisory/ntap-20190919-0001
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20190919-0001
97
reference_url https://security.snyk.io/vuln/SNYK-DOTNET-JQUERY-450226
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.snyk.io/vuln/SNYK-DOTNET-JQUERY-450226
98
reference_url https://snyk.io/vuln/SNYK-JS-JQUERY-174006
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://snyk.io/vuln/SNYK-JS-JQUERY-174006
99
reference_url https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1
100
reference_url https://web.archive.org/web/20190824065237/http://www.securityfocus.com/bid/108023
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20190824065237/http://www.securityfocus.com/bid/108023
101
reference_url https://www.debian.org/security/2019/dsa-4434
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.debian.org/security/2019/dsa-4434
102
reference_url https://www.debian.org/security/2019/dsa-4460
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.debian.org/security/2019/dsa-4460
103
reference_url https://www.djangoproject.com/weblog/2019/jun/03/security-releases
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.djangoproject.com/weblog/2019/jun/03/security-releases
104
reference_url https://www.drupal.org/sa-core-2019-006
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.drupal.org/sa-core-2019-006
105
reference_url https://www.oracle.com/security-alerts/cpuapr2020.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.oracle.com/security-alerts/cpuapr2020.html
106
reference_url https://www.oracle.com/security-alerts/cpuApr2021.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.oracle.com/security-alerts/cpuApr2021.html
107
reference_url https://www.oracle.com/security-alerts/cpujan2020.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.oracle.com/security-alerts/cpujan2020.html
108
reference_url https://www.oracle.com/security-alerts/cpujan2021.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.oracle.com/security-alerts/cpujan2021.html
109
reference_url https://www.oracle.com/security-alerts/cpujan2022.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.oracle.com/security-alerts/cpujan2022.html
110
reference_url https://www.oracle.com/security-alerts/cpujul2020.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.oracle.com/security-alerts/cpujul2020.html
111
reference_url https://www.oracle.com//security-alerts/cpujul2021.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.oracle.com//security-alerts/cpujul2021.html
112
reference_url https://www.oracle.com/security-alerts/cpuoct2020.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.oracle.com/security-alerts/cpuoct2020.html
113
reference_url https://www.oracle.com/security-alerts/cpuoct2021.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.oracle.com/security-alerts/cpuoct2021.html
114
reference_url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
115
reference_url https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
116
reference_url https://www.privacy-wise.com/mitigating-cve-2019-11358-in-old-versions-of-jquery
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.privacy-wise.com/mitigating-cve-2019-11358-in-old-versions-of-jquery
117
reference_url https://www.synology.com/security/advisory/Synology_SA_19_19
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.synology.com/security/advisory/Synology_SA_19_19
118
reference_url https://www.tenable.com/security/tns-2019-08
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.tenable.com/security/tns-2019-08
119
reference_url https://www.tenable.com/security/tns-2020-02
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.tenable.com/security/tns-2020-02
120
reference_url http://www.openwall.com/lists/oss-security/2019/06/03/2
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url http://www.openwall.com/lists/oss-security/2019/06/03/2
121
reference_url http://www.securityfocus.com/bid/108023
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url http://www.securityfocus.com/bid/108023
122
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1701972
reference_id 1701972
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1701972
123
reference_url https://github.com/nodejs/security-wg/blob/main/vuln/npm/496.json
reference_id 496
reference_type
scores
0
value 5.6
scoring_system cvssv3
scoring_elements
url https://github.com/nodejs/security-wg/blob/main/vuln/npm/496.json
124
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/
reference_id 4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/
125
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/
reference_id 5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/
126
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927466
reference_id 927466
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927466
127
reference_url https://security.archlinux.org/ASA-201906-2
reference_id ASA-201906-2
reference_type
scores
url https://security.archlinux.org/ASA-201906-2
128
reference_url https://security.archlinux.org/AVG-969
reference_id AVG-969
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-969
129
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-11358
reference_id CVE-2019-11358
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-11358
130
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2019-11358.yml
reference_id CVE-2019-11358.YML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2019-11358.yml
131
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/52141.txt
reference_id CVE-2020-7656;CVE-2019-11358
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/52141.txt
132
reference_url https://github.com/advisories/GHSA-6c3j-c64m-qhgq
reference_id GHSA-6c3j-c64m-qhgq
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6c3j-c64m-qhgq
133
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/
reference_id KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/
134
reference_url https://www.privacy-wise.com/mitigating-cve-2019-11358-in-old-versions-of-jquery/
reference_id mitigating-cve-2019-11358-in-old-versions-of-jquery
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://www.privacy-wise.com/mitigating-cve-2019-11358-in-old-versions-of-jquery/
135
reference_url https://security.netapp.com/advisory/ntap-20190919-0001/
reference_id ntap-20190919-0001
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://security.netapp.com/advisory/ntap-20190919-0001/
136
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/
reference_id QV3PKZC3PQCO3273HAT76PAQZFBEO4KP
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/
137
reference_url https://access.redhat.com/errata/RHSA-2020:1325
reference_id RHSA-2020:1325
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1325
138
reference_url https://access.redhat.com/errata/RHSA-2020:2412
reference_id RHSA-2020:2412
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2412
139
reference_url https://access.redhat.com/errata/RHSA-2020:3936
reference_id RHSA-2020:3936
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:3936
140
reference_url https://access.redhat.com/errata/RHSA-2020:4298
reference_id RHSA-2020:4298
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4298
141
reference_url https://access.redhat.com/errata/RHSA-2020:4670
reference_id RHSA-2020:4670
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4670
142
reference_url https://access.redhat.com/errata/RHSA-2020:4847
reference_id RHSA-2020:4847
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4847
143
reference_url https://access.redhat.com/errata/RHSA-2020:5581
reference_id RHSA-2020:5581
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:5581
144
reference_url https://access.redhat.com/errata/RHSA-2021:4142
reference_id RHSA-2021:4142
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4142
145
reference_url https://access.redhat.com/errata/RHSA-2022:7343
reference_id RHSA-2022:7343
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:7343
146
reference_url https://access.redhat.com/errata/RHSA-2023:0552
reference_id RHSA-2023:0552
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0552
147
reference_url https://access.redhat.com/errata/RHSA-2023:0553
reference_id RHSA-2023:0553
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0553
148
reference_url https://access.redhat.com/errata/RHSA-2023:0554
reference_id RHSA-2023:0554
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0554
149
reference_url https://access.redhat.com/errata/RHSA-2023:0556
reference_id RHSA-2023:0556
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0556
150
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/
reference_id RLXRX23725JL366CNZGJZ7AQQB7LHQ6F
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/
151
reference_url https://usn.ubuntu.com/7622-1/
reference_id USN-7622-1
reference_type
scores
url https://usn.ubuntu.com/7622-1/
152
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/
reference_id WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:03:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2019-11358, GHSA-6c3j-c64m-qhgq
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3s9f-prpy-hbcx
15
url VCID-3yt6-jnfb-9fcw
vulnerability_id VCID-3yt6-jnfb-9fcw
summary MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly normalize IP addresses containing zero-padded octets, which might allow remote attackers to bypass intended access restrictions by using an IP address that was not supposed to have been allowed.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8627
reference_id
reference_type
scores
0
value 0.00429
scoring_system epss
scoring_elements 0.62547
published_at 2026-04-21T12:55:00Z
1
value 0.00429
scoring_system epss
scoring_elements 0.62565
published_at 2026-04-18T12:55:00Z
2
value 0.00429
scoring_system epss
scoring_elements 0.62409
published_at 2026-04-01T12:55:00Z
3
value 0.00429
scoring_system epss
scoring_elements 0.62467
published_at 2026-04-02T12:55:00Z
4
value 0.00429
scoring_system epss
scoring_elements 0.62498
published_at 2026-04-04T12:55:00Z
5
value 0.00429
scoring_system epss
scoring_elements 0.62465
published_at 2026-04-07T12:55:00Z
6
value 0.00429
scoring_system epss
scoring_elements 0.62517
published_at 2026-04-08T12:55:00Z
7
value 0.00429
scoring_system epss
scoring_elements 0.62533
published_at 2026-04-09T12:55:00Z
8
value 0.00429
scoring_system epss
scoring_elements 0.62552
published_at 2026-04-11T12:55:00Z
9
value 0.00429
scoring_system epss
scoring_elements 0.62541
published_at 2026-04-12T12:55:00Z
10
value 0.00429
scoring_system epss
scoring_elements 0.62518
published_at 2026-04-13T12:55:00Z
11
value 0.00429
scoring_system epss
scoring_elements 0.62559
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8627
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8627
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8627
2
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html
3
reference_url https://phabricator.wikimedia.org/T97897
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T97897
4
reference_url http://www.openwall.com/lists/oss-security/2015/12/21/8
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/12/21/8
5
reference_url http://www.openwall.com/lists/oss-security/2015/12/23/7
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/12/23/7
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8627
reference_id CVE-2015-8627
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:P/A:N
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2015-8627
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2015-8627
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3yt6-jnfb-9fcw
16
url VCID-3zue-5ccg-23hs
vulnerability_id VCID-3zue-5ccg-23hs
summary Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryRevisionsBase.Php. This issue affects MediaWiki: from * before 1.39.16, 1.43.6, 1.44.3, 1.45.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67480
reference_id
reference_type
scores
0
value 0.00067
scoring_system epss
scoring_elements 0.20645
published_at 2026-04-18T12:55:00Z
1
value 0.00067
scoring_system epss
scoring_elements 0.20636
published_at 2026-04-21T12:55:00Z
2
value 0.00067
scoring_system epss
scoring_elements 0.20647
published_at 2026-04-16T12:55:00Z
3
value 0.00135
scoring_system epss
scoring_elements 0.33244
published_at 2026-04-08T12:55:00Z
4
value 0.00135
scoring_system epss
scoring_elements 0.33338
published_at 2026-04-02T12:55:00Z
5
value 0.00135
scoring_system epss
scoring_elements 0.33283
published_at 2026-04-11T12:55:00Z
6
value 0.00135
scoring_system epss
scoring_elements 0.33279
published_at 2026-04-09T12:55:00Z
7
value 0.00135
scoring_system epss
scoring_elements 0.3337
published_at 2026-04-04T12:55:00Z
8
value 0.00135
scoring_system epss
scoring_elements 0.33202
published_at 2026-04-07T12:55:00Z
9
value 0.00157
scoring_system epss
scoring_elements 0.365
published_at 2026-04-13T12:55:00Z
10
value 0.00157
scoring_system epss
scoring_elements 0.36524
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67480
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67480
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67480
2
reference_url https://phabricator.wikimedia.org/T401053
reference_id T401053
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:01:49Z/
url https://phabricator.wikimedia.org/T401053
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-67480
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3zue-5ccg-23hs
17
url VCID-424y-cjxg-c7az
vulnerability_id VCID-424y-cjxg-c7az
summary
MediaWiki Cross-site Scripting (XSS) vulnerability
An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped() instead of text().
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25815.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25815.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-25815
reference_id
reference_type
scores
0
value 0.00387
scoring_system epss
scoring_elements 0.5985
published_at 2026-04-21T12:55:00Z
1
value 0.00387
scoring_system epss
scoring_elements 0.59866
published_at 2026-04-18T12:55:00Z
2
value 0.00387
scoring_system epss
scoring_elements 0.59859
published_at 2026-04-16T12:55:00Z
3
value 0.00387
scoring_system epss
scoring_elements 0.59839
published_at 2026-04-12T12:55:00Z
4
value 0.00387
scoring_system epss
scoring_elements 0.59856
published_at 2026-04-11T12:55:00Z
5
value 0.00387
scoring_system epss
scoring_elements 0.59835
published_at 2026-04-09T12:55:00Z
6
value 0.00387
scoring_system epss
scoring_elements 0.59822
published_at 2026-04-13T12:55:00Z
7
value 0.00387
scoring_system epss
scoring_elements 0.59801
published_at 2026-04-04T12:55:00Z
8
value 0.00387
scoring_system epss
scoring_elements 0.5977
published_at 2026-04-07T12:55:00Z
9
value 0.00387
scoring_system epss
scoring_elements 0.59777
published_at 2026-04-02T12:55:00Z
10
value 0.00387
scoring_system epss
scoring_elements 0.59703
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-25815
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25815
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25815
3
reference_url https://gerrit.wikimedia.org/g/mediawiki/core/+/ec76e14be658187544f07c1a249a047e1a75eaf8/includes/logging/LogEventsList.php#214
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://gerrit.wikimedia.org/g/mediawiki/core/+/ec76e14be658187544f07c1a249a047e1a75eaf8/includes/logging/LogEventsList.php#214
4
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25815.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25815.yaml
5
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
7
reference_url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
8
reference_url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-25815
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-25815
10
reference_url https://phabricator.wikimedia.org/T256171
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T256171
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1903759
reference_id 1903759
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1903759
12
reference_url https://github.com/advisories/GHSA-2f58-vf6g-6p8x
reference_id GHSA-2f58-vf6g-6p8x
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2f58-vf6g-6p8x
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2020-25815, GHSA-2f58-vf6g-6p8x
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-424y-cjxg-c7az
18
url VCID-4dfp-3qk9-j7fg
vulnerability_id VCID-4dfp-3qk9-j7fg
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which could result in a Denial of Service condition.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35197.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-35197.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-35197
reference_id
reference_type
scores
0
value 0.0073
scoring_system epss
scoring_elements 0.72618
published_at 2026-04-01T12:55:00Z
1
value 0.0073
scoring_system epss
scoring_elements 0.72626
published_at 2026-04-02T12:55:00Z
2
value 0.0073
scoring_system epss
scoring_elements 0.72644
published_at 2026-04-04T12:55:00Z
3
value 0.0073
scoring_system epss
scoring_elements 0.72621
published_at 2026-04-07T12:55:00Z
4
value 0.0073
scoring_system epss
scoring_elements 0.7266
published_at 2026-04-08T12:55:00Z
5
value 0.0073
scoring_system epss
scoring_elements 0.72673
published_at 2026-04-09T12:55:00Z
6
value 0.0073
scoring_system epss
scoring_elements 0.72696
published_at 2026-04-11T12:55:00Z
7
value 0.0073
scoring_system epss
scoring_elements 0.72679
published_at 2026-04-12T12:55:00Z
8
value 0.0073
scoring_system epss
scoring_elements 0.72669
published_at 2026-04-13T12:55:00Z
9
value 0.0073
scoring_system epss
scoring_elements 0.72711
published_at 2026-04-16T12:55:00Z
10
value 0.0073
scoring_system epss
scoring_elements 0.72723
published_at 2026-04-18T12:55:00Z
11
value 0.0073
scoring_system epss
scoring_elements 0.72714
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-35197
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35197
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35197
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41798
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41798
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41799
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41799
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41800
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41800
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41801
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41801
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1980308
reference_id 1980308
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1980308
8
reference_url https://security.archlinux.org/ASA-202107-7
reference_id ASA-202107-7
reference_type
scores
url https://security.archlinux.org/ASA-202107-7
9
reference_url https://security.archlinux.org/AVG-2093
reference_id AVG-2093
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2093
10
reference_url https://security.gentoo.org/glsa/202107-40
reference_id GLSA-202107-40
reference_type
scores
url https://security.gentoo.org/glsa/202107-40
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-35197
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4dfp-3qk9-j7fg
19
url VCID-4keq-jcfa-13hc
vulnerability_id VCID-4keq-jcfa-13hc
summary
Possible to circumvent title-blacklist
MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the action API when editing that page.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19709
reference_id
reference_type
scores
0
value 0.00315
scoring_system epss
scoring_elements 0.54574
published_at 2026-04-02T12:55:00Z
1
value 0.00315
scoring_system epss
scoring_elements 0.54605
published_at 2026-04-21T12:55:00Z
2
value 0.00315
scoring_system epss
scoring_elements 0.54625
published_at 2026-04-16T12:55:00Z
3
value 0.00315
scoring_system epss
scoring_elements 0.54587
published_at 2026-04-13T12:55:00Z
4
value 0.00315
scoring_system epss
scoring_elements 0.54613
published_at 2026-04-09T12:55:00Z
5
value 0.00315
scoring_system epss
scoring_elements 0.54618
published_at 2026-04-08T12:55:00Z
6
value 0.00315
scoring_system epss
scoring_elements 0.54567
published_at 2026-04-07T12:55:00Z
7
value 0.00315
scoring_system epss
scoring_elements 0.54597
published_at 2026-04-04T12:55:00Z
8
value 0.00315
scoring_system epss
scoring_elements 0.54502
published_at 2026-04-01T12:55:00Z
9
value 0.00315
scoring_system epss
scoring_elements 0.54608
published_at 2026-04-12T12:55:00Z
10
value 0.00315
scoring_system epss
scoring_elements 0.54626
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19709
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19709
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19709
2
reference_url https://gerrit.wikimedia.org/r/q/Ie54f366986056c876eade0fcad6c41f70b8b8de8
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://gerrit.wikimedia.org/r/q/Ie54f366986056c876eade0fcad6c41f70b8b8de8
3
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-19709.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-19709.yaml
4
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-19709
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-19709
6
reference_url https://phabricator.wikimedia.org/T239466
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T239466
7
reference_url https://seclists.org/bugtraq/2019/Dec/48
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2019/Dec/48
8
reference_url https://www.debian.org/security/2019/dsa-4592
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2019/dsa-4592
9
reference_url https://github.com/advisories/GHSA-pjv5-vv93-p648
reference_id GHSA-pjv5-vv93-p648
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pjv5-vv93-p648
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2019-19709, GHSA-pjv5-vv93-p648
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4keq-jcfa-13hc
20
url VCID-4yhr-jjt9-afaq
vulnerability_id VCID-4yhr-jjt9-afaq
summary Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61641
reference_id
reference_type
scores
0
value 6e-05
scoring_system epss
scoring_elements 0.00371
published_at 2026-04-08T12:55:00Z
1
value 6e-05
scoring_system epss
scoring_elements 0.00385
published_at 2026-04-04T12:55:00Z
2
value 6e-05
scoring_system epss
scoring_elements 0.00372
published_at 2026-04-09T12:55:00Z
3
value 6e-05
scoring_system epss
scoring_elements 0.00374
published_at 2026-04-07T12:55:00Z
4
value 7e-05
scoring_system epss
scoring_elements 0.0056
published_at 2026-04-21T12:55:00Z
5
value 7e-05
scoring_system epss
scoring_elements 0.00521
published_at 2026-04-16T12:55:00Z
6
value 7e-05
scoring_system epss
scoring_elements 0.00526
published_at 2026-04-18T12:55:00Z
7
value 7e-05
scoring_system epss
scoring_elements 0.00525
published_at 2026-04-11T12:55:00Z
8
value 7e-05
scoring_system epss
scoring_elements 0.00523
published_at 2026-04-12T12:55:00Z
9
value 7e-05
scoring_system epss
scoring_elements 0.00524
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61641
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61641
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61641
2
reference_url https://phabricator.wikimedia.org/T298690
reference_id T298690
reference_type
scores
0
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:09:22Z/
url https://phabricator.wikimedia.org/T298690
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-61641
risk_score 0.5
exploitability 0.5
weighted_severity 1.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4yhr-jjt9-afaq
21
url VCID-5fsv-cduw-ybb8
vulnerability_id VCID-5fsv-cduw-ybb8
summary MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail ImageMagick command line argument, which allows remote attackers to obtain the installation path by reading the metadata of a PNG thumbnail file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8005
reference_id
reference_type
scores
0
value 0.00253
scoring_system epss
scoring_elements 0.48661
published_at 2026-04-21T12:55:00Z
1
value 0.00253
scoring_system epss
scoring_elements 0.48588
published_at 2026-04-01T12:55:00Z
2
value 0.00253
scoring_system epss
scoring_elements 0.4863
published_at 2026-04-02T12:55:00Z
3
value 0.00253
scoring_system epss
scoring_elements 0.48652
published_at 2026-04-04T12:55:00Z
4
value 0.00253
scoring_system epss
scoring_elements 0.48604
published_at 2026-04-07T12:55:00Z
5
value 0.00253
scoring_system epss
scoring_elements 0.48658
published_at 2026-04-08T12:55:00Z
6
value 0.00253
scoring_system epss
scoring_elements 0.48655
published_at 2026-04-09T12:55:00Z
7
value 0.00253
scoring_system epss
scoring_elements 0.48673
published_at 2026-04-11T12:55:00Z
8
value 0.00253
scoring_system epss
scoring_elements 0.48647
published_at 2026-04-12T12:55:00Z
9
value 0.00253
scoring_system epss
scoring_elements 0.48659
published_at 2026-04-13T12:55:00Z
10
value 0.00253
scoring_system epss
scoring_elements 0.48708
published_at 2026-04-16T12:55:00Z
11
value 0.00253
scoring_system epss
scoring_elements 0.48704
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8005
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8005
2
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html
3
reference_url https://phabricator.wikimedia.org/T108616
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T108616
4
reference_url http://www.securitytracker.com/id/1034028
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1034028
5
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8005
reference_id CVE-2015-8005
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2015-8005
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2015-8005
risk_score 2.2
exploitability 0.5
weighted_severity 4.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5fsv-cduw-ybb8
22
url VCID-5muy-wgqw-dffa
vulnerability_id VCID-5muy-wgqw-dffa
summary MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1, when $wgBlockDisablesLogin is true, might allow remote attackers to obtain sensitive information by leveraging failure to terminate sessions when a user account is blocked.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6332
reference_id
reference_type
scores
0
value 0.00221
scoring_system epss
scoring_elements 0.4471
published_at 2026-04-21T12:55:00Z
1
value 0.00221
scoring_system epss
scoring_elements 0.44781
published_at 2026-04-18T12:55:00Z
2
value 0.00221
scoring_system epss
scoring_elements 0.44653
published_at 2026-04-01T12:55:00Z
3
value 0.00221
scoring_system epss
scoring_elements 0.44733
published_at 2026-04-13T12:55:00Z
4
value 0.00221
scoring_system epss
scoring_elements 0.44753
published_at 2026-04-04T12:55:00Z
5
value 0.00221
scoring_system epss
scoring_elements 0.44692
published_at 2026-04-07T12:55:00Z
6
value 0.00221
scoring_system epss
scoring_elements 0.44745
published_at 2026-04-08T12:55:00Z
7
value 0.00221
scoring_system epss
scoring_elements 0.44747
published_at 2026-04-09T12:55:00Z
8
value 0.00221
scoring_system epss
scoring_elements 0.44764
published_at 2026-04-11T12:55:00Z
9
value 0.00221
scoring_system epss
scoring_elements 0.44732
published_at 2026-04-12T12:55:00Z
10
value 0.00221
scoring_system epss
scoring_elements 0.44788
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6332
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1369613
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1369613
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6332
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6332
3
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
4
reference_url https://phabricator.wikimedia.org/T129738
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T129738
5
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-6332
reference_id CVE-2016-6332
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
1
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2016-6332
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2016-6332
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5muy-wgqw-dffa
23
url VCID-5myd-ngfx-5qhb
vulnerability_id VCID-5myd-ngfx-5qhb
summary mediawiki: group-.*-member messages are not properly escaped on Special:log/rights
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-51704.json
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-51704.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-51704
reference_id
reference_type
scores
0
value 0.00398
scoring_system epss
scoring_elements 0.60551
published_at 2026-04-02T12:55:00Z
1
value 0.00398
scoring_system epss
scoring_elements 0.60579
published_at 2026-04-04T12:55:00Z
2
value 0.00398
scoring_system epss
scoring_elements 0.60548
published_at 2026-04-07T12:55:00Z
3
value 0.00398
scoring_system epss
scoring_elements 0.60597
published_at 2026-04-08T12:55:00Z
4
value 0.00398
scoring_system epss
scoring_elements 0.60612
published_at 2026-04-09T12:55:00Z
5
value 0.00398
scoring_system epss
scoring_elements 0.60637
published_at 2026-04-11T12:55:00Z
6
value 0.00398
scoring_system epss
scoring_elements 0.60622
published_at 2026-04-12T12:55:00Z
7
value 0.00398
scoring_system epss
scoring_elements 0.60601
published_at 2026-04-13T12:55:00Z
8
value 0.00398
scoring_system epss
scoring_elements 0.60643
published_at 2026-04-16T12:55:00Z
9
value 0.00398
scoring_system epss
scoring_elements 0.60648
published_at 2026-04-18T12:55:00Z
10
value 0.00398
scoring_system epss
scoring_elements 0.60636
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-51704
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51704
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51704
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2255582
reference_id 2255582
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2255582
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2023-51704
risk_score 2.9
exploitability 0.5
weighted_severity 5.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5myd-ngfx-5qhb
24
url VCID-674z-nf4t-b7ez
vulnerability_id VCID-674z-nf4t-b7ez
summary
Cross-domain cookie leakage in Guzzle
### Impact

Previous version of Guzzle contain a vulnerability with the cookie middleware. The vulnerability is that it is not checked if the cookie domain equals the domain of the server which sets the cookie via the `Set-Cookie` header, allowing a malicious server to set cookies for unrelated domains. For example an attacker at `www.example.com` might set a session cookie for `api.example.net`, logging the Guzzle client into their account and retrieving private API requests from the security log of their account.

Note that our cookie middleware is disabled by default, so most library consumers will not be affected by this issue. Only those who manually add the cookie middleware to the handler stack or construct the client with `['cookies' => true]` are affected. Moreover, those who do not use the same Guzzle client to call multiple domains and have disabled redirect forwarding are not affected by this vulnerability.

### Patches

Affected Guzzle 7 users should upgrade to Guzzle 7.4.3 as soon as possible. Affected users using any earlier series of Guzzle should upgrade to Guzzle 6.5.6 or 7.4.3.

### Workarounds

If you do not need support for cookies, turn off the cookie middleware. It is already off by default, but if you have turned it on and no longer need it, turn it off.

### References

* [RFC6265 Section 5.3](https://datatracker.ietf.org/doc/html/rfc6265#section-5.3)
* [RFC9110 Section 15.4](https://www.rfc-editor.org/rfc/rfc9110.html#name-redirection-3xx)

### For more information

If you have any questions or comments about this advisory, please get in touch with us in `#guzzle` on the [PHP HTTP Slack](https://php-http.slack.com/). Do not report additional security advisories in that public channel, however - please follow our [vulnerability reporting process](https://github.com/guzzle/guzzle/security/policy).
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-29248
reference_id
reference_type
scores
0
value 0.00637
scoring_system epss
scoring_elements 0.70515
published_at 2026-04-18T12:55:00Z
1
value 0.00637
scoring_system epss
scoring_elements 0.70414
published_at 2026-04-02T12:55:00Z
2
value 0.00637
scoring_system epss
scoring_elements 0.70431
published_at 2026-04-04T12:55:00Z
3
value 0.00637
scoring_system epss
scoring_elements 0.7041
published_at 2026-04-07T12:55:00Z
4
value 0.00637
scoring_system epss
scoring_elements 0.70455
published_at 2026-04-08T12:55:00Z
5
value 0.00637
scoring_system epss
scoring_elements 0.70471
published_at 2026-04-09T12:55:00Z
6
value 0.00637
scoring_system epss
scoring_elements 0.70495
published_at 2026-04-21T12:55:00Z
7
value 0.00637
scoring_system epss
scoring_elements 0.7048
published_at 2026-04-12T12:55:00Z
8
value 0.00637
scoring_system epss
scoring_elements 0.70465
published_at 2026-04-13T12:55:00Z
9
value 0.00637
scoring_system epss
scoring_elements 0.70507
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-29248
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
16
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2022-29248.yaml
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2022-29248.yaml
17
reference_url https://github.com/guzzle/guzzle
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/guzzle/guzzle
18
reference_url https://github.com/guzzle/guzzle/commit/74a8602c6faec9ef74b7a9391ac82c5e65b1cdab
reference_id
reference_type
scores
0
value 8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
1
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:52:51Z/
url https://github.com/guzzle/guzzle/commit/74a8602c6faec9ef74b7a9391ac82c5e65b1cdab
19
reference_url https://github.com/guzzle/guzzle/pull/3018
reference_id
reference_type
scores
0
value 8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
1
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:52:51Z/
url https://github.com/guzzle/guzzle/pull/3018
20
reference_url https://github.com/guzzle/guzzle/security/advisories/GHSA-cwmx-hcrq-mhc3
reference_id
reference_type
scores
0
value 8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
1
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
2
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:52:51Z/
url https://github.com/guzzle/guzzle/security/advisories/GHSA-cwmx-hcrq-mhc3
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-29248
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-29248
22
reference_url https://www.debian.org/security/2022/dsa-5246
reference_id
reference_type
scores
0
value 8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
1
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:52:51Z/
url https://www.debian.org/security/2022/dsa-5246
23
reference_url https://www.drupal.org/sa-core-2022-010
reference_id
reference_type
scores
0
value 8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
1
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T15:52:51Z/
url https://www.drupal.org/sa-core-2022-010
24
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1011636
reference_id 1011636
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1011636
25
reference_url https://security.archlinux.org/AVG-2823
reference_id AVG-2823
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2823
26
reference_url https://github.com/advisories/GHSA-cwmx-hcrq-mhc3
reference_id GHSA-cwmx-hcrq-mhc3
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cwmx-hcrq-mhc3
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2022-29248, GHSA-cwmx-hcrq-mhc3
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-674z-nf4t-b7ez
25
url VCID-6ads-gs3n-dubh
vulnerability_id VCID-6ads-gs3n-dubh
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which could result in a Denial of Service condition.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-30458
reference_id
reference_type
scores
0
value 0.00214
scoring_system epss
scoring_elements 0.4398
published_at 2026-04-02T12:55:00Z
1
value 0.00214
scoring_system epss
scoring_elements 0.43932
published_at 2026-04-07T12:55:00Z
2
value 0.00214
scoring_system epss
scoring_elements 0.44002
published_at 2026-04-11T12:55:00Z
3
value 0.00214
scoring_system epss
scoring_elements 0.43931
published_at 2026-04-01T12:55:00Z
4
value 0.00214
scoring_system epss
scoring_elements 0.43954
published_at 2026-04-13T12:55:00Z
5
value 0.00214
scoring_system epss
scoring_elements 0.43969
published_at 2026-04-12T12:55:00Z
6
value 0.00214
scoring_system epss
scoring_elements 0.43984
published_at 2026-04-09T12:55:00Z
7
value 0.00214
scoring_system epss
scoring_elements 0.43982
published_at 2026-04-08T12:55:00Z
8
value 0.0037
scoring_system epss
scoring_elements 0.58842
published_at 2026-04-21T12:55:00Z
9
value 0.0037
scoring_system epss
scoring_elements 0.58864
published_at 2026-04-18T12:55:00Z
10
value 0.0037
scoring_system epss
scoring_elements 0.58859
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-30458
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30458
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30458
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/wikimedia/parsoid/CVE-2021-30458.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/wikimedia/parsoid/CVE-2021-30458.yaml
3
reference_url https://github.com/wikimedia/mediawiki-services-parsoid
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki-services-parsoid
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-30458
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-30458
5
reference_url https://phabricator.wikimedia.org/T279451
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T279451
6
reference_url https://www.mediawiki.org/wiki/Parsoid
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.mediawiki.org/wiki/Parsoid
7
reference_url https://security.archlinux.org/AVG-1775
reference_id AVG-1775
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1775
8
reference_url https://github.com/advisories/GHSA-5pqx-77vf-85rw
reference_id GHSA-5pqx-77vf-85rw
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5pqx-77vf-85rw
9
reference_url https://security.gentoo.org/glsa/202107-40
reference_id GLSA-202107-40
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202107-40
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-30458, GHSA-5pqx-77vf-85rw
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6ads-gs3n-dubh
26
url VCID-6jq2-8mv5-pqaa
vulnerability_id VCID-6jq2-8mv5-pqaa
summary security update
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8811
reference_id
reference_type
scores
0
value 0.00326
scoring_system epss
scoring_elements 0.55596
published_at 2026-04-21T12:55:00Z
1
value 0.00326
scoring_system epss
scoring_elements 0.55576
published_at 2026-04-13T12:55:00Z
2
value 0.00326
scoring_system epss
scoring_elements 0.55617
published_at 2026-04-18T12:55:00Z
3
value 0.00326
scoring_system epss
scoring_elements 0.55437
published_at 2026-04-01T12:55:00Z
4
value 0.00326
scoring_system epss
scoring_elements 0.55549
published_at 2026-04-02T12:55:00Z
5
value 0.00326
scoring_system epss
scoring_elements 0.55574
published_at 2026-04-04T12:55:00Z
6
value 0.00326
scoring_system epss
scoring_elements 0.55552
published_at 2026-04-07T12:55:00Z
7
value 0.00326
scoring_system epss
scoring_elements 0.55603
published_at 2026-04-08T12:55:00Z
8
value 0.00326
scoring_system epss
scoring_elements 0.55605
published_at 2026-04-09T12:55:00Z
9
value 0.00326
scoring_system epss
scoring_elements 0.55614
published_at 2026-04-16T12:55:00Z
10
value 0.00326
scoring_system epss
scoring_elements 0.55593
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8811
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8808
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8808
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8809
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8809
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8810
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8810
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8811
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8811
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8812
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8814
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8815
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8815
8
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html
9
reference_url https://www.debian.org/security/2017/dsa-4036
reference_id
reference_type
scores
url https://www.debian.org/security/2017/dsa-4036
10
reference_url http://www.securitytracker.com/id/1039812
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1039812
11
reference_url https://security.archlinux.org/ASA-201711-20
reference_id ASA-201711-20
reference_type
scores
url https://security.archlinux.org/ASA-201711-20
12
reference_url https://security.archlinux.org/AVG-490
reference_id AVG-490
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-490
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-8811
reference_id CVE-2017-8811
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:P/A:N
1
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2017-8811
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
aliases CVE-2017-8811
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6jq2-8mv5-pqaa
27
url VCID-73p6-esc6-tydd
vulnerability_id VCID-73p6-esc6-tydd
summary mediawiki: potential XSS via MediaWiki:blanknamespace outputting Block Logs
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35478.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35478.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-35478
reference_id
reference_type
scores
0
value 0.00446
scoring_system epss
scoring_elements 0.63353
published_at 2026-04-01T12:55:00Z
1
value 0.00446
scoring_system epss
scoring_elements 0.63413
published_at 2026-04-02T12:55:00Z
2
value 0.00446
scoring_system epss
scoring_elements 0.63441
published_at 2026-04-04T12:55:00Z
3
value 0.00446
scoring_system epss
scoring_elements 0.63406
published_at 2026-04-07T12:55:00Z
4
value 0.00446
scoring_system epss
scoring_elements 0.63457
published_at 2026-04-08T12:55:00Z
5
value 0.00446
scoring_system epss
scoring_elements 0.63475
published_at 2026-04-09T12:55:00Z
6
value 0.00446
scoring_system epss
scoring_elements 0.63492
published_at 2026-04-11T12:55:00Z
7
value 0.00446
scoring_system epss
scoring_elements 0.63477
published_at 2026-04-12T12:55:00Z
8
value 0.00446
scoring_system epss
scoring_elements 0.63442
published_at 2026-04-13T12:55:00Z
9
value 0.00446
scoring_system epss
scoring_elements 0.63476
published_at 2026-04-16T12:55:00Z
10
value 0.00446
scoring_system epss
scoring_elements 0.63483
published_at 2026-04-18T12:55:00Z
11
value 0.00446
scoring_system epss
scoring_elements 0.63469
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-35478
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35478
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35478
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1909234
reference_id 1909234
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1909234
4
reference_url https://security.archlinux.org/ASA-202101-22
reference_id ASA-202101-22
reference_type
scores
url https://security.archlinux.org/ASA-202101-22
5
reference_url https://security.archlinux.org/AVG-1371
reference_id AVG-1371
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1371
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2020-35478
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-73p6-esc6-tydd
28
url VCID-74ej-8sna-jyek
vulnerability_id VCID-74ej-8sna-jyek
summary Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/LogPager.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-32698
reference_id
reference_type
scores
0
value 0.0048
scoring_system epss
scoring_elements 0.65037
published_at 2026-04-02T12:55:00Z
1
value 0.00576
scoring_system epss
scoring_elements 0.68798
published_at 2026-04-21T12:55:00Z
2
value 0.00576
scoring_system epss
scoring_elements 0.68809
published_at 2026-04-16T12:55:00Z
3
value 0.00576
scoring_system epss
scoring_elements 0.68819
published_at 2026-04-18T12:55:00Z
4
value 0.00576
scoring_system epss
scoring_elements 0.68739
published_at 2026-04-04T12:55:00Z
5
value 0.00576
scoring_system epss
scoring_elements 0.68717
published_at 2026-04-07T12:55:00Z
6
value 0.00576
scoring_system epss
scoring_elements 0.68768
published_at 2026-04-08T12:55:00Z
7
value 0.00576
scoring_system epss
scoring_elements 0.68788
published_at 2026-04-09T12:55:00Z
8
value 0.00576
scoring_system epss
scoring_elements 0.6881
published_at 2026-04-11T12:55:00Z
9
value 0.00576
scoring_system epss
scoring_elements 0.68796
published_at 2026-04-12T12:55:00Z
10
value 0.00576
scoring_system epss
scoring_elements 0.68767
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-32698
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32698
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32698
2
reference_url https://phabricator.wikimedia.org/T385958
reference_id T385958
reference_type
scores
0
value 2.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/RE:M/U:Green
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-10T18:51:46Z/
url https://phabricator.wikimedia.org/T385958
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-32698
risk_score 0.7
exploitability 0.5
weighted_severity 1.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-74ej-8sna-jyek
29
url VCID-7ar6-14bb-yfc5
vulnerability_id VCID-7ar6-14bb-yfc5
summary mediawiki: divergent behavior for contributions and user pages of hidden users and missing users
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35480.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35480.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-35480
reference_id
reference_type
scores
0
value 0.00344
scoring_system epss
scoring_elements 0.56945
published_at 2026-04-01T12:55:00Z
1
value 0.00344
scoring_system epss
scoring_elements 0.5704
published_at 2026-04-02T12:55:00Z
2
value 0.00344
scoring_system epss
scoring_elements 0.57062
published_at 2026-04-04T12:55:00Z
3
value 0.00344
scoring_system epss
scoring_elements 0.57039
published_at 2026-04-07T12:55:00Z
4
value 0.00344
scoring_system epss
scoring_elements 0.5709
published_at 2026-04-08T12:55:00Z
5
value 0.00344
scoring_system epss
scoring_elements 0.57092
published_at 2026-04-09T12:55:00Z
6
value 0.00344
scoring_system epss
scoring_elements 0.57104
published_at 2026-04-11T12:55:00Z
7
value 0.00344
scoring_system epss
scoring_elements 0.57083
published_at 2026-04-18T12:55:00Z
8
value 0.00344
scoring_system epss
scoring_elements 0.57059
published_at 2026-04-13T12:55:00Z
9
value 0.00344
scoring_system epss
scoring_elements 0.57086
published_at 2026-04-16T12:55:00Z
10
value 0.00344
scoring_system epss
scoring_elements 0.5706
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-35480
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35475
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35475
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35477
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35477
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35479
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35479
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35480
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35480
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1909240
reference_id 1909240
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1909240
7
reference_url https://security.archlinux.org/ASA-202101-22
reference_id ASA-202101-22
reference_type
scores
url https://security.archlinux.org/ASA-202101-22
8
reference_url https://security.archlinux.org/AVG-1371
reference_id AVG-1371
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1371
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2020-35480
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7ar6-14bb-yfc5
30
url VCID-7eba-7gsc-hbfg
vulnerability_id VCID-7eba-7gsc-hbfg
summary
X-Forwarded-For header allows brute-forcing autoblocked IP addresses
An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29141.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29141.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29141
reference_id
reference_type
scores
0
value 0.00251
scoring_system epss
scoring_elements 0.48447
published_at 2026-04-12T12:55:00Z
1
value 0.00251
scoring_system epss
scoring_elements 0.48449
published_at 2026-04-09T12:55:00Z
2
value 0.00251
scoring_system epss
scoring_elements 0.48509
published_at 2026-04-16T12:55:00Z
3
value 0.00251
scoring_system epss
scoring_elements 0.48459
published_at 2026-04-13T12:55:00Z
4
value 0.00251
scoring_system epss
scoring_elements 0.48473
published_at 2026-04-11T12:55:00Z
5
value 0.00251
scoring_system epss
scoring_elements 0.48426
published_at 2026-04-02T12:55:00Z
6
value 0.00251
scoring_system epss
scoring_elements 0.48448
published_at 2026-04-04T12:55:00Z
7
value 0.00251
scoring_system epss
scoring_elements 0.48401
published_at 2026-04-07T12:55:00Z
8
value 0.00251
scoring_system epss
scoring_elements 0.48455
published_at 2026-04-08T12:55:00Z
9
value 0.00292
scoring_system epss
scoring_elements 0.52609
published_at 2026-04-18T12:55:00Z
10
value 0.00292
scoring_system epss
scoring_elements 0.52594
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29141
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36674
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36674
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36675
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36675
5
reference_url https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_39/RELEASE-NOTES-1.39
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-02-18T16:02:10Z/
url https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_39/RELEASE-NOTES-1.39
6
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
7
reference_url https://lists.debian.org/debian-lts-announce/2023/08/msg00029.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-02-18T16:02:10Z/
url https://lists.debian.org/debian-lts-announce/2023/08/msg00029.html
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ONWHGOBFD6CQAEGOP5O375XAP2N6RUHT
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ONWHGOBFD6CQAEGOP5O375XAP2N6RUHT
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGK4NZPIJ5ET2ANRZOUYPCRIB5I64JR7
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGK4NZPIJ5ET2ANRZOUYPCRIB5I64JR7
10
reference_url https://phabricator.wikimedia.org/T285159
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-02-18T16:02:10Z/
url https://phabricator.wikimedia.org/T285159
11
reference_url https://www.debian.org/security/2023/dsa-5447
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-02-18T16:02:10Z/
url https://www.debian.org/security/2023/dsa-5447
12
reference_url https://www.mediawiki.org/wiki/Release_notes/1.35#MediaWiki_1.35.10
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.mediawiki.org/wiki/Release_notes/1.35#MediaWiki_1.35.10
13
reference_url https://www.mediawiki.org/wiki/Release_notes/1.38#MediaWiki_1.38.6
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.mediawiki.org/wiki/Release_notes/1.38#MediaWiki_1.38.6
14
reference_url https://www.mediawiki.org/wiki/Release_notes/1.39#MediaWiki_1.39.3
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.mediawiki.org/wiki/Release_notes/1.39#MediaWiki_1.39.3
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2183627
reference_id 2183627
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2183627
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29141
reference_id CVE-2023-29141
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29141
17
reference_url https://github.com/advisories/GHSA-5vj8-g3qg-4qh6
reference_id GHSA-5vj8-g3qg-4qh6
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5vj8-g3qg-4qh6
18
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ONWHGOBFD6CQAEGOP5O375XAP2N6RUHT/
reference_id ONWHGOBFD6CQAEGOP5O375XAP2N6RUHT
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-02-18T16:02:10Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ONWHGOBFD6CQAEGOP5O375XAP2N6RUHT/
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGK4NZPIJ5ET2ANRZOUYPCRIB5I64JR7/
reference_id ZGK4NZPIJ5ET2ANRZOUYPCRIB5I64JR7
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-02-18T16:02:10Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGK4NZPIJ5ET2ANRZOUYPCRIB5I64JR7/
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2023-29141, GHSA-5vj8-g3qg-4qh6
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7eba-7gsc-hbfg
31
url VCID-7j54-uz1w-y3dn
vulnerability_id VCID-7j54-uz1w-y3dn
summary security update
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-41801
reference_id
reference_type
scores
0
value 0.00378
scoring_system epss
scoring_elements 0.5935
published_at 2026-04-21T12:55:00Z
1
value 0.00378
scoring_system epss
scoring_elements 0.59219
published_at 2026-04-01T12:55:00Z
2
value 0.00378
scoring_system epss
scoring_elements 0.59293
published_at 2026-04-02T12:55:00Z
3
value 0.00378
scoring_system epss
scoring_elements 0.59317
published_at 2026-04-04T12:55:00Z
4
value 0.00378
scoring_system epss
scoring_elements 0.59281
published_at 2026-04-07T12:55:00Z
5
value 0.00378
scoring_system epss
scoring_elements 0.59332
published_at 2026-04-08T12:55:00Z
6
value 0.00378
scoring_system epss
scoring_elements 0.59345
published_at 2026-04-09T12:55:00Z
7
value 0.00378
scoring_system epss
scoring_elements 0.59364
published_at 2026-04-11T12:55:00Z
8
value 0.00378
scoring_system epss
scoring_elements 0.59348
published_at 2026-04-12T12:55:00Z
9
value 0.00378
scoring_system epss
scoring_elements 0.5933
published_at 2026-04-13T12:55:00Z
10
value 0.00378
scoring_system epss
scoring_elements 0.59362
published_at 2026-04-16T12:55:00Z
11
value 0.00378
scoring_system epss
scoring_elements 0.59369
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-41801
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35197
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35197
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41798
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41798
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41799
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41799
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41800
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41800
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41801
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41801
6
reference_url https://security.archlinux.org/AVG-2434
reference_id AVG-2434
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2434
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-41801
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7j54-uz1w-y3dn
32
url VCID-7m3q-wuh7-k7fn
vulnerability_id VCID-7m3q-wuh7-k7fn
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which could result in a Denial of Service condition.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30154.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30154.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-30154
reference_id
reference_type
scores
0
value 0.00814
scoring_system epss
scoring_elements 0.74316
published_at 2026-04-18T12:55:00Z
1
value 0.00814
scoring_system epss
scoring_elements 0.74306
published_at 2026-04-21T12:55:00Z
2
value 0.01115
scoring_system epss
scoring_elements 0.78142
published_at 2026-04-02T12:55:00Z
3
value 0.01115
scoring_system epss
scoring_elements 0.78172
published_at 2026-04-04T12:55:00Z
4
value 0.01115
scoring_system epss
scoring_elements 0.78154
published_at 2026-04-07T12:55:00Z
5
value 0.01115
scoring_system epss
scoring_elements 0.78181
published_at 2026-04-08T12:55:00Z
6
value 0.01115
scoring_system epss
scoring_elements 0.78187
published_at 2026-04-09T12:55:00Z
7
value 0.01115
scoring_system epss
scoring_elements 0.78212
published_at 2026-04-11T12:55:00Z
8
value 0.01115
scoring_system epss
scoring_elements 0.78195
published_at 2026-04-12T12:55:00Z
9
value 0.01115
scoring_system epss
scoring_elements 0.78191
published_at 2026-04-13T12:55:00Z
10
value 0.01115
scoring_system epss
scoring_elements 0.78133
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-30154
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1946690
reference_id 1946690
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1946690
11
reference_url https://security.archlinux.org/AVG-1775
reference_id AVG-1775
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1775
12
reference_url https://security.gentoo.org/glsa/202107-40
reference_id GLSA-202107-40
reference_type
scores
url https://security.gentoo.org/glsa/202107-40
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-30154
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7m3q-wuh7-k7fn
33
url VCID-7wh4-say2-pqap
vulnerability_id VCID-7wh4-say2-pqap
summary Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated with program files src/ce/ve.Ce.ClipboardHandler.Js. This issue affects VisualEditor: from * before 1.39.14, 1.43.4, 1.44.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61656
reference_id
reference_type
scores
0
value 0.0002
scoring_system epss
scoring_elements 0.05235
published_at 2026-04-11T12:55:00Z
1
value 0.00022
scoring_system epss
scoring_elements 0.06029
published_at 2026-04-18T12:55:00Z
2
value 0.00022
scoring_system epss
scoring_elements 0.06064
published_at 2026-04-12T12:55:00Z
3
value 0.00022
scoring_system epss
scoring_elements 0.06056
published_at 2026-04-13T12:55:00Z
4
value 0.00022
scoring_system epss
scoring_elements 0.06021
published_at 2026-04-16T12:55:00Z
5
value 0.00022
scoring_system epss
scoring_elements 0.06179
published_at 2026-04-21T12:55:00Z
6
value 0.00046
scoring_system epss
scoring_elements 0.14413
published_at 2026-04-09T12:55:00Z
7
value 0.00046
scoring_system epss
scoring_elements 0.1447
published_at 2026-04-04T12:55:00Z
8
value 0.00046
scoring_system epss
scoring_elements 0.14276
published_at 2026-04-07T12:55:00Z
9
value 0.00046
scoring_system epss
scoring_elements 0.14358
published_at 2026-04-08T12:55:00Z
10
value 0.00046
scoring_system epss
scoring_elements 0.14403
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61656
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61656
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61656
2
reference_url https://phabricator.wikimedia.org/T397232
reference_id T397232
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:00:27Z/
url https://phabricator.wikimedia.org/T397232
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-61656
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7wh4-say2-pqap
34
url VCID-812q-n5hg-u7dx
vulnerability_id VCID-812q-n5hg-u7dx
summary mediawiki: message recentchanges-legend-watchlistexpiry can contain raw html
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35474.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35474.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-35474
reference_id
reference_type
scores
0
value 0.00468
scoring_system epss
scoring_elements 0.64378
published_at 2026-04-01T12:55:00Z
1
value 0.00468
scoring_system epss
scoring_elements 0.64432
published_at 2026-04-02T12:55:00Z
2
value 0.00468
scoring_system epss
scoring_elements 0.64462
published_at 2026-04-04T12:55:00Z
3
value 0.00468
scoring_system epss
scoring_elements 0.64422
published_at 2026-04-07T12:55:00Z
4
value 0.00468
scoring_system epss
scoring_elements 0.6447
published_at 2026-04-08T12:55:00Z
5
value 0.00468
scoring_system epss
scoring_elements 0.64486
published_at 2026-04-09T12:55:00Z
6
value 0.00468
scoring_system epss
scoring_elements 0.64501
published_at 2026-04-11T12:55:00Z
7
value 0.00468
scoring_system epss
scoring_elements 0.64489
published_at 2026-04-12T12:55:00Z
8
value 0.00468
scoring_system epss
scoring_elements 0.64461
published_at 2026-04-13T12:55:00Z
9
value 0.00468
scoring_system epss
scoring_elements 0.64495
published_at 2026-04-16T12:55:00Z
10
value 0.00468
scoring_system epss
scoring_elements 0.64507
published_at 2026-04-18T12:55:00Z
11
value 0.00468
scoring_system epss
scoring_elements 0.64499
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-35474
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35474
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1909227
reference_id 1909227
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1909227
4
reference_url https://security.archlinux.org/ASA-202101-22
reference_id ASA-202101-22
reference_type
scores
url https://security.archlinux.org/ASA-202101-22
5
reference_url https://security.archlinux.org/AVG-1371
reference_id AVG-1371
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1371
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2020-35474
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-812q-n5hg-u7dx
35
url VCID-8sqw-6aae-13f5
vulnerability_id VCID-8sqw-6aae-13f5
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which could result in a Denial of Service condition.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30157.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30157.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-30157
reference_id
reference_type
scores
0
value 0.00734
scoring_system epss
scoring_elements 0.72796
published_at 2026-04-21T12:55:00Z
1
value 0.00734
scoring_system epss
scoring_elements 0.72793
published_at 2026-04-16T12:55:00Z
2
value 0.00734
scoring_system epss
scoring_elements 0.72804
published_at 2026-04-18T12:55:00Z
3
value 0.01006
scoring_system epss
scoring_elements 0.76995
published_at 2026-04-02T12:55:00Z
4
value 0.01006
scoring_system epss
scoring_elements 0.77005
published_at 2026-04-07T12:55:00Z
5
value 0.01006
scoring_system epss
scoring_elements 0.77037
published_at 2026-04-08T12:55:00Z
6
value 0.01006
scoring_system epss
scoring_elements 0.77047
published_at 2026-04-09T12:55:00Z
7
value 0.01006
scoring_system epss
scoring_elements 0.77076
published_at 2026-04-11T12:55:00Z
8
value 0.01006
scoring_system epss
scoring_elements 0.77055
published_at 2026-04-12T12:55:00Z
9
value 0.01006
scoring_system epss
scoring_elements 0.7705
published_at 2026-04-13T12:55:00Z
10
value 0.01006
scoring_system epss
scoring_elements 0.76989
published_at 2026-04-01T12:55:00Z
11
value 0.01006
scoring_system epss
scoring_elements 0.77024
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-30157
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1946692
reference_id 1946692
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1946692
11
reference_url https://security.archlinux.org/AVG-1775
reference_id AVG-1775
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1775
12
reference_url https://security.gentoo.org/glsa/202107-40
reference_id GLSA-202107-40
reference_type
scores
url https://security.gentoo.org/glsa/202107-40
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-30157
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8sqw-6aae-13f5
36
url VCID-8svz-zhz1-vyh6
vulnerability_id VCID-8svz-zhz1-vyh6
summary ApiParse in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to bypass intended per-title read restrictions via a parse action to api.php.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6331
reference_id
reference_type
scores
0
value 0.00166
scoring_system epss
scoring_elements 0.3772
published_at 2026-04-21T12:55:00Z
1
value 0.00166
scoring_system epss
scoring_elements 0.3778
published_at 2026-04-18T12:55:00Z
2
value 0.00166
scoring_system epss
scoring_elements 0.3765
published_at 2026-04-01T12:55:00Z
3
value 0.00166
scoring_system epss
scoring_elements 0.37831
published_at 2026-04-02T12:55:00Z
4
value 0.00166
scoring_system epss
scoring_elements 0.37857
published_at 2026-04-04T12:55:00Z
5
value 0.00166
scoring_system epss
scoring_elements 0.37735
published_at 2026-04-07T12:55:00Z
6
value 0.00166
scoring_system epss
scoring_elements 0.37785
published_at 2026-04-08T12:55:00Z
7
value 0.00166
scoring_system epss
scoring_elements 0.37798
published_at 2026-04-09T12:55:00Z
8
value 0.00166
scoring_system epss
scoring_elements 0.37813
published_at 2026-04-11T12:55:00Z
9
value 0.00166
scoring_system epss
scoring_elements 0.37777
published_at 2026-04-12T12:55:00Z
10
value 0.00166
scoring_system epss
scoring_elements 0.37752
published_at 2026-04-13T12:55:00Z
11
value 0.00166
scoring_system epss
scoring_elements 0.378
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6331
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1369613
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1369613
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6331
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6331
3
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
4
reference_url https://phabricator.wikimedia.org/T115333
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T115333
5
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-6331
reference_id CVE-2016-6331
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
1
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2016-6331
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2016-6331
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8svz-zhz1-vyh6
37
url VCID-8uw8-ja3w-r3da
vulnerability_id VCID-8uw8-ja3w-r3da
summary MediaWiki: MediaWiki: Cross-site Scripting (XSS) vulnerability
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-11261.json
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-11261.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-11261
reference_id
reference_type
scores
0
value 5e-05
scoring_system epss
scoring_elements 0.00267
published_at 2026-04-04T12:55:00Z
1
value 5e-05
scoring_system epss
scoring_elements 0.00261
published_at 2026-04-08T12:55:00Z
2
value 5e-05
scoring_system epss
scoring_elements 0.00263
published_at 2026-04-07T12:55:00Z
3
value 5e-05
scoring_system epss
scoring_elements 0.00259
published_at 2026-04-11T12:55:00Z
4
value 6e-05
scoring_system epss
scoring_elements 0.0037
published_at 2026-04-21T12:55:00Z
5
value 6e-05
scoring_system epss
scoring_elements 0.00347
published_at 2026-04-18T12:55:00Z
6
value 6e-05
scoring_system epss
scoring_elements 0.00348
published_at 2026-04-13T12:55:00Z
7
value 6e-05
scoring_system epss
scoring_elements 0.00343
published_at 2026-04-16T12:55:00Z
8
value 6e-05
scoring_system epss
scoring_elements 0.0035
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-11261
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11261
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11261
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2436168
reference_id 2436168
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2436168
4
reference_url https://phabricator.wikimedia.org/T402077
reference_id T402077
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:07:05Z/
url https://phabricator.wikimedia.org/T402077
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-11261
risk_score 2.0
exploitability 0.5
weighted_severity 4.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8uw8-ja3w-r3da
38
url VCID-92hf-r3sb-jbhy
vulnerability_id VCID-92hf-r3sb-jbhy
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44855.json
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44855.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-44855
reference_id
reference_type
scores
0
value 0.00458
scoring_system epss
scoring_elements 0.6389
published_at 2026-04-01T12:55:00Z
1
value 0.00458
scoring_system epss
scoring_elements 0.6395
published_at 2026-04-02T12:55:00Z
2
value 0.00458
scoring_system epss
scoring_elements 0.64019
published_at 2026-04-18T12:55:00Z
3
value 0.00458
scoring_system epss
scoring_elements 0.64004
published_at 2026-04-09T12:55:00Z
4
value 0.00458
scoring_system epss
scoring_elements 0.64016
published_at 2026-04-11T12:55:00Z
5
value 0.00458
scoring_system epss
scoring_elements 0.64002
published_at 2026-04-12T12:55:00Z
6
value 0.00458
scoring_system epss
scoring_elements 0.63972
published_at 2026-04-13T12:55:00Z
7
value 0.00458
scoring_system epss
scoring_elements 0.64007
published_at 2026-04-21T12:55:00Z
8
value 0.00458
scoring_system epss
scoring_elements 0.63977
published_at 2026-04-04T12:55:00Z
9
value 0.00458
scoring_system epss
scoring_elements 0.63936
published_at 2026-04-07T12:55:00Z
10
value 0.00458
scoring_system epss
scoring_elements 0.63987
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-44855
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
17
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2156318
reference_id 2156318
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2156318
18
reference_url https://security.archlinux.org/AVG-2823
reference_id AVG-2823
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2823
19
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T15:51:07Z/
url https://security.gentoo.org/glsa/202305-24
20
reference_url https://phabricator.wikimedia.org/T293589
reference_id T293589
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T15:51:07Z/
url https://phabricator.wikimedia.org/T293589
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-44855
risk_score 1.9
exploitability 0.5
weighted_severity 3.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-92hf-r3sb-jbhy
39
url VCID-9346-9aaj-fkfw
vulnerability_id VCID-9346-9aaj-fkfw
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41765.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41765.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-41765
reference_id
reference_type
scores
0
value 0.00257
scoring_system epss
scoring_elements 0.49129
published_at 2026-04-21T12:55:00Z
1
value 0.00257
scoring_system epss
scoring_elements 0.49088
published_at 2026-04-02T12:55:00Z
2
value 0.00257
scoring_system epss
scoring_elements 0.49138
published_at 2026-04-11T12:55:00Z
3
value 0.00257
scoring_system epss
scoring_elements 0.49112
published_at 2026-04-12T12:55:00Z
4
value 0.00257
scoring_system epss
scoring_elements 0.49118
published_at 2026-04-13T12:55:00Z
5
value 0.00257
scoring_system epss
scoring_elements 0.49163
published_at 2026-04-16T12:55:00Z
6
value 0.00257
scoring_system epss
scoring_elements 0.49161
published_at 2026-04-18T12:55:00Z
7
value 0.00257
scoring_system epss
scoring_elements 0.49117
published_at 2026-04-04T12:55:00Z
8
value 0.00257
scoring_system epss
scoring_elements 0.4907
published_at 2026-04-07T12:55:00Z
9
value 0.00257
scoring_system epss
scoring_elements 0.49124
published_at 2026-04-08T12:55:00Z
10
value 0.00257
scoring_system epss
scoring_elements 0.49121
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-41765
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
17
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2156329
reference_id 2156329
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2156329
18
reference_url https://security.archlinux.org/AVG-2823
reference_id AVG-2823
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2823
19
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T14:24:49Z/
url https://security.gentoo.org/glsa/202305-24
20
reference_url https://phabricator.wikimedia.org/T309894
reference_id T309894
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T14:24:49Z/
url https://phabricator.wikimedia.org/T309894
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2022-41765
risk_score 1.9
exploitability 0.5
weighted_severity 3.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9346-9aaj-fkfw
40
url VCID-95d1-mkm6-r3cq
vulnerability_id VCID-95d1-mkm6-r3cq
summary Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiFeedContributions.Php. This issue affects MediaWiki: from * before 1.39.13, 1.42.7 1.43.2, 1.44.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-6591
reference_id
reference_type
scores
0
value 0.00013
scoring_system epss
scoring_elements 0.02371
published_at 2026-04-21T12:55:00Z
1
value 0.00013
scoring_system epss
scoring_elements 0.02275
published_at 2026-04-18T12:55:00Z
2
value 0.00013
scoring_system epss
scoring_elements 0.02062
published_at 2026-04-02T12:55:00Z
3
value 0.00013
scoring_system epss
scoring_elements 0.02068
published_at 2026-04-04T12:55:00Z
4
value 0.00013
scoring_system epss
scoring_elements 0.02064
published_at 2026-04-07T12:55:00Z
5
value 0.00013
scoring_system epss
scoring_elements 0.02066
published_at 2026-04-08T12:55:00Z
6
value 0.00013
scoring_system epss
scoring_elements 0.02083
published_at 2026-04-09T12:55:00Z
7
value 0.00013
scoring_system epss
scoring_elements 0.02299
published_at 2026-04-11T12:55:00Z
8
value 0.00013
scoring_system epss
scoring_elements 0.02286
published_at 2026-04-12T12:55:00Z
9
value 0.00013
scoring_system epss
scoring_elements 0.02283
published_at 2026-04-13T12:55:00Z
10
value 0.00013
scoring_system epss
scoring_elements 0.02268
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-6591
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6591
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6591
2
reference_url https://phabricator.wikimedia.org/T392276
reference_id T392276
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-04T15:32:29Z/
url https://phabricator.wikimedia.org/T392276
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-6591
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-95d1-mkm6-r3cq
41
url VCID-9e5y-vgvx-73d6
vulnerability_id VCID-9e5y-vgvx-73d6
summary Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-0372
reference_id
reference_type
scores
0
value 0.58351
scoring_system epss
scoring_elements 0.98205
published_at 2026-04-18T12:55:00Z
1
value 0.58351
scoring_system epss
scoring_elements 0.98182
published_at 2026-04-01T12:55:00Z
2
value 0.58351
scoring_system epss
scoring_elements 0.98185
published_at 2026-04-02T12:55:00Z
3
value 0.58351
scoring_system epss
scoring_elements 0.98188
published_at 2026-04-04T12:55:00Z
4
value 0.58351
scoring_system epss
scoring_elements 0.9819
published_at 2026-04-07T12:55:00Z
5
value 0.58351
scoring_system epss
scoring_elements 0.98194
published_at 2026-04-08T12:55:00Z
6
value 0.58351
scoring_system epss
scoring_elements 0.98195
published_at 2026-04-09T12:55:00Z
7
value 0.58351
scoring_system epss
scoring_elements 0.98198
published_at 2026-04-11T12:55:00Z
8
value 0.58351
scoring_system epss
scoring_elements 0.98197
published_at 2026-04-13T12:55:00Z
9
value 0.58351
scoring_system epss
scoring_elements 0.98203
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-0372
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0372
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0372
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861585
reference_id 861585
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861585
3
reference_url https://security.archlinux.org/AVG-259
reference_id AVG-259
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-259
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2017-0372
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9e5y-vgvx-73d6
42
url VCID-9exs-x5s1-4bhg
vulnerability_id VCID-9exs-x5s1-4bhg
summary
Failure to strip the Cookie header on change in host or HTTP downgrade
### Impact

`Cookie` headers on requests are sensitive information. On making a request using the `https` scheme to a server which responds with a redirect to a URI with the `http` scheme, or on making a request to a server which responds with a redirect to a a URI to a different host, we should not forward the `Cookie` header on. Prior to this fix, only cookies that were managed by our cookie middleware would be safely removed, and any `Cookie` header manually added to the initial request would not be stripped. We now always strip it, and allow the cookie middleware to re-add any cookies that it deems should be there.

### Patches

Affected Guzzle 7 users should upgrade to Guzzle 7.4.4 as soon as possible. Affected users using any earlier series of Guzzle should upgrade to Guzzle 6.5.7 or 7.4.4.

### Workarounds

An alternative approach would be to use your own redirect middleware, rather than ours, if you are unable to upgrade. If you do not require or expect redirects to be followed, one should simply disable redirects all together.

### References

* [RFC9110 Section 15.4](https://www.rfc-editor.org/rfc/rfc9110.html#name-redirection-3xx)

### For more information

If you have any questions or comments about this advisory, please get in touch with us in `#guzzle` on the [PHP HTTP Slack](https://php-http.slack.com/). Do not report additional security advisories in that public channel, however - please follow our [vulnerability reporting process](https://github.com/guzzle/guzzle/security/policy).
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-31042
reference_id
reference_type
scores
0
value 0.01454
scoring_system epss
scoring_elements 0.80753
published_at 2026-04-02T12:55:00Z
1
value 0.01454
scoring_system epss
scoring_elements 0.80841
published_at 2026-04-21T12:55:00Z
2
value 0.01454
scoring_system epss
scoring_elements 0.80838
published_at 2026-04-16T12:55:00Z
3
value 0.01454
scoring_system epss
scoring_elements 0.80801
published_at 2026-04-13T12:55:00Z
4
value 0.01454
scoring_system epss
scoring_elements 0.80809
published_at 2026-04-12T12:55:00Z
5
value 0.01454
scoring_system epss
scoring_elements 0.80824
published_at 2026-04-11T12:55:00Z
6
value 0.01454
scoring_system epss
scoring_elements 0.80807
published_at 2026-04-09T12:55:00Z
7
value 0.01454
scoring_system epss
scoring_elements 0.80799
published_at 2026-04-08T12:55:00Z
8
value 0.01454
scoring_system epss
scoring_elements 0.80771
published_at 2026-04-07T12:55:00Z
9
value 0.01454
scoring_system epss
scoring_elements 0.80774
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-31042
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
16
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2022-31042.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2022-31042.yaml
17
reference_url https://github.com/guzzle/guzzle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/guzzle/guzzle
18
reference_url https://github.com/guzzle/guzzle/commit/e3ff079b22820c2029d4c2a87796b6a0b8716ad8
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:54:32Z/
url https://github.com/guzzle/guzzle/commit/e3ff079b22820c2029d4c2a87796b6a0b8716ad8
19
reference_url https://github.com/guzzle/guzzle/security/advisories/GHSA-f2wf-25xc-69c9
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:54:32Z/
url https://github.com/guzzle/guzzle/security/advisories/GHSA-f2wf-25xc-69c9
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-31042
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-31042
21
reference_url https://www.debian.org/security/2022/dsa-5246
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:54:32Z/
url https://www.debian.org/security/2022/dsa-5246
22
reference_url https://www.drupal.org/sa-core-2022-011
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:54:32Z/
url https://www.drupal.org/sa-core-2022-011
23
reference_url https://www.rfc-editor.org/rfc/rfc9110.html#name-redirection-3xx
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:54:32Z/
url https://www.rfc-editor.org/rfc/rfc9110.html#name-redirection-3xx
24
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012821
reference_id 1012821
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012821
25
reference_url https://security.archlinux.org/AVG-2823
reference_id AVG-2823
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2823
26
reference_url https://github.com/advisories/GHSA-f2wf-25xc-69c9
reference_id GHSA-f2wf-25xc-69c9
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f2wf-25xc-69c9
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2022-31042, GHSA-f2wf-25xc-69c9
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9exs-x5s1-4bhg
43
url VCID-9g1g-z7d8-c7ah
vulnerability_id VCID-9g1g-z7d8-c7ah
summary
Regular Expression Denial of Service in papaparse
Versions of `papaparse` prior to 5.2.0 are vulnerable to Regular Expression Denial of Service (ReDos). The `parse` function contains a malformed regular expression that takes exponentially longer to process non-numerical inputs. This allows attackers to stall systems and lead to Denial of Service.


## Recommendation

Upgrade to version 5.2.0 or later.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-36649.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-36649.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-36649
reference_id
reference_type
scores
0
value 0.00427
scoring_system epss
scoring_elements 0.62458
published_at 2026-04-21T12:55:00Z
1
value 0.00427
scoring_system epss
scoring_elements 0.6237
published_at 2026-04-07T12:55:00Z
2
value 0.00427
scoring_system epss
scoring_elements 0.62474
published_at 2026-04-18T12:55:00Z
3
value 0.00427
scoring_system epss
scoring_elements 0.62467
published_at 2026-04-16T12:55:00Z
4
value 0.00427
scoring_system epss
scoring_elements 0.62423
published_at 2026-04-13T12:55:00Z
5
value 0.00427
scoring_system epss
scoring_elements 0.62445
published_at 2026-04-12T12:55:00Z
6
value 0.00427
scoring_system epss
scoring_elements 0.62455
published_at 2026-04-11T12:55:00Z
7
value 0.00427
scoring_system epss
scoring_elements 0.62436
published_at 2026-04-09T12:55:00Z
8
value 0.00427
scoring_system epss
scoring_elements 0.62317
published_at 2026-04-01T12:55:00Z
9
value 0.00427
scoring_system epss
scoring_elements 0.62375
published_at 2026-04-02T12:55:00Z
10
value 0.00427
scoring_system epss
scoring_elements 0.62405
published_at 2026-04-04T12:55:00Z
11
value 0.00427
scoring_system epss
scoring_elements 0.62419
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-36649
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36649
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36649
3
reference_url https://github.com/mholt/PapaParse
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/mholt/PapaParse
4
reference_url https://github.com/mholt/PapaParse/commit/235a12758cd77266d2e98fd715f53536b34ad621
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/mholt/PapaParse/commit/235a12758cd77266d2e98fd715f53536b34ad621
5
reference_url https://github.com/mholt/PapaParse/issues/777
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/mholt/PapaParse/issues/777
6
reference_url https://github.com/mholt/PapaParse/pull/779
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/mholt/PapaParse/pull/779
7
reference_url https://github.com/mholt/PapaParse/releases/tag/5.2.0
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/mholt/PapaParse/releases/tag/5.2.0
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-36649
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-36649
9
reference_url https://snyk.io/vuln/SNYK-JS-PAPAPARSE-564258
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-JS-PAPAPARSE-564258
10
reference_url https://vuldb.com/?ctiid.218004
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://vuldb.com/?ctiid.218004
11
reference_url https://vuldb.com/?id.218004
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://vuldb.com/?id.218004
12
reference_url https://www.npmjs.com/advisories/1515
reference_id
reference_type
scores
url https://www.npmjs.com/advisories/1515
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2160359
reference_id 2160359
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2160359
14
reference_url https://github.com/advisories/GHSA-qvjc-g5vr-mfgr
reference_id GHSA-qvjc-g5vr-mfgr
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qvjc-g5vr-mfgr
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2020-36649, GHSA-qvjc-g5vr-mfgr, GMS-2020-421
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9g1g-z7d8-c7ah
44
url VCID-9nnu-4mda-7qg9
vulnerability_id VCID-9nnu-4mda-7qg9
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-41798.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-41798.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-41798
reference_id
reference_type
scores
0
value 0.00158
scoring_system epss
scoring_elements 0.36614
published_at 2026-04-01T12:55:00Z
1
value 0.00158
scoring_system epss
scoring_elements 0.36769
published_at 2026-04-02T12:55:00Z
2
value 0.00158
scoring_system epss
scoring_elements 0.36801
published_at 2026-04-04T12:55:00Z
3
value 0.00158
scoring_system epss
scoring_elements 0.36637
published_at 2026-04-07T12:55:00Z
4
value 0.00158
scoring_system epss
scoring_elements 0.36688
published_at 2026-04-08T12:55:00Z
5
value 0.00158
scoring_system epss
scoring_elements 0.36705
published_at 2026-04-09T12:55:00Z
6
value 0.00158
scoring_system epss
scoring_elements 0.36714
published_at 2026-04-11T12:55:00Z
7
value 0.00158
scoring_system epss
scoring_elements 0.36679
published_at 2026-04-12T12:55:00Z
8
value 0.00158
scoring_system epss
scoring_elements 0.36653
published_at 2026-04-13T12:55:00Z
9
value 0.00158
scoring_system epss
scoring_elements 0.36698
published_at 2026-04-16T12:55:00Z
10
value 0.00158
scoring_system epss
scoring_elements 0.3668
published_at 2026-04-18T12:55:00Z
11
value 0.00158
scoring_system epss
scoring_elements 0.3662
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-41798
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35197
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35197
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41798
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41798
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41799
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41799
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41800
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41800
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41801
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41801
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2009507
reference_id 2009507
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2009507
8
reference_url https://security.archlinux.org/AVG-2434
reference_id AVG-2434
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2434
9
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
url https://security.gentoo.org/glsa/202305-24
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-41798
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9nnu-4mda-7qg9
45
url VCID-9xyz-wzr8-wqhz
vulnerability_id VCID-9xyz-wzr8-wqhz
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-31090
reference_id
reference_type
scores
0
value 0.03005
scoring_system epss
scoring_elements 0.86548
published_at 2026-04-04T12:55:00Z
1
value 0.03005
scoring_system epss
scoring_elements 0.86599
published_at 2026-04-18T12:55:00Z
2
value 0.03005
scoring_system epss
scoring_elements 0.86594
published_at 2026-04-16T12:55:00Z
3
value 0.03005
scoring_system epss
scoring_elements 0.8658
published_at 2026-04-13T12:55:00Z
4
value 0.03005
scoring_system epss
scoring_elements 0.86529
published_at 2026-04-02T12:55:00Z
5
value 0.03005
scoring_system epss
scoring_elements 0.86587
published_at 2026-04-12T12:55:00Z
6
value 0.03005
scoring_system epss
scoring_elements 0.86591
published_at 2026-04-21T12:55:00Z
7
value 0.03005
scoring_system epss
scoring_elements 0.86576
published_at 2026-04-09T12:55:00Z
8
value 0.03005
scoring_system epss
scoring_elements 0.86567
published_at 2026-04-08T12:55:00Z
9
value 0.03005
scoring_system epss
scoring_elements 0.86547
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-31090
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
16
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2022-31090.yaml
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2022-31090.yaml
17
reference_url https://github.com/guzzle/guzzle
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/guzzle/guzzle
18
reference_url https://github.com/guzzle/guzzle/blob/6.5.8/CHANGELOG.md
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/guzzle/guzzle/blob/6.5.8/CHANGELOG.md
19
reference_url https://github.com/guzzle/guzzle/blob/7.4.5/CHANGELOG.md
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/guzzle/guzzle/blob/7.4.5/CHANGELOG.md
20
reference_url https://github.com/guzzle/guzzle/commit/1dd98b0564cb3f6bd16ce683cb755f94c10fbd82
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:04:50Z/
url https://github.com/guzzle/guzzle/commit/1dd98b0564cb3f6bd16ce683cb755f94c10fbd82
21
reference_url https://github.com/guzzle/guzzle/security/advisories/GHSA-25mq-v84q-4j7r
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:04:50Z/
url https://github.com/guzzle/guzzle/security/advisories/GHSA-25mq-v84q-4j7r
22
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-31090
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-31090
23
reference_url https://www.debian.org/security/2022/dsa-5246
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:04:50Z/
url https://www.debian.org/security/2022/dsa-5246
24
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014492
reference_id 1014492
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014492
25
reference_url https://security.archlinux.org/AVG-2823
reference_id AVG-2823
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2823
26
reference_url https://github.com/advisories/GHSA-25mq-v84q-4j7r
reference_id GHSA-25mq-v84q-4j7r
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-25mq-v84q-4j7r
27
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:04:50Z/
url https://security.gentoo.org/glsa/202305-24
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2022-31090, GHSA-25mq-v84q-4j7r, GMS-2022-2528
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9xyz-wzr8-wqhz
46
url VCID-a8nh-mvhd-bka7
vulnerability_id VCID-a8nh-mvhd-bka7
summary MediaWiki: MediaWiki: Vulnerability in authentication management
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-6597.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-6597.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-6597
reference_id
reference_type
scores
0
value 0.00021
scoring_system epss
scoring_elements 0.05644
published_at 2026-04-02T12:55:00Z
1
value 0.00021
scoring_system epss
scoring_elements 0.05684
published_at 2026-04-04T12:55:00Z
2
value 0.00021
scoring_system epss
scoring_elements 0.05676
published_at 2026-04-07T12:55:00Z
3
value 0.00021
scoring_system epss
scoring_elements 0.05716
published_at 2026-04-08T12:55:00Z
4
value 0.00021
scoring_system epss
scoring_elements 0.05743
published_at 2026-04-09T12:55:00Z
5
value 0.00022
scoring_system epss
scoring_elements 0.05932
published_at 2026-04-18T12:55:00Z
6
value 0.00022
scoring_system epss
scoring_elements 0.06083
published_at 2026-04-21T12:55:00Z
7
value 0.00022
scoring_system epss
scoring_elements 0.05974
published_at 2026-04-11T12:55:00Z
8
value 0.00022
scoring_system epss
scoring_elements 0.05965
published_at 2026-04-12T12:55:00Z
9
value 0.00022
scoring_system epss
scoring_elements 0.05955
published_at 2026-04-13T12:55:00Z
10
value 0.00022
scoring_system epss
scoring_elements 0.05921
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-6597
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6597
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6597
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2436116
reference_id 2436116
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2436116
4
reference_url https://phabricator.wikimedia.org/T389009
reference_id T389009
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:12:25Z/
url https://phabricator.wikimedia.org/T389009
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-6597
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a8nh-mvhd-bka7
47
url VCID-ad34-frk5-kqds
vulnerability_id VCID-ad34-frk5-kqds
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which could result in a Denial of Service condition.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30158.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30158.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-30158
reference_id
reference_type
scores
0
value 0.0061
scoring_system epss
scoring_elements 0.69775
published_at 2026-04-21T12:55:00Z
1
value 0.0061
scoring_system epss
scoring_elements 0.69784
published_at 2026-04-16T12:55:00Z
2
value 0.0061
scoring_system epss
scoring_elements 0.69794
published_at 2026-04-18T12:55:00Z
3
value 0.00614
scoring_system epss
scoring_elements 0.69801
published_at 2026-04-02T12:55:00Z
4
value 0.00614
scoring_system epss
scoring_elements 0.69793
published_at 2026-04-07T12:55:00Z
5
value 0.00614
scoring_system epss
scoring_elements 0.69841
published_at 2026-04-08T12:55:00Z
6
value 0.00614
scoring_system epss
scoring_elements 0.69856
published_at 2026-04-09T12:55:00Z
7
value 0.00614
scoring_system epss
scoring_elements 0.69879
published_at 2026-04-11T12:55:00Z
8
value 0.00614
scoring_system epss
scoring_elements 0.69864
published_at 2026-04-12T12:55:00Z
9
value 0.00614
scoring_system epss
scoring_elements 0.69851
published_at 2026-04-13T12:55:00Z
10
value 0.00614
scoring_system epss
scoring_elements 0.69788
published_at 2026-04-01T12:55:00Z
11
value 0.00614
scoring_system epss
scoring_elements 0.69816
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-30158
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1946698
reference_id 1946698
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1946698
11
reference_url https://security.archlinux.org/AVG-1775
reference_id AVG-1775
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1775
12
reference_url https://security.gentoo.org/glsa/202107-40
reference_id GLSA-202107-40
reference_type
scores
url https://security.gentoo.org/glsa/202107-40
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-30158
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ad34-frk5-kqds
48
url VCID-arzd-7xhw-qqb4
vulnerability_id VCID-arzd-7xhw-qqb4
summary
OATHAuth extension in MediaWiki is not implementing rate limit
An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.9 and 1.32.x through 1.34.x before 1.34.3. For Wikis using OATHAuth on a farm/cluster (such as via CentralAuth), rate limiting of OATH tokens is only done on a single site level. Thus, multiple requests can be made across many wikis/sites concurrently.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25827.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25827.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-25827
reference_id
reference_type
scores
0
value 0.00239
scoring_system epss
scoring_elements 0.46991
published_at 2026-04-21T12:55:00Z
1
value 0.00239
scoring_system epss
scoring_elements 0.47042
published_at 2026-04-18T12:55:00Z
2
value 0.00239
scoring_system epss
scoring_elements 0.46983
published_at 2026-04-12T12:55:00Z
3
value 0.00239
scoring_system epss
scoring_elements 0.46988
published_at 2026-04-08T12:55:00Z
4
value 0.00239
scoring_system epss
scoring_elements 0.46987
published_at 2026-04-04T12:55:00Z
5
value 0.00239
scoring_system epss
scoring_elements 0.4697
published_at 2026-04-02T12:55:00Z
6
value 0.00239
scoring_system epss
scoring_elements 0.46934
published_at 2026-04-07T12:55:00Z
7
value 0.00239
scoring_system epss
scoring_elements 0.47046
published_at 2026-04-16T12:55:00Z
8
value 0.00239
scoring_system epss
scoring_elements 0.4699
published_at 2026-04-13T12:55:00Z
9
value 0.00239
scoring_system epss
scoring_elements 0.4701
published_at 2026-04-11T12:55:00Z
10
value 0.00239
scoring_system epss
scoring_elements 0.46985
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-25827
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
10
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25827.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25827.yaml
11
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
14
reference_url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
15
reference_url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-25827
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-25827
17
reference_url https://phabricator.wikimedia.org/T251661
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T251661
18
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1903761
reference_id 1903761
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1903761
19
reference_url https://github.com/advisories/GHSA-rqvj-fc2x-99q6
reference_id GHSA-rqvj-fc2x-99q6
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rqvj-fc2x-99q6
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2020-25827, GHSA-rqvj-fc2x-99q6
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-arzd-7xhw-qqb4
49
url VCID-at9r-vw7p-6bfv
vulnerability_id VCID-at9r-vw7p-6bfv
summary
MediaWiki makeCollapsible allows applying event handler to any CSS selector
In MediaWiki before 1.34.1, users can add various Cascading Style Sheets (CSS) classes (which can affect what content is shown or hidden in the user interface) to arbitrary DOM nodes via HTML content within a MediaWiki page. This occurs because jquery.makeCollapsible allows applying an event handler to any Cascading Style Sheets (CSS) selector. There is no known way to exploit this for cross-site scripting (XSS).
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10960.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10960.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-10960
reference_id
reference_type
scores
0
value 0.00209
scoring_system epss
scoring_elements 0.43324
published_at 2026-04-21T12:55:00Z
1
value 0.00209
scoring_system epss
scoring_elements 0.43333
published_at 2026-04-02T12:55:00Z
2
value 0.00209
scoring_system epss
scoring_elements 0.43361
published_at 2026-04-04T12:55:00Z
3
value 0.00209
scoring_system epss
scoring_elements 0.43299
published_at 2026-04-07T12:55:00Z
4
value 0.00209
scoring_system epss
scoring_elements 0.43351
published_at 2026-04-08T12:55:00Z
5
value 0.00209
scoring_system epss
scoring_elements 0.43365
published_at 2026-04-09T12:55:00Z
6
value 0.00209
scoring_system epss
scoring_elements 0.43386
published_at 2026-04-11T12:55:00Z
7
value 0.00209
scoring_system epss
scoring_elements 0.43355
published_at 2026-04-12T12:55:00Z
8
value 0.00209
scoring_system epss
scoring_elements 0.43339
published_at 2026-04-13T12:55:00Z
9
value 0.00209
scoring_system epss
scoring_elements 0.43399
published_at 2026-04-16T12:55:00Z
10
value 0.00209
scoring_system epss
scoring_elements 0.43389
published_at 2026-04-18T12:55:00Z
11
value 0.00209
scoring_system epss
scoring_elements 0.43275
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-10960
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10960
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10960
3
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-10960.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-10960.yaml
4
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2020-March/093243.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/wikitech-l/2020-March/093243.html
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-10960
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:P/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-10960
6
reference_url https://phabricator.wikimedia.org/T246602
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T246602
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1826076
reference_id 1826076
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1826076
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
9
reference_url https://github.com/advisories/GHSA-pfm2-mqwj-ggm5
reference_id GHSA-pfm2-mqwj-ggm5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pfm2-mqwj-ggm5
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2020-10960, GHSA-pfm2-mqwj-ggm5
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-at9r-vw7p-6bfv
50
url VCID-av7r-cpew-xkcn
vulnerability_id VCID-av7r-cpew-xkcn
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-45038.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-45038.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-45038
reference_id
reference_type
scores
0
value 0.00332
scoring_system epss
scoring_elements 0.55952
published_at 2026-04-01T12:55:00Z
1
value 0.00332
scoring_system epss
scoring_elements 0.56064
published_at 2026-04-02T12:55:00Z
2
value 0.00332
scoring_system epss
scoring_elements 0.56084
published_at 2026-04-04T12:55:00Z
3
value 0.00332
scoring_system epss
scoring_elements 0.56063
published_at 2026-04-07T12:55:00Z
4
value 0.00332
scoring_system epss
scoring_elements 0.56114
published_at 2026-04-08T12:55:00Z
5
value 0.00332
scoring_system epss
scoring_elements 0.56119
published_at 2026-04-09T12:55:00Z
6
value 0.00332
scoring_system epss
scoring_elements 0.56131
published_at 2026-04-11T12:55:00Z
7
value 0.00332
scoring_system epss
scoring_elements 0.56108
published_at 2026-04-12T12:55:00Z
8
value 0.00332
scoring_system epss
scoring_elements 0.56091
published_at 2026-04-13T12:55:00Z
9
value 0.00332
scoring_system epss
scoring_elements 0.56126
published_at 2026-04-16T12:55:00Z
10
value 0.00332
scoring_system epss
scoring_elements 0.56128
published_at 2026-04-18T12:55:00Z
11
value 0.00332
scoring_system epss
scoring_elements 0.56098
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-45038
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44857
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44857
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44858
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44858
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45038
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45038
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2036704
reference_id 2036704
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2036704
6
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
url https://security.gentoo.org/glsa/202305-24
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-45038
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-av7r-cpew-xkcn
51
url VCID-azup-qzq7-sbh6
vulnerability_id VCID-azup-qzq7-sbh6
summary
MediaWiki Cross-site Scripting (XSS) vulnerability
In MediaWiki before 1.31.9 and 1.32.x through 1.34.x before 1.34.3, XSS related to jQuery can occur. The attacker creates a message with [javascript:payload xss] and turns it into a jQuery object with mw.message().parse(). The expected result is that the jQuery object does not contain an <a> tag (or it does not have a href attribute, or it's empty, etc.). The actual result is that the object contains an <a href ="javascript... that executes when clicked.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25814.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25814.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-25814
reference_id
reference_type
scores
0
value 0.00336
scoring_system epss
scoring_elements 0.56468
published_at 2026-04-21T12:55:00Z
1
value 0.00336
scoring_system epss
scoring_elements 0.56498
published_at 2026-04-18T12:55:00Z
2
value 0.00336
scoring_system epss
scoring_elements 0.56464
published_at 2026-04-13T12:55:00Z
3
value 0.00336
scoring_system epss
scoring_elements 0.56483
published_at 2026-04-12T12:55:00Z
4
value 0.00336
scoring_system epss
scoring_elements 0.56507
published_at 2026-04-11T12:55:00Z
5
value 0.00336
scoring_system epss
scoring_elements 0.56497
published_at 2026-04-16T12:55:00Z
6
value 0.00336
scoring_system epss
scoring_elements 0.56441
published_at 2026-04-07T12:55:00Z
7
value 0.00336
scoring_system epss
scoring_elements 0.5646
published_at 2026-04-04T12:55:00Z
8
value 0.00336
scoring_system epss
scoring_elements 0.56492
published_at 2026-04-08T12:55:00Z
9
value 0.00336
scoring_system epss
scoring_elements 0.56437
published_at 2026-04-02T12:55:00Z
10
value 0.00336
scoring_system epss
scoring_elements 0.56339
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-25814
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
10
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25814.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25814.yaml
11
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
13
reference_url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
14
reference_url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
15
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-25814
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-25814
16
reference_url https://phabricator.wikimedia.org/T86738
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T86738
17
reference_url https://www.mediawiki.org/wiki/ResourceLoader/Core_modules#mediawiki.jqueryMsg
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.mediawiki.org/wiki/ResourceLoader/Core_modules#mediawiki.jqueryMsg
18
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1903774
reference_id 1903774
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1903774
19
reference_url https://github.com/advisories/GHSA-4vr7-m8p8-434h
reference_id GHSA-4vr7-m8p8-434h
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4vr7-m8p8-434h
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2020-25814, GHSA-4vr7-m8p8-434h
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-azup-qzq7-sbh6
52
url VCID-b5ke-cjtq-q3ev
vulnerability_id VCID-b5ke-cjtq-q3ev
summary Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MultimediaViewer.This issue affects MultimediaViewer: from * before 1.39.13, 1.42.7, 1.43.2, 1.44.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-6595
reference_id
reference_type
scores
0
value 6e-05
scoring_system epss
scoring_elements 0.0045
published_at 2026-04-21T12:55:00Z
1
value 6e-05
scoring_system epss
scoring_elements 0.00422
published_at 2026-04-18T12:55:00Z
2
value 6e-05
scoring_system epss
scoring_elements 0.00418
published_at 2026-04-16T12:55:00Z
3
value 6e-05
scoring_system epss
scoring_elements 0.00317
published_at 2026-04-02T12:55:00Z
4
value 6e-05
scoring_system epss
scoring_elements 0.00316
published_at 2026-04-04T12:55:00Z
5
value 6e-05
scoring_system epss
scoring_elements 0.00307
published_at 2026-04-07T12:55:00Z
6
value 6e-05
scoring_system epss
scoring_elements 0.00305
published_at 2026-04-09T12:55:00Z
7
value 6e-05
scoring_system epss
scoring_elements 0.00428
published_at 2026-04-11T12:55:00Z
8
value 6e-05
scoring_system epss
scoring_elements 0.00423
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-6595
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6595
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6595
2
reference_url https://phabricator.wikimedia.org/T394863
reference_id T394863
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
1
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T19:53:03Z/
url https://phabricator.wikimedia.org/T394863
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-6595
risk_score 1.4
exploitability 0.5
weighted_severity 2.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b5ke-cjtq-q3ev
53
url VCID-b8r6-r39r-3ffm
vulnerability_id VCID-b8r6-r39r-3ffm
summary MediaWiki: Manualthumb bypasses badFile lookup
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-36674.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-36674.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-36674
reference_id
reference_type
scores
0
value 0.00044
scoring_system epss
scoring_elements 0.13455
published_at 2026-04-02T12:55:00Z
1
value 0.00044
scoring_system epss
scoring_elements 0.13321
published_at 2026-04-21T12:55:00Z
2
value 0.00044
scoring_system epss
scoring_elements 0.13383
published_at 2026-04-12T12:55:00Z
3
value 0.00044
scoring_system epss
scoring_elements 0.13336
published_at 2026-04-13T12:55:00Z
4
value 0.00044
scoring_system epss
scoring_elements 0.13243
published_at 2026-04-16T12:55:00Z
5
value 0.00044
scoring_system epss
scoring_elements 0.13241
published_at 2026-04-18T12:55:00Z
6
value 0.00044
scoring_system epss
scoring_elements 0.13518
published_at 2026-04-04T12:55:00Z
7
value 0.00044
scoring_system epss
scoring_elements 0.13312
published_at 2026-04-07T12:55:00Z
8
value 0.00044
scoring_system epss
scoring_elements 0.13394
published_at 2026-04-08T12:55:00Z
9
value 0.00044
scoring_system epss
scoring_elements 0.13444
published_at 2026-04-09T12:55:00Z
10
value 0.00044
scoring_system epss
scoring_elements 0.13418
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-36674
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36674
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36674
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36675
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36675
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2233116
reference_id 2233116
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2233116
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2UIVGYECQGTUC2LLPVCZBPDLCTOHL2F6/
reference_id 2UIVGYECQGTUC2LLPVCZBPDLCTOHL2F6
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-08T14:27:32Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2UIVGYECQGTUC2LLPVCZBPDLCTOHL2F6/
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CHRX6DSLAMVXCV2YMJEWOLTBEYSESE5/
reference_id 6CHRX6DSLAMVXCV2YMJEWOLTBEYSESE5
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-08T14:27:32Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CHRX6DSLAMVXCV2YMJEWOLTBEYSESE5/
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOAXEGYBOEM4JWB4J3BDH73NK2LCYC3O/
reference_id DOAXEGYBOEM4JWB4J3BDH73NK2LCYC3O
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-08T14:27:32Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOAXEGYBOEM4JWB4J3BDH73NK2LCYC3O/
9
reference_url https://phabricator.wikimedia.org/T335612
reference_id T335612
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-08T14:27:32Z/
url https://phabricator.wikimedia.org/T335612
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2023-36674
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b8r6-r39r-3ffm
54
url VCID-bbef-akjp-a3gp
vulnerability_id VCID-bbef-akjp-a3gp
summary
Wikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple
Wikimedia MediaWiki 1.27.0 through 1.32.1 might allow DoS. Passing invalid titles to the API could cause a DoS by querying the entire watchlist table. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12473
reference_id
reference_type
scores
0
value 0.00469
scoring_system epss
scoring_elements 0.64506
published_at 2026-04-07T12:55:00Z
1
value 0.00469
scoring_system epss
scoring_elements 0.64576
published_at 2026-04-21T12:55:00Z
2
value 0.00469
scoring_system epss
scoring_elements 0.6459
published_at 2026-04-18T12:55:00Z
3
value 0.00469
scoring_system epss
scoring_elements 0.64579
published_at 2026-04-16T12:55:00Z
4
value 0.00469
scoring_system epss
scoring_elements 0.64545
published_at 2026-04-13T12:55:00Z
5
value 0.00469
scoring_system epss
scoring_elements 0.64573
published_at 2026-04-12T12:55:00Z
6
value 0.00469
scoring_system epss
scoring_elements 0.64518
published_at 2026-04-02T12:55:00Z
7
value 0.00469
scoring_system epss
scoring_elements 0.64464
published_at 2026-04-01T12:55:00Z
8
value 0.00469
scoring_system epss
scoring_elements 0.64548
published_at 2026-04-04T12:55:00Z
9
value 0.00469
scoring_system epss
scoring_elements 0.64586
published_at 2026-04-11T12:55:00Z
10
value 0.00469
scoring_system epss
scoring_elements 0.6457
published_at 2026-04-09T12:55:00Z
11
value 0.00469
scoring_system epss
scoring_elements 0.64554
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12473
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
11
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12473.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12473.yaml
12
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
13
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-12473
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-12473
15
reference_url https://phabricator.wikimedia.org/T204729
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T204729
16
reference_url https://seclists.org/bugtraq/2019/Jun/12
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2019/Jun/12
17
reference_url https://www.debian.org/security/2019/dsa-4460
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2019/dsa-4460
18
reference_url https://github.com/advisories/GHSA-33xw-x3pr-rvqj
reference_id GHSA-33xw-x3pr-rvqj
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-33xw-x3pr-rvqj
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2019-12473, GHSA-33xw-x3pr-rvqj
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bbef-akjp-a3gp
55
url VCID-bgjt-nzue-bqc1
vulnerability_id VCID-bgjt-nzue-bqc1
summary Cross-site scripting (XSS) vulnerability in the Parser::replaceInternalLinks2 method in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving replacement of percent encoding in unclosed internal links.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6334
reference_id
reference_type
scores
0
value 0.00221
scoring_system epss
scoring_elements 0.44672
published_at 2026-04-21T12:55:00Z
1
value 0.00221
scoring_system epss
scoring_elements 0.44741
published_at 2026-04-18T12:55:00Z
2
value 0.00221
scoring_system epss
scoring_elements 0.44613
published_at 2026-04-01T12:55:00Z
3
value 0.00221
scoring_system epss
scoring_elements 0.44694
published_at 2026-04-02T12:55:00Z
4
value 0.00221
scoring_system epss
scoring_elements 0.44715
published_at 2026-04-04T12:55:00Z
5
value 0.00221
scoring_system epss
scoring_elements 0.44652
published_at 2026-04-07T12:55:00Z
6
value 0.00221
scoring_system epss
scoring_elements 0.44704
published_at 2026-04-08T12:55:00Z
7
value 0.00221
scoring_system epss
scoring_elements 0.44707
published_at 2026-04-09T12:55:00Z
8
value 0.00221
scoring_system epss
scoring_elements 0.44724
published_at 2026-04-11T12:55:00Z
9
value 0.00221
scoring_system epss
scoring_elements 0.44692
published_at 2026-04-12T12:55:00Z
10
value 0.00221
scoring_system epss
scoring_elements 0.44693
published_at 2026-04-13T12:55:00Z
11
value 0.00221
scoring_system epss
scoring_elements 0.44748
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6334
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1369613
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1369613
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6334
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6334
3
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
4
reference_url https://phabricator.wikimedia.org/T137264
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T137264
5
reference_url http://www.securityfocus.com/bid/98057
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/98057
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-6334
reference_id CVE-2016-6334
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:P/A:N
1
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2016-6334
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2016-6334
risk_score 2.8
exploitability 0.5
weighted_severity 5.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bgjt-nzue-bqc1
56
url VCID-brg4-rv29-1fgz
vulnerability_id VCID-brg4-rv29-1fgz
summary In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-27291.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-27291.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-27291
reference_id
reference_type
scores
0
value 0.03141
scoring_system epss
scoring_elements 0.86827
published_at 2026-04-01T12:55:00Z
1
value 0.03141
scoring_system epss
scoring_elements 0.86882
published_at 2026-04-13T12:55:00Z
2
value 0.03141
scoring_system epss
scoring_elements 0.86887
published_at 2026-04-12T12:55:00Z
3
value 0.03141
scoring_system epss
scoring_elements 0.86891
published_at 2026-04-11T12:55:00Z
4
value 0.03141
scoring_system epss
scoring_elements 0.86879
published_at 2026-04-09T12:55:00Z
5
value 0.03141
scoring_system epss
scoring_elements 0.8687
published_at 2026-04-08T12:55:00Z
6
value 0.03141
scoring_system epss
scoring_elements 0.8685
published_at 2026-04-07T12:55:00Z
7
value 0.03141
scoring_system epss
scoring_elements 0.86856
published_at 2026-04-04T12:55:00Z
8
value 0.03141
scoring_system epss
scoring_elements 0.86837
published_at 2026-04-02T12:55:00Z
9
value 0.034
scoring_system epss
scoring_elements 0.87436
published_at 2026-04-18T12:55:00Z
10
value 0.034
scoring_system epss
scoring_elements 0.87433
published_at 2026-04-16T12:55:00Z
11
value 0.034
scoring_system epss
scoring_elements 0.8743
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-27291
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://gist.github.com/b-c-ds/b1a2cc0c68a35c57188575eb496de5ce
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://gist.github.com/b-c-ds/b1a2cc0c68a35c57188575eb496de5ce
12
reference_url https://github.com/advisories/GHSA-pq64-v7f5-gqh8
reference_id
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pq64-v7f5-gqh8
13
reference_url https://github.com/pygments/pygments
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pygments/pygments
14
reference_url https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14
15
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/pygments/PYSEC-2021-141.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/pygments/PYSEC-2021-141.yaml
16
reference_url https://lists.debian.org/debian-lts-announce/2021/03/msg00024.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/03/msg00024.html
17
reference_url https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html
18
reference_url https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSJRFHALQ7E3UV4FFMFU2YQ6LUDHAI55
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSJRFHALQ7E3UV4FFMFU2YQ6LUDHAI55
20
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSJRFHALQ7E3UV4FFMFU2YQ6LUDHAI55/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSJRFHALQ7E3UV4FFMFU2YQ6LUDHAI55/
21
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSLD67LFGXOX2K5YNESSWAS4AGZIJTUQ
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSLD67LFGXOX2K5YNESSWAS4AGZIJTUQ
22
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSLD67LFGXOX2K5YNESSWAS4AGZIJTUQ/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSLD67LFGXOX2K5YNESSWAS4AGZIJTUQ/
23
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-27291
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-27291
24
reference_url https://www.debian.org/security/2021/dsa-4878
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4878
25
reference_url https://www.debian.org/security/2021/dsa-4889
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4889
26
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1940603
reference_id 1940603
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1940603
27
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985574
reference_id 985574
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985574
28
reference_url https://security.archlinux.org/AVG-1662
reference_id AVG-1662
reference_type
scores
0
value Low
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1662
29
reference_url https://security.archlinux.org/AVG-1775
reference_id AVG-1775
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1775
30
reference_url https://access.redhat.com/errata/RHSA-2021:0781
reference_id RHSA-2021:0781
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0781
31
reference_url https://access.redhat.com/errata/RHSA-2021:3252
reference_id RHSA-2021:3252
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3252
32
reference_url https://access.redhat.com/errata/RHSA-2021:4139
reference_id RHSA-2021:4139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4139
33
reference_url https://access.redhat.com/errata/RHSA-2021:4150
reference_id RHSA-2021:4150
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4150
34
reference_url https://access.redhat.com/errata/RHSA-2021:4151
reference_id RHSA-2021:4151
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4151
35
reference_url https://usn.ubuntu.com/4897-1/
reference_id USN-4897-1
reference_type
scores
url https://usn.ubuntu.com/4897-1/
36
reference_url https://usn.ubuntu.com/4897-2/
reference_id USN-4897-2
reference_type
scores
url https://usn.ubuntu.com/4897-2/
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-27291, GHSA-pq64-v7f5-gqh8, PYSEC-2021-141
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-brg4-rv29-1fgz
57
url VCID-c8zy-wsn9-63af
vulnerability_id VCID-c8zy-wsn9-63af
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-41799.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-41799.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-41799
reference_id
reference_type
scores
0
value 0.00268
scoring_system epss
scoring_elements 0.50227
published_at 2026-04-01T12:55:00Z
1
value 0.00268
scoring_system epss
scoring_elements 0.50266
published_at 2026-04-02T12:55:00Z
2
value 0.00268
scoring_system epss
scoring_elements 0.50296
published_at 2026-04-04T12:55:00Z
3
value 0.00268
scoring_system epss
scoring_elements 0.50244
published_at 2026-04-07T12:55:00Z
4
value 0.00268
scoring_system epss
scoring_elements 0.50297
published_at 2026-04-08T12:55:00Z
5
value 0.00268
scoring_system epss
scoring_elements 0.5029
published_at 2026-04-09T12:55:00Z
6
value 0.00268
scoring_system epss
scoring_elements 0.50317
published_at 2026-04-11T12:55:00Z
7
value 0.00268
scoring_system epss
scoring_elements 0.50291
published_at 2026-04-12T12:55:00Z
8
value 0.00268
scoring_system epss
scoring_elements 0.5028
published_at 2026-04-13T12:55:00Z
9
value 0.00268
scoring_system epss
scoring_elements 0.50324
published_at 2026-04-16T12:55:00Z
10
value 0.00268
scoring_system epss
scoring_elements 0.50325
published_at 2026-04-18T12:55:00Z
11
value 0.00268
scoring_system epss
scoring_elements 0.50299
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-41799
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35197
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35197
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41798
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41798
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41799
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41799
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41800
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41800
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41801
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41801
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2009511
reference_id 2009511
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2009511
8
reference_url https://security.archlinux.org/AVG-2434
reference_id AVG-2434
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2434
9
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
url https://security.gentoo.org/glsa/202305-24
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-41799
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c8zy-wsn9-63af
58
url VCID-ckkj-z5nq-akhb
vulnerability_id VCID-ckkj-z5nq-akhb
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44857.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44857.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-44857
reference_id
reference_type
scores
0
value 0.00149
scoring_system epss
scoring_elements 0.35294
published_at 2026-04-01T12:55:00Z
1
value 0.00149
scoring_system epss
scoring_elements 0.35492
published_at 2026-04-02T12:55:00Z
2
value 0.00149
scoring_system epss
scoring_elements 0.35517
published_at 2026-04-04T12:55:00Z
3
value 0.00149
scoring_system epss
scoring_elements 0.354
published_at 2026-04-07T12:55:00Z
4
value 0.00149
scoring_system epss
scoring_elements 0.35446
published_at 2026-04-08T12:55:00Z
5
value 0.00149
scoring_system epss
scoring_elements 0.35471
published_at 2026-04-09T12:55:00Z
6
value 0.00149
scoring_system epss
scoring_elements 0.35481
published_at 2026-04-11T12:55:00Z
7
value 0.00149
scoring_system epss
scoring_elements 0.35438
published_at 2026-04-12T12:55:00Z
8
value 0.00149
scoring_system epss
scoring_elements 0.35414
published_at 2026-04-13T12:55:00Z
9
value 0.00149
scoring_system epss
scoring_elements 0.35454
published_at 2026-04-16T12:55:00Z
10
value 0.00149
scoring_system epss
scoring_elements 0.35442
published_at 2026-04-18T12:55:00Z
11
value 0.00149
scoring_system epss
scoring_elements 0.3539
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-44857
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44857
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44857
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44858
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44858
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45038
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45038
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2036702
reference_id 2036702
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2036702
6
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
url https://security.gentoo.org/glsa/202305-24
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-44857
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ckkj-z5nq-akhb
59
url VCID-cm78-savr-xuf7
vulnerability_id VCID-cm78-savr-xuf7
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-6730
reference_id
reference_type
scores
0
value 0.00281
scoring_system epss
scoring_elements 0.51365
published_at 2026-04-01T12:55:00Z
1
value 0.00281
scoring_system epss
scoring_elements 0.51416
published_at 2026-04-02T12:55:00Z
2
value 0.00281
scoring_system epss
scoring_elements 0.51443
published_at 2026-04-04T12:55:00Z
3
value 0.00281
scoring_system epss
scoring_elements 0.51402
published_at 2026-04-07T12:55:00Z
4
value 0.00281
scoring_system epss
scoring_elements 0.51455
published_at 2026-04-08T12:55:00Z
5
value 0.00281
scoring_system epss
scoring_elements 0.51453
published_at 2026-04-09T12:55:00Z
6
value 0.00281
scoring_system epss
scoring_elements 0.51496
published_at 2026-04-11T12:55:00Z
7
value 0.00281
scoring_system epss
scoring_elements 0.51475
published_at 2026-04-12T12:55:00Z
8
value 0.00281
scoring_system epss
scoring_elements 0.51462
published_at 2026-04-13T12:55:00Z
9
value 0.00281
scoring_system epss
scoring_elements 0.51505
published_at 2026-04-16T12:55:00Z
10
value 0.00281
scoring_system epss
scoring_elements 0.51513
published_at 2026-04-18T12:55:00Z
11
value 0.00281
scoring_system epss
scoring_elements 0.5149
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-6730
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6730
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6730
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799096
reference_id 799096
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799096
3
reference_url https://security.gentoo.org/glsa/201510-05
reference_id GLSA-201510-05
reference_type
scores
url https://security.gentoo.org/glsa/201510-05
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2015-6730
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cm78-savr-xuf7
60
url VCID-d6kz-e82q-6kh3
vulnerability_id VCID-d6kz-e82q-6kh3
summary mediawiki: potential XSS via the month messages such as MediaWiki:january through MediaWiki:december outputting Block Logs
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35479.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35479.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-35479
reference_id
reference_type
scores
0
value 0.0086
scoring_system epss
scoring_elements 0.74971
published_at 2026-04-01T12:55:00Z
1
value 0.0086
scoring_system epss
scoring_elements 0.74974
published_at 2026-04-02T12:55:00Z
2
value 0.0086
scoring_system epss
scoring_elements 0.75003
published_at 2026-04-04T12:55:00Z
3
value 0.0086
scoring_system epss
scoring_elements 0.7498
published_at 2026-04-07T12:55:00Z
4
value 0.0086
scoring_system epss
scoring_elements 0.75014
published_at 2026-04-08T12:55:00Z
5
value 0.0086
scoring_system epss
scoring_elements 0.75025
published_at 2026-04-12T12:55:00Z
6
value 0.0086
scoring_system epss
scoring_elements 0.75046
published_at 2026-04-11T12:55:00Z
7
value 0.0086
scoring_system epss
scoring_elements 0.75015
published_at 2026-04-13T12:55:00Z
8
value 0.0086
scoring_system epss
scoring_elements 0.75051
published_at 2026-04-16T12:55:00Z
9
value 0.0086
scoring_system epss
scoring_elements 0.75059
published_at 2026-04-18T12:55:00Z
10
value 0.0086
scoring_system epss
scoring_elements 0.75048
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-35479
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35475
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35475
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35477
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35477
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35479
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35479
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35480
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35480
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1909237
reference_id 1909237
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1909237
7
reference_url https://security.archlinux.org/ASA-202101-22
reference_id ASA-202101-22
reference_type
scores
url https://security.archlinux.org/ASA-202101-22
8
reference_url https://security.archlinux.org/AVG-1371
reference_id AVG-1371
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1371
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2020-35479
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d6kz-e82q-6kh3
61
url VCID-dbed-h6a2-fucf
vulnerability_id VCID-dbed-h6a2-fucf
summary security update
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8814
reference_id
reference_type
scores
0
value 0.00652
scoring_system epss
scoring_elements 0.70905
published_at 2026-04-21T12:55:00Z
1
value 0.00652
scoring_system epss
scoring_elements 0.70919
published_at 2026-04-16T12:55:00Z
2
value 0.00652
scoring_system epss
scoring_elements 0.70925
published_at 2026-04-18T12:55:00Z
3
value 0.00652
scoring_system epss
scoring_elements 0.70813
published_at 2026-04-01T12:55:00Z
4
value 0.00652
scoring_system epss
scoring_elements 0.70828
published_at 2026-04-02T12:55:00Z
5
value 0.00652
scoring_system epss
scoring_elements 0.70846
published_at 2026-04-04T12:55:00Z
6
value 0.00652
scoring_system epss
scoring_elements 0.70821
published_at 2026-04-07T12:55:00Z
7
value 0.00652
scoring_system epss
scoring_elements 0.70865
published_at 2026-04-08T12:55:00Z
8
value 0.00652
scoring_system epss
scoring_elements 0.70881
published_at 2026-04-09T12:55:00Z
9
value 0.00652
scoring_system epss
scoring_elements 0.70904
published_at 2026-04-11T12:55:00Z
10
value 0.00652
scoring_system epss
scoring_elements 0.70888
published_at 2026-04-12T12:55:00Z
11
value 0.00652
scoring_system epss
scoring_elements 0.70873
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8814
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8808
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8808
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8809
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8809
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8810
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8810
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8811
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8811
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8812
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8814
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8815
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8815
8
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html
9
reference_url https://www.debian.org/security/2017/dsa-4036
reference_id
reference_type
scores
url https://www.debian.org/security/2017/dsa-4036
10
reference_url http://www.securitytracker.com/id/1039812
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1039812
11
reference_url https://security.archlinux.org/ASA-201711-20
reference_id ASA-201711-20
reference_type
scores
url https://security.archlinux.org/ASA-201711-20
12
reference_url https://security.archlinux.org/AVG-490
reference_id AVG-490
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-490
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-8814
reference_id CVE-2017-8814
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:P/A:N
1
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2017-8814
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
aliases CVE-2017-8814
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dbed-h6a2-fucf
62
url VCID-den1-257q-euc9
vulnerability_id VCID-den1-257q-euc9
summary Vulnerability in Wikimedia Foundation TextExtracts. This vulnerability is associated with program files includes/ApiQueryExtracts.Php. This issue affects TextExtracts: from * before 1.39.14, 1.43.4, 1.44.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61653
reference_id
reference_type
scores
0
value 0.00087
scoring_system epss
scoring_elements 0.25053
published_at 2026-04-02T12:55:00Z
1
value 0.00087
scoring_system epss
scoring_elements 0.25092
published_at 2026-04-04T12:55:00Z
2
value 0.00087
scoring_system epss
scoring_elements 0.24867
published_at 2026-04-07T12:55:00Z
3
value 0.00087
scoring_system epss
scoring_elements 0.24936
published_at 2026-04-08T12:55:00Z
4
value 0.00087
scoring_system epss
scoring_elements 0.24981
published_at 2026-04-09T12:55:00Z
5
value 0.00087
scoring_system epss
scoring_elements 0.24995
published_at 2026-04-11T12:55:00Z
6
value 0.00091
scoring_system epss
scoring_elements 0.25581
published_at 2026-04-16T12:55:00Z
7
value 0.00091
scoring_system epss
scoring_elements 0.25538
published_at 2026-04-21T12:55:00Z
8
value 0.00091
scoring_system epss
scoring_elements 0.25566
published_at 2026-04-18T12:55:00Z
9
value 0.00091
scoring_system epss
scoring_elements 0.25636
published_at 2026-04-12T12:55:00Z
10
value 0.00091
scoring_system epss
scoring_elements 0.25579
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61653
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61653
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61653
2
reference_url https://phabricator.wikimedia.org/T397577
reference_id T397577
reference_type
scores
0
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T20:59:18Z/
url https://phabricator.wikimedia.org/T397577
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-61653
risk_score 0.8
exploitability 0.5
weighted_severity 1.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-den1-257q-euc9
63
url VCID-e2td-jqbd-vbaa
vulnerability_id VCID-e2td-jqbd-vbaa
summary The User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 does not perform token comparison in constant time before determining if a debugging message should be logged, which allows remote attackers to guess the edit token and bypass CSRF protection via a timing attack, a different vulnerability than CVE-2015-8623.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8624
reference_id
reference_type
scores
0
value 0.00116
scoring_system epss
scoring_elements 0.30249
published_at 2026-04-21T12:55:00Z
1
value 0.00116
scoring_system epss
scoring_elements 0.30294
published_at 2026-04-18T12:55:00Z
2
value 0.00116
scoring_system epss
scoring_elements 0.30405
published_at 2026-04-01T12:55:00Z
3
value 0.00116
scoring_system epss
scoring_elements 0.30435
published_at 2026-04-02T12:55:00Z
4
value 0.00116
scoring_system epss
scoring_elements 0.30481
published_at 2026-04-04T12:55:00Z
5
value 0.00116
scoring_system epss
scoring_elements 0.3029
published_at 2026-04-07T12:55:00Z
6
value 0.00116
scoring_system epss
scoring_elements 0.3035
published_at 2026-04-08T12:55:00Z
7
value 0.00116
scoring_system epss
scoring_elements 0.30384
published_at 2026-04-09T12:55:00Z
8
value 0.00116
scoring_system epss
scoring_elements 0.30387
published_at 2026-04-11T12:55:00Z
9
value 0.00116
scoring_system epss
scoring_elements 0.30343
published_at 2026-04-12T12:55:00Z
10
value 0.00116
scoring_system epss
scoring_elements 0.30296
published_at 2026-04-13T12:55:00Z
11
value 0.00116
scoring_system epss
scoring_elements 0.30312
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8624
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8624
2
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html
3
reference_url https://phabricator.wikimedia.org/T119309
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T119309
4
reference_url http://www.openwall.com/lists/oss-security/2015/12/21/8
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/12/21/8
5
reference_url http://www.openwall.com/lists/oss-security/2015/12/23/7
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/12/23/7
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8624
reference_id CVE-2015-8624
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
1
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2015-8624
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2015-8624
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e2td-jqbd-vbaa
64
url VCID-e3ad-yw1a-nbbu
vulnerability_id VCID-e3ad-yw1a-nbbu
summary mediawiki: Make rawHTML mode not apply to system messages
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0368.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0368.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-0368
reference_id
reference_type
scores
0
value 0.00236
scoring_system epss
scoring_elements 0.46477
published_at 2026-04-01T12:55:00Z
1
value 0.00236
scoring_system epss
scoring_elements 0.46515
published_at 2026-04-02T12:55:00Z
2
value 0.00236
scoring_system epss
scoring_elements 0.46535
published_at 2026-04-04T12:55:00Z
3
value 0.00236
scoring_system epss
scoring_elements 0.46483
published_at 2026-04-07T12:55:00Z
4
value 0.00236
scoring_system epss
scoring_elements 0.46538
published_at 2026-04-09T12:55:00Z
5
value 0.00236
scoring_system epss
scoring_elements 0.46562
published_at 2026-04-11T12:55:00Z
6
value 0.00236
scoring_system epss
scoring_elements 0.46534
published_at 2026-04-12T12:55:00Z
7
value 0.00236
scoring_system epss
scoring_elements 0.46543
published_at 2026-04-21T12:55:00Z
8
value 0.00236
scoring_system epss
scoring_elements 0.46599
published_at 2026-04-16T12:55:00Z
9
value 0.00236
scoring_system epss
scoring_elements 0.46596
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-0368
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0368
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0368
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1569796
reference_id 1569796
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1569796
4
reference_url https://security.archlinux.org/ASA-201704-3
reference_id ASA-201704-3
reference_type
scores
url https://security.archlinux.org/ASA-201704-3
5
reference_url https://security.archlinux.org/AVG-236
reference_id AVG-236
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-236
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2017-0368
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e3ad-yw1a-nbbu
65
url VCID-e8np-4nbw-t3b3
vulnerability_id VCID-e8np-4nbw-t3b3
summary Vulnerability in Wikimedia Foundation OATHAuth. This vulnerability is associated with program files src/Special/OATHManage.Php. This issue affects OATHAuth: from * before 1.39.14, 1.43.4, 1.44.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-11173
reference_id
reference_type
scores
0
value 0.00016
scoring_system epss
scoring_elements 0.03646
published_at 2026-04-02T12:55:00Z
1
value 0.00016
scoring_system epss
scoring_elements 0.03661
published_at 2026-04-04T12:55:00Z
2
value 0.00016
scoring_system epss
scoring_elements 0.03672
published_at 2026-04-07T12:55:00Z
3
value 0.00016
scoring_system epss
scoring_elements 0.03675
published_at 2026-04-08T12:55:00Z
4
value 0.00016
scoring_system epss
scoring_elements 0.03696
published_at 2026-04-09T12:55:00Z
5
value 0.00016
scoring_system epss
scoring_elements 0.03658
published_at 2026-04-11T12:55:00Z
6
value 0.00017
scoring_system epss
scoring_elements 0.03956
published_at 2026-04-13T12:55:00Z
7
value 0.00017
scoring_system epss
scoring_elements 0.03936
published_at 2026-04-16T12:55:00Z
8
value 0.00017
scoring_system epss
scoring_elements 0.03948
published_at 2026-04-18T12:55:00Z
9
value 0.00017
scoring_system epss
scoring_elements 0.0407
published_at 2026-04-21T12:55:00Z
10
value 0.00017
scoring_system epss
scoring_elements 0.03986
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-11173
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11173
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11173
2
reference_url https://phabricator.wikimedia.org/T401862
reference_id T401862
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:07:50Z/
url https://phabricator.wikimedia.org/T401862
3
reference_url https://phabricator.wikimedia.org/T402094
reference_id T402094
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:07:50Z/
url https://phabricator.wikimedia.org/T402094
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-11173
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e8np-4nbw-t3b3
66
url VCID-ea7c-xk4h-13fs
vulnerability_id VCID-ea7c-xk4h-13fs
summary mediawiki: stored XSS leads to privilege escalation
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-3550.json
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-3550.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3550
reference_id
reference_type
scores
0
value 0.00185
scoring_system epss
scoring_elements 0.4022
published_at 2026-04-08T12:55:00Z
1
value 0.00185
scoring_system epss
scoring_elements 0.40127
published_at 2026-04-21T12:55:00Z
2
value 0.00185
scoring_system epss
scoring_elements 0.40245
published_at 2026-04-04T12:55:00Z
3
value 0.00185
scoring_system epss
scoring_elements 0.40167
published_at 2026-04-07T12:55:00Z
4
value 0.00185
scoring_system epss
scoring_elements 0.40231
published_at 2026-04-09T12:55:00Z
5
value 0.00185
scoring_system epss
scoring_elements 0.40244
published_at 2026-04-11T12:55:00Z
6
value 0.00185
scoring_system epss
scoring_elements 0.40205
published_at 2026-04-18T12:55:00Z
7
value 0.00185
scoring_system epss
scoring_elements 0.40187
published_at 2026-04-13T12:55:00Z
8
value 0.00185
scoring_system epss
scoring_elements 0.40235
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3550
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3550
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3550
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45360
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45360
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45362
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45362
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45363
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45363
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2240807
reference_id 2240807
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2240807
7
reference_url https://fluidattacks.com/advisories/blondie/
reference_id blondie
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-09-24T15:57:17Z/
url https://fluidattacks.com/advisories/blondie/
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FU2FGUXXK6TMV6R52VRECLC6XCSQQISY/
reference_id FU2FGUXXK6TMV6R52VRECLC6XCSQQISY
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-09-24T15:57:17Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FU2FGUXXK6TMV6R52VRECLC6XCSQQISY/
9
reference_url https://www.mediawiki.org/wiki/MediaWiki/
reference_id MediaWiki
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-09-24T15:57:17Z/
url https://www.mediawiki.org/wiki/MediaWiki/
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2023-3550
risk_score 3.3
exploitability 0.5
weighted_severity 6.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ea7c-xk4h-13fs
67
url VCID-eefm-65rj-pyg2
vulnerability_id VCID-eefm-65rj-pyg2
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44858.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44858.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-44858
reference_id
reference_type
scores
0
value 0.00416
scoring_system epss
scoring_elements 0.61568
published_at 2026-04-01T12:55:00Z
1
value 0.00416
scoring_system epss
scoring_elements 0.61642
published_at 2026-04-02T12:55:00Z
2
value 0.00416
scoring_system epss
scoring_elements 0.61673
published_at 2026-04-04T12:55:00Z
3
value 0.00416
scoring_system epss
scoring_elements 0.61643
published_at 2026-04-07T12:55:00Z
4
value 0.00416
scoring_system epss
scoring_elements 0.61692
published_at 2026-04-08T12:55:00Z
5
value 0.00416
scoring_system epss
scoring_elements 0.61707
published_at 2026-04-09T12:55:00Z
6
value 0.00416
scoring_system epss
scoring_elements 0.61729
published_at 2026-04-11T12:55:00Z
7
value 0.00416
scoring_system epss
scoring_elements 0.61717
published_at 2026-04-12T12:55:00Z
8
value 0.00416
scoring_system epss
scoring_elements 0.61698
published_at 2026-04-13T12:55:00Z
9
value 0.00416
scoring_system epss
scoring_elements 0.61739
published_at 2026-04-16T12:55:00Z
10
value 0.00416
scoring_system epss
scoring_elements 0.61744
published_at 2026-04-18T12:55:00Z
11
value 0.00416
scoring_system epss
scoring_elements 0.61727
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-44858
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44857
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44857
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44858
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44858
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45038
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45038
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2036698
reference_id 2036698
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2036698
6
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
url https://security.gentoo.org/glsa/202305-24
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-44858
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eefm-65rj-pyg2
68
url VCID-eud3-k24q-6ber
vulnerability_id VCID-eud3-k24q-6ber
summary
Multiple vulnerabilities have been found in Firejail, the worst of
    which could result in the arbitrary execution of code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-17368
reference_id
reference_type
scores
0
value 0.0449
scoring_system epss
scoring_elements 0.89064
published_at 2026-04-01T12:55:00Z
1
value 0.0449
scoring_system epss
scoring_elements 0.89073
published_at 2026-04-02T12:55:00Z
2
value 0.0449
scoring_system epss
scoring_elements 0.89088
published_at 2026-04-04T12:55:00Z
3
value 0.0449
scoring_system epss
scoring_elements 0.8909
published_at 2026-04-07T12:55:00Z
4
value 0.0449
scoring_system epss
scoring_elements 0.89108
published_at 2026-04-08T12:55:00Z
5
value 0.0449
scoring_system epss
scoring_elements 0.89113
published_at 2026-04-09T12:55:00Z
6
value 0.0449
scoring_system epss
scoring_elements 0.89124
published_at 2026-04-11T12:55:00Z
7
value 0.0449
scoring_system epss
scoring_elements 0.8912
published_at 2026-04-12T12:55:00Z
8
value 0.0449
scoring_system epss
scoring_elements 0.89118
published_at 2026-04-13T12:55:00Z
9
value 0.0449
scoring_system epss
scoring_elements 0.89132
published_at 2026-04-18T12:55:00Z
10
value 0.0449
scoring_system epss
scoring_elements 0.89128
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-17368
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
9
reference_url https://security.gentoo.org/glsa/202101-02
reference_id GLSA-202101-02
reference_type
scores
url https://security.gentoo.org/glsa/202101-02
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2020-17368
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eud3-k24q-6ber
69
url VCID-fnzm-dxb3-v7hr
vulnerability_id VCID-fnzm-dxb3-v7hr
summary An issue was discovered in the VisualEditor extension in MediaWiki before 1.31.13, and 1.32.x through 1.35.x before 1.35.2. . When using VisualEditor to edit a MediaWiki user page belonging to an existing, but hidden, user, VisualEditor will disclose that the user exists. (It shouldn't because they are hidden.) This is related to ApiVisualEditor.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-30153
reference_id
reference_type
scores
0
value 0.00196
scoring_system epss
scoring_elements 0.41526
published_at 2026-04-01T12:55:00Z
1
value 0.00196
scoring_system epss
scoring_elements 0.41615
published_at 2026-04-02T12:55:00Z
2
value 0.00196
scoring_system epss
scoring_elements 0.41644
published_at 2026-04-04T12:55:00Z
3
value 0.00196
scoring_system epss
scoring_elements 0.4157
published_at 2026-04-07T12:55:00Z
4
value 0.00196
scoring_system epss
scoring_elements 0.4162
published_at 2026-04-08T12:55:00Z
5
value 0.00196
scoring_system epss
scoring_elements 0.4163
published_at 2026-04-09T12:55:00Z
6
value 0.00196
scoring_system epss
scoring_elements 0.41651
published_at 2026-04-11T12:55:00Z
7
value 0.00196
scoring_system epss
scoring_elements 0.41619
published_at 2026-04-12T12:55:00Z
8
value 0.00196
scoring_system epss
scoring_elements 0.41605
published_at 2026-04-13T12:55:00Z
9
value 0.00231
scoring_system epss
scoring_elements 0.46018
published_at 2026-04-16T12:55:00Z
10
value 0.00344
scoring_system epss
scoring_elements 0.57012
published_at 2026-04-21T12:55:00Z
11
value 0.00344
scoring_system epss
scoring_elements 0.57034
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-30153
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30153
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30153
2
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2021-April/094418.html
reference_id 094418.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T16:14:31Z/
url https://lists.wikimedia.org/pipermail/wikitech-l/2021-April/094418.html
3
reference_url https://security.archlinux.org/AVG-1775
reference_id AVG-1775
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1775
4
reference_url https://phabricator.wikimedia.org/T270453
reference_id T270453
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T16:14:31Z/
url https://phabricator.wikimedia.org/T270453
5
reference_url https://lists.wikimedia.org/hyperkitty/list/wikitech-l%40lists.wikimedia.org/message/XYBF5RSTJRMVCP7QBYK7643W75A3KCIY/
reference_id XYBF5RSTJRMVCP7QBYK7643W75A3KCIY
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-06T16:14:31Z/
url https://lists.wikimedia.org/hyperkitty/list/wikitech-l%40lists.wikimedia.org/message/XYBF5RSTJRMVCP7QBYK7643W75A3KCIY/
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-30153
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fnzm-dxb3-v7hr
70
url VCID-fpkf-8mcr-6bee
vulnerability_id VCID-fpkf-8mcr-6bee
summary MediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restrictions by leveraging a call to the UserGetRights function after Session::getAllowedUserRights.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6337
reference_id
reference_type
scores
0
value 0.00339
scoring_system epss
scoring_elements 0.56707
published_at 2026-04-21T12:55:00Z
1
value 0.00339
scoring_system epss
scoring_elements 0.56733
published_at 2026-04-18T12:55:00Z
2
value 0.00339
scoring_system epss
scoring_elements 0.56588
published_at 2026-04-01T12:55:00Z
3
value 0.00339
scoring_system epss
scoring_elements 0.56684
published_at 2026-04-02T12:55:00Z
4
value 0.00339
scoring_system epss
scoring_elements 0.56705
published_at 2026-04-04T12:55:00Z
5
value 0.00339
scoring_system epss
scoring_elements 0.56685
published_at 2026-04-07T12:55:00Z
6
value 0.00339
scoring_system epss
scoring_elements 0.56737
published_at 2026-04-08T12:55:00Z
7
value 0.00339
scoring_system epss
scoring_elements 0.56741
published_at 2026-04-09T12:55:00Z
8
value 0.00339
scoring_system epss
scoring_elements 0.56749
published_at 2026-04-11T12:55:00Z
9
value 0.00339
scoring_system epss
scoring_elements 0.56725
published_at 2026-04-12T12:55:00Z
10
value 0.00339
scoring_system epss
scoring_elements 0.56704
published_at 2026-04-13T12:55:00Z
11
value 0.00339
scoring_system epss
scoring_elements 0.56735
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6337
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6337
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6337
2
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
3
reference_url https://phabricator.wikimedia.org/T139670
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T139670
4
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-6337
reference_id CVE-2016-6337
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:P/A:N
1
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2016-6337
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2016-6337
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fpkf-8mcr-6bee
71
url VCID-fptt-2t1j-8fec
vulnerability_id VCID-fptt-2t1j-8fec
summary Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/ManualLogEntry.Php, includes/recentchanges/RecentChangeFactory.Php, includes/recentchanges/RecentChangeStore.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61639
reference_id
reference_type
scores
0
value 7e-05
scoring_system epss
scoring_elements 0.00496
published_at 2026-04-02T12:55:00Z
1
value 7e-05
scoring_system epss
scoring_elements 0.00491
published_at 2026-04-04T12:55:00Z
2
value 7e-05
scoring_system epss
scoring_elements 0.00489
published_at 2026-04-07T12:55:00Z
3
value 7e-05
scoring_system epss
scoring_elements 0.00487
published_at 2026-04-08T12:55:00Z
4
value 7e-05
scoring_system epss
scoring_elements 0.00485
published_at 2026-04-09T12:55:00Z
5
value 8e-05
scoring_system epss
scoring_elements 0.00678
published_at 2026-04-13T12:55:00Z
6
value 8e-05
scoring_system epss
scoring_elements 0.00716
published_at 2026-04-21T12:55:00Z
7
value 8e-05
scoring_system epss
scoring_elements 0.00685
published_at 2026-04-11T12:55:00Z
8
value 8e-05
scoring_system epss
scoring_elements 0.00677
published_at 2026-04-18T12:55:00Z
9
value 8e-05
scoring_system epss
scoring_elements 0.00671
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61639
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61639
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61639
2
reference_url https://phabricator.wikimedia.org/T280413
reference_id T280413
reference_type
scores
0
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:10:07Z/
url https://phabricator.wikimedia.org/T280413
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-61639
risk_score 0.5
exploitability 0.5
weighted_severity 1.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fptt-2t1j-8fec
72
url VCID-fujm-vb7d-vfhe
vulnerability_id VCID-fujm-vb7d-vfhe
summary The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 allows remote authenticated users to cause a denial of service (disk consumption) via a file upload using one byte chunks.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8002
reference_id
reference_type
scores
0
value 0.00522
scoring_system epss
scoring_elements 0.66897
published_at 2026-04-21T12:55:00Z
1
value 0.00522
scoring_system epss
scoring_elements 0.66795
published_at 2026-04-01T12:55:00Z
2
value 0.00522
scoring_system epss
scoring_elements 0.66833
published_at 2026-04-02T12:55:00Z
3
value 0.00522
scoring_system epss
scoring_elements 0.66859
published_at 2026-04-04T12:55:00Z
4
value 0.00522
scoring_system epss
scoring_elements 0.66831
published_at 2026-04-07T12:55:00Z
5
value 0.00522
scoring_system epss
scoring_elements 0.6688
published_at 2026-04-08T12:55:00Z
6
value 0.00522
scoring_system epss
scoring_elements 0.66893
published_at 2026-04-09T12:55:00Z
7
value 0.00522
scoring_system epss
scoring_elements 0.66913
published_at 2026-04-11T12:55:00Z
8
value 0.00522
scoring_system epss
scoring_elements 0.66899
published_at 2026-04-12T12:55:00Z
9
value 0.00522
scoring_system epss
scoring_elements 0.66867
published_at 2026-04-13T12:55:00Z
10
value 0.00522
scoring_system epss
scoring_elements 0.669
published_at 2026-04-16T12:55:00Z
11
value 0.00522
scoring_system epss
scoring_elements 0.66914
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8002
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8002
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8002
2
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html
3
reference_url https://phabricator.wikimedia.org/T91205
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T91205
4
reference_url http://www.securitytracker.com/id/1034028
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1034028
5
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8002
reference_id CVE-2015-8002
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:N/I:N/A:C
url https://nvd.nist.gov/vuln/detail/CVE-2015-8002
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2015-8002
risk_score 3.0
exploitability 0.5
weighted_severity 6.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fujm-vb7d-vfhe
73
url VCID-fwb3-kxy8-73hz
vulnerability_id VCID-fwb3-kxy8-73hz
summary mediawiki: unable to change visibility of log entries when MediaWiki:Mainpage uses Special:MyLanguage
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35477.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35477.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-35477
reference_id
reference_type
scores
0
value 0.00474
scoring_system epss
scoring_elements 0.64668
published_at 2026-04-01T12:55:00Z
1
value 0.00474
scoring_system epss
scoring_elements 0.6472
published_at 2026-04-02T12:55:00Z
2
value 0.00474
scoring_system epss
scoring_elements 0.64748
published_at 2026-04-04T12:55:00Z
3
value 0.00474
scoring_system epss
scoring_elements 0.64706
published_at 2026-04-07T12:55:00Z
4
value 0.00474
scoring_system epss
scoring_elements 0.64754
published_at 2026-04-08T12:55:00Z
5
value 0.00474
scoring_system epss
scoring_elements 0.64769
published_at 2026-04-09T12:55:00Z
6
value 0.00474
scoring_system epss
scoring_elements 0.64786
published_at 2026-04-11T12:55:00Z
7
value 0.00474
scoring_system epss
scoring_elements 0.64774
published_at 2026-04-12T12:55:00Z
8
value 0.00474
scoring_system epss
scoring_elements 0.64747
published_at 2026-04-13T12:55:00Z
9
value 0.00474
scoring_system epss
scoring_elements 0.64785
published_at 2026-04-16T12:55:00Z
10
value 0.00474
scoring_system epss
scoring_elements 0.64795
published_at 2026-04-18T12:55:00Z
11
value 0.00474
scoring_system epss
scoring_elements 0.64782
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-35477
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35475
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35475
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35477
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35477
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35479
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35479
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35480
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35480
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1909231
reference_id 1909231
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1909231
7
reference_url https://security.archlinux.org/ASA-202101-22
reference_id ASA-202101-22
reference_type
scores
url https://security.archlinux.org/ASA-202101-22
8
reference_url https://security.archlinux.org/AVG-1371
reference_id AVG-1371
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1371
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2020-35477
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fwb3-kxy8-73hz
74
url VCID-gma6-b9cy-kqee
vulnerability_id VCID-gma6-b9cy-kqee
summary
MediaWiki Incorrect Access Control vulnerability
MediaWiki through 1.32.1 has Incorrect Access Control (issue 1 of 3). A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12467
reference_id
reference_type
scores
0
value 0.00298
scoring_system epss
scoring_elements 0.53131
published_at 2026-04-07T12:55:00Z
1
value 0.00298
scoring_system epss
scoring_elements 0.53224
published_at 2026-04-21T12:55:00Z
2
value 0.00298
scoring_system epss
scoring_elements 0.53241
published_at 2026-04-18T12:55:00Z
3
value 0.00298
scoring_system epss
scoring_elements 0.53235
published_at 2026-04-16T12:55:00Z
4
value 0.00298
scoring_system epss
scoring_elements 0.53198
published_at 2026-04-13T12:55:00Z
5
value 0.00298
scoring_system epss
scoring_elements 0.53214
published_at 2026-04-12T12:55:00Z
6
value 0.00298
scoring_system epss
scoring_elements 0.53139
published_at 2026-04-02T12:55:00Z
7
value 0.00298
scoring_system epss
scoring_elements 0.53118
published_at 2026-04-01T12:55:00Z
8
value 0.00298
scoring_system epss
scoring_elements 0.53163
published_at 2026-04-04T12:55:00Z
9
value 0.00298
scoring_system epss
scoring_elements 0.53229
published_at 2026-04-11T12:55:00Z
10
value 0.00298
scoring_system epss
scoring_elements 0.53178
published_at 2026-04-09T12:55:00Z
11
value 0.00298
scoring_system epss
scoring_elements 0.53185
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12467
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
11
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12467.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12467.yaml
12
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
13
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-12467
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-12467
15
reference_url https://phabricator.wikimedia.org/T209794
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T209794
16
reference_url https://seclists.org/bugtraq/2019/Jun/12
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2019/Jun/12
17
reference_url https://www.debian.org/security/2019/dsa-4460
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2019/dsa-4460
18
reference_url https://github.com/advisories/GHSA-6vfg-8ppv-h5hg
reference_id GHSA-6vfg-8ppv-h5hg
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6vfg-8ppv-h5hg
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2019-12467, GHSA-6vfg-8ppv-h5hg
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gma6-b9cy-kqee
75
url VCID-h3d2-nr9e-nqbk
vulnerability_id VCID-h3d2-nr9e-nqbk
summary Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-6926
reference_id
reference_type
scores
0
value 0.00083
scoring_system epss
scoring_elements 0.24479
published_at 2026-04-02T12:55:00Z
1
value 0.00083
scoring_system epss
scoring_elements 0.24424
published_at 2026-04-11T12:55:00Z
2
value 0.00083
scoring_system epss
scoring_elements 0.24382
published_at 2026-04-12T12:55:00Z
3
value 0.00083
scoring_system epss
scoring_elements 0.24326
published_at 2026-04-13T12:55:00Z
4
value 0.00083
scoring_system epss
scoring_elements 0.24343
published_at 2026-04-16T12:55:00Z
5
value 0.00083
scoring_system epss
scoring_elements 0.24332
published_at 2026-04-18T12:55:00Z
6
value 0.00083
scoring_system epss
scoring_elements 0.24513
published_at 2026-04-04T12:55:00Z
7
value 0.00083
scoring_system epss
scoring_elements 0.24296
published_at 2026-04-07T12:55:00Z
8
value 0.00083
scoring_system epss
scoring_elements 0.24363
published_at 2026-04-08T12:55:00Z
9
value 0.00083
scoring_system epss
scoring_elements 0.24407
published_at 2026-04-09T12:55:00Z
10
value 0.0009
scoring_system epss
scoring_elements 0.25501
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-6926
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6926
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6926
2
reference_url https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1165117
reference_id 1165117
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-07-03T17:40:14Z/
url https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1165117
3
reference_url https://phabricator.wikimedia.org/T389010
reference_id T389010
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-07-03T17:40:14Z/
url https://phabricator.wikimedia.org/T389010
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-6926
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h3d2-nr9e-nqbk
76
url VCID-h5xs-ky4t-b7ad
vulnerability_id VCID-h5xs-ky4t-b7ad
summary Cross-site scripting (XSS) vulnerability in the CSS user subpage preview feature in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via the edit box in Special:MyPage/common.css.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6333
reference_id
reference_type
scores
0
value 0.00335
scoring_system epss
scoring_elements 0.56335
published_at 2026-04-21T12:55:00Z
1
value 0.00335
scoring_system epss
scoring_elements 0.56367
published_at 2026-04-18T12:55:00Z
2
value 0.00335
scoring_system epss
scoring_elements 0.56197
published_at 2026-04-01T12:55:00Z
3
value 0.00335
scoring_system epss
scoring_elements 0.56307
published_at 2026-04-02T12:55:00Z
4
value 0.00335
scoring_system epss
scoring_elements 0.56329
published_at 2026-04-04T12:55:00Z
5
value 0.00335
scoring_system epss
scoring_elements 0.5631
published_at 2026-04-07T12:55:00Z
6
value 0.00335
scoring_system epss
scoring_elements 0.56361
published_at 2026-04-08T12:55:00Z
7
value 0.00335
scoring_system epss
scoring_elements 0.56366
published_at 2026-04-16T12:55:00Z
8
value 0.00335
scoring_system epss
scoring_elements 0.56376
published_at 2026-04-11T12:55:00Z
9
value 0.00335
scoring_system epss
scoring_elements 0.56352
published_at 2026-04-12T12:55:00Z
10
value 0.00335
scoring_system epss
scoring_elements 0.56334
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6333
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1369613
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1369613
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6333
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6333
3
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
4
reference_url https://phabricator.wikimedia.org/T133147
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T133147
5
reference_url http://www.securityfocus.com/bid/98053
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/98053
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-6333
reference_id CVE-2016-6333
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:P/A:N
1
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2016-6333
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2016-6333
risk_score 2.8
exploitability 0.5
weighted_severity 5.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h5xs-ky4t-b7ad
77
url VCID-h789-pcxv-kbgd
vulnerability_id VCID-h789-pcxv-kbgd
summary Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fields/HTMLUserTextField.Php. This issue affects MediaWiki: from * through 1.39.12, 1.42.76 1.43.1, 1.44.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-6590
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01796
published_at 2026-04-21T12:55:00Z
1
value 0.00012
scoring_system epss
scoring_elements 0.01706
published_at 2026-04-18T12:55:00Z
2
value 0.00012
scoring_system epss
scoring_elements 0.01527
published_at 2026-04-02T12:55:00Z
3
value 0.00012
scoring_system epss
scoring_elements 0.01531
published_at 2026-04-04T12:55:00Z
4
value 0.00012
scoring_system epss
scoring_elements 0.01534
published_at 2026-04-07T12:55:00Z
5
value 0.00012
scoring_system epss
scoring_elements 0.01538
published_at 2026-04-08T12:55:00Z
6
value 0.00012
scoring_system epss
scoring_elements 0.01541
published_at 2026-04-09T12:55:00Z
7
value 0.00012
scoring_system epss
scoring_elements 0.01727
published_at 2026-04-11T12:55:00Z
8
value 0.00012
scoring_system epss
scoring_elements 0.01717
published_at 2026-04-12T12:55:00Z
9
value 0.00012
scoring_system epss
scoring_elements 0.01716
published_at 2026-04-13T12:55:00Z
10
value 0.00012
scoring_system epss
scoring_elements 0.01705
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-6590
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6590
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6590
2
reference_url https://phabricator.wikimedia.org/T392746
reference_id T392746
reference_type
scores
0
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:11:34Z/
url https://phabricator.wikimedia.org/T392746
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-6590
risk_score 1.4
exploitability 0.5
weighted_severity 2.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h789-pcxv-kbgd
78
url VCID-h8jw-brz8-hkfn
vulnerability_id VCID-h8jw-brz8-hkfn
summary
MediaWiki Cross-site Scripting (XSS) vulnerability
An issue was discovered in MediaWiki 1.34.x before 1.34.3. On Special:Contributions, the NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier. This is vulnerable to a mild XSS if one of those messages is changed to include raw HTML.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25812.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25812.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-25812
reference_id
reference_type
scores
0
value 0.00371
scoring_system epss
scoring_elements 0.58937
published_at 2026-04-21T12:55:00Z
1
value 0.00371
scoring_system epss
scoring_elements 0.58958
published_at 2026-04-18T12:55:00Z
2
value 0.00371
scoring_system epss
scoring_elements 0.58954
published_at 2026-04-16T12:55:00Z
3
value 0.00371
scoring_system epss
scoring_elements 0.5892
published_at 2026-04-13T12:55:00Z
4
value 0.00371
scoring_system epss
scoring_elements 0.58939
published_at 2026-04-12T12:55:00Z
5
value 0.00371
scoring_system epss
scoring_elements 0.58957
published_at 2026-04-11T12:55:00Z
6
value 0.00371
scoring_system epss
scoring_elements 0.58938
published_at 2026-04-09T12:55:00Z
7
value 0.00371
scoring_system epss
scoring_elements 0.58933
published_at 2026-04-08T12:55:00Z
8
value 0.00371
scoring_system epss
scoring_elements 0.58881
published_at 2026-04-07T12:55:00Z
9
value 0.00371
scoring_system epss
scoring_elements 0.58817
published_at 2026-04-01T12:55:00Z
10
value 0.00371
scoring_system epss
scoring_elements 0.58913
published_at 2026-04-04T12:55:00Z
11
value 0.00371
scoring_system epss
scoring_elements 0.58892
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-25812
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
10
reference_url https://gerrit.wikimedia.org/g/mediawiki/core/+/ad4a3ba45fb955aa8c0eb3c83809b16b40a498b9/includes/specials/SpecialContributions.php#592
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://gerrit.wikimedia.org/g/mediawiki/core/+/ad4a3ba45fb955aa8c0eb3c83809b16b40a498b9/includes/specials/SpecialContributions.php#592
11
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25812.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25812.yaml
12
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
14
reference_url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
15
reference_url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-25812
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-25812
17
reference_url https://phabricator.wikimedia.org/T255918
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T255918
18
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1903767
reference_id 1903767
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1903767
19
reference_url https://github.com/advisories/GHSA-rj9p-8jxj-2ch4
reference_id GHSA-rj9p-8jxj-2ch4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rj9p-8jxj-2ch4
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2020-25812, GHSA-rj9p-8jxj-2ch4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h8jw-brz8-hkfn
79
url VCID-j1bz-4bex-4key
vulnerability_id VCID-j1bz-4bex-4key
summary mediawiki: messages userrights-expiry-current and userrights-expiry-none can contain raw html
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35475.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35475.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-35475
reference_id
reference_type
scores
0
value 0.00592
scoring_system epss
scoring_elements 0.69172
published_at 2026-04-01T12:55:00Z
1
value 0.00592
scoring_system epss
scoring_elements 0.69188
published_at 2026-04-02T12:55:00Z
2
value 0.00592
scoring_system epss
scoring_elements 0.69209
published_at 2026-04-04T12:55:00Z
3
value 0.00592
scoring_system epss
scoring_elements 0.6919
published_at 2026-04-07T12:55:00Z
4
value 0.00592
scoring_system epss
scoring_elements 0.6924
published_at 2026-04-08T12:55:00Z
5
value 0.00592
scoring_system epss
scoring_elements 0.69259
published_at 2026-04-09T12:55:00Z
6
value 0.00592
scoring_system epss
scoring_elements 0.69281
published_at 2026-04-11T12:55:00Z
7
value 0.00592
scoring_system epss
scoring_elements 0.69266
published_at 2026-04-12T12:55:00Z
8
value 0.00592
scoring_system epss
scoring_elements 0.69238
published_at 2026-04-13T12:55:00Z
9
value 0.00592
scoring_system epss
scoring_elements 0.69277
published_at 2026-04-16T12:55:00Z
10
value 0.00592
scoring_system epss
scoring_elements 0.69285
published_at 2026-04-18T12:55:00Z
11
value 0.00592
scoring_system epss
scoring_elements 0.69265
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-35475
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35475
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35475
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35477
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35477
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35479
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35479
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35480
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35480
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1909224
reference_id 1909224
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1909224
7
reference_url https://security.archlinux.org/ASA-202101-22
reference_id ASA-202101-22
reference_type
scores
url https://security.archlinux.org/ASA-202101-22
8
reference_url https://security.archlinux.org/AVG-1371
reference_id AVG-1371
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1371
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2020-35475
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j1bz-4bex-4key
80
url VCID-jm7q-2w3j-buhh
vulnerability_id VCID-jm7q-2w3j-buhh
summary
MediaWiki Denial of Service vulnerability
An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and RequestTimeoutException) when querying pages redirected to other variants with redirects and converttitles set.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-45363
reference_id
reference_type
scores
0
value 0.11025
scoring_system epss
scoring_elements 0.93415
published_at 2026-04-07T12:55:00Z
1
value 0.11025
scoring_system epss
scoring_elements 0.93464
published_at 2026-04-21T12:55:00Z
2
value 0.11025
scoring_system epss
scoring_elements 0.93458
published_at 2026-04-18T12:55:00Z
3
value 0.11025
scoring_system epss
scoring_elements 0.93407
published_at 2026-04-02T12:55:00Z
4
value 0.11025
scoring_system epss
scoring_elements 0.93452
published_at 2026-04-16T12:55:00Z
5
value 0.11025
scoring_system epss
scoring_elements 0.93433
published_at 2026-04-13T12:55:00Z
6
value 0.11025
scoring_system epss
scoring_elements 0.93432
published_at 2026-04-12T12:55:00Z
7
value 0.11025
scoring_system epss
scoring_elements 0.93427
published_at 2026-04-09T12:55:00Z
8
value 0.11025
scoring_system epss
scoring_elements 0.93424
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-45363
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3550
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3550
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45360
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45360
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45362
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45362
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45363
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45363
5
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
6
reference_url https://github.com/wikimedia/mediawiki/commit/24c3ef2474c6daa20ed48168d46196a55346dfd8
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki/commit/24c3ef2474c6daa20ed48168d46196a55346dfd8
7
reference_url https://lists.debian.org/debian-lts-announce/2023/11/msg00027.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:28:57Z/
url https://lists.debian.org/debian-lts-announce/2023/11/msg00027.html
8
reference_url https://phabricator.wikimedia.org/T333050
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:28:57Z/
url https://phabricator.wikimedia.org/T333050
9
reference_url https://www.debian.org/security/2023/dsa-5520
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:28:57Z/
url https://www.debian.org/security/2023/dsa-5520
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-45363
reference_id CVE-2023-45363
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-45363
11
reference_url https://github.com/advisories/GHSA-w5fx-cx7f-6vr9
reference_id GHSA-w5fx-cx7f-6vr9
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w5fx-cx7f-6vr9
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2023-45363, GHSA-w5fx-cx7f-6vr9
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jm7q-2w3j-buhh
81
url VCID-jwkd-wdus-6ygg
vulnerability_id VCID-jwkd-wdus-6ygg
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-47927.json
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-47927.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-47927
reference_id
reference_type
scores
0
value 0.00052
scoring_system epss
scoring_elements 0.1637
published_at 2026-04-02T12:55:00Z
1
value 0.00052
scoring_system epss
scoring_elements 0.16248
published_at 2026-04-21T12:55:00Z
2
value 0.00052
scoring_system epss
scoring_elements 0.16432
published_at 2026-04-04T12:55:00Z
3
value 0.00052
scoring_system epss
scoring_elements 0.16229
published_at 2026-04-07T12:55:00Z
4
value 0.00052
scoring_system epss
scoring_elements 0.16315
published_at 2026-04-08T12:55:00Z
5
value 0.00052
scoring_system epss
scoring_elements 0.16379
published_at 2026-04-09T12:55:00Z
6
value 0.00052
scoring_system epss
scoring_elements 0.16362
published_at 2026-04-11T12:55:00Z
7
value 0.00052
scoring_system epss
scoring_elements 0.16323
published_at 2026-04-12T12:55:00Z
8
value 0.00052
scoring_system epss
scoring_elements 0.16255
published_at 2026-04-13T12:55:00Z
9
value 0.00052
scoring_system epss
scoring_elements 0.16191
published_at 2026-04-16T12:55:00Z
10
value 0.00052
scoring_system epss
scoring_elements 0.1621
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-47927
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47927
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47927
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2160625
reference_id 2160625
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2160625
4
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AP65YEN762IBNQPOYGUVLTQIDLM5XD2A/
reference_id AP65YEN762IBNQPOYGUVLTQIDLM5XD2A
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-08T15:40:18Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AP65YEN762IBNQPOYGUVLTQIDLM5XD2A/
5
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-08T15:40:18Z/
url https://security.gentoo.org/glsa/202305-24
6
reference_url https://lists.debian.org/debian-lts-announce/2023/07/msg00011.html
reference_id msg00011.html
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-08T15:40:18Z/
url https://lists.debian.org/debian-lts-announce/2023/07/msg00011.html
7
reference_url https://phabricator.wikimedia.org/T322637
reference_id T322637
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-08T15:40:18Z/
url https://phabricator.wikimedia.org/T322637
8
reference_url https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce%40lists.wikimedia.org/thread/UEMW64LVEH3BEXCJV43CVS6XPYURKWU3/
reference_id UEMW64LVEH3BEXCJV43CVS6XPYURKWU3
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-08T15:40:18Z/
url https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce%40lists.wikimedia.org/thread/UEMW64LVEH3BEXCJV43CVS6XPYURKWU3/
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2022-47927
risk_score 2.8
exploitability 0.5
weighted_severity 5.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jwkd-wdus-6ygg
82
url VCID-k1f5-msra-4kam
vulnerability_id VCID-k1f5-msra-4kam
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which could result in a Denial of Service condition.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30155.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30155.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-30155
reference_id
reference_type
scores
0
value 0.00318
scoring_system epss
scoring_elements 0.5488
published_at 2026-04-21T12:55:00Z
1
value 0.00318
scoring_system epss
scoring_elements 0.54898
published_at 2026-04-16T12:55:00Z
2
value 0.00318
scoring_system epss
scoring_elements 0.54901
published_at 2026-04-18T12:55:00Z
3
value 0.00447
scoring_system epss
scoring_elements 0.63482
published_at 2026-04-02T12:55:00Z
4
value 0.00447
scoring_system epss
scoring_elements 0.63473
published_at 2026-04-07T12:55:00Z
5
value 0.00447
scoring_system epss
scoring_elements 0.63525
published_at 2026-04-08T12:55:00Z
6
value 0.00447
scoring_system epss
scoring_elements 0.63542
published_at 2026-04-09T12:55:00Z
7
value 0.00447
scoring_system epss
scoring_elements 0.63558
published_at 2026-04-11T12:55:00Z
8
value 0.00447
scoring_system epss
scoring_elements 0.63543
published_at 2026-04-12T12:55:00Z
9
value 0.00447
scoring_system epss
scoring_elements 0.63422
published_at 2026-04-01T12:55:00Z
10
value 0.00447
scoring_system epss
scoring_elements 0.63509
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-30155
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1948641
reference_id 1948641
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1948641
11
reference_url https://security.archlinux.org/AVG-1775
reference_id AVG-1775
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1775
12
reference_url https://security.gentoo.org/glsa/202107-40
reference_id GLSA-202107-40
reference_type
scores
url https://security.gentoo.org/glsa/202107-40
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-30155
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k1f5-msra-4kam
83
url VCID-k6ry-6a7f-eqd7
vulnerability_id VCID-k6ry-6a7f-eqd7
summary mediawiki: Improper URL sanitization in Spam blacklist
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0370.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0370.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-0370
reference_id
reference_type
scores
0
value 0.00236
scoring_system epss
scoring_elements 0.46477
published_at 2026-04-01T12:55:00Z
1
value 0.00236
scoring_system epss
scoring_elements 0.46515
published_at 2026-04-02T12:55:00Z
2
value 0.00236
scoring_system epss
scoring_elements 0.46535
published_at 2026-04-04T12:55:00Z
3
value 0.00236
scoring_system epss
scoring_elements 0.46483
published_at 2026-04-07T12:55:00Z
4
value 0.00236
scoring_system epss
scoring_elements 0.46538
published_at 2026-04-09T12:55:00Z
5
value 0.00236
scoring_system epss
scoring_elements 0.46562
published_at 2026-04-11T12:55:00Z
6
value 0.00236
scoring_system epss
scoring_elements 0.46534
published_at 2026-04-12T12:55:00Z
7
value 0.00236
scoring_system epss
scoring_elements 0.46543
published_at 2026-04-21T12:55:00Z
8
value 0.00236
scoring_system epss
scoring_elements 0.46599
published_at 2026-04-16T12:55:00Z
9
value 0.00236
scoring_system epss
scoring_elements 0.46596
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-0370
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0370
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0370
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1569804
reference_id 1569804
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1569804
4
reference_url https://security.archlinux.org/ASA-201704-3
reference_id ASA-201704-3
reference_type
scores
url https://security.archlinux.org/ASA-201704-3
5
reference_url https://security.archlinux.org/AVG-236
reference_id AVG-236
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-236
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2017-0370
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k6ry-6a7f-eqd7
84
url VCID-k7qb-7hbj-1qc2
vulnerability_id VCID-k7qb-7hbj-1qc2
summary MediaWiki: MediaWiki: Cross-site Scripting vulnerability via improper input neutralization
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-6594.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-6594.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-6594
reference_id
reference_type
scores
0
value 6e-05
scoring_system epss
scoring_elements 0.00317
published_at 2026-04-02T12:55:00Z
1
value 6e-05
scoring_system epss
scoring_elements 0.0045
published_at 2026-04-21T12:55:00Z
2
value 6e-05
scoring_system epss
scoring_elements 0.00423
published_at 2026-04-12T12:55:00Z
3
value 6e-05
scoring_system epss
scoring_elements 0.00422
published_at 2026-04-18T12:55:00Z
4
value 6e-05
scoring_system epss
scoring_elements 0.00418
published_at 2026-04-16T12:55:00Z
5
value 6e-05
scoring_system epss
scoring_elements 0.00316
published_at 2026-04-04T12:55:00Z
6
value 6e-05
scoring_system epss
scoring_elements 0.00307
published_at 2026-04-07T12:55:00Z
7
value 6e-05
scoring_system epss
scoring_elements 0.00305
published_at 2026-04-09T12:55:00Z
8
value 6e-05
scoring_system epss
scoring_elements 0.00428
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-6594
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6594
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6594
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2436122
reference_id 2436122
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2436122
4
reference_url https://phabricator.wikimedia.org/T395063
reference_id T395063
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
1
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T19:57:15Z/
url https://phabricator.wikimedia.org/T395063
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-6594
risk_score 3.6
exploitability 0.5
weighted_severity 7.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k7qb-7hbj-1qc2
85
url VCID-kjp3-cs2f-t7b4
vulnerability_id VCID-kjp3-cs2f-t7b4
summary
MediaWiki Cross-site Scripting (XSS)
Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12471
reference_id
reference_type
scores
0
value 0.00359
scoring_system epss
scoring_elements 0.58044
published_at 2026-04-07T12:55:00Z
1
value 0.00359
scoring_system epss
scoring_elements 0.58082
published_at 2026-04-21T12:55:00Z
2
value 0.00359
scoring_system epss
scoring_elements 0.58107
published_at 2026-04-18T12:55:00Z
3
value 0.00359
scoring_system epss
scoring_elements 0.58106
published_at 2026-04-16T12:55:00Z
4
value 0.00359
scoring_system epss
scoring_elements 0.58075
published_at 2026-04-13T12:55:00Z
5
value 0.00359
scoring_system epss
scoring_elements 0.58095
published_at 2026-04-12T12:55:00Z
6
value 0.00359
scoring_system epss
scoring_elements 0.58048
published_at 2026-04-02T12:55:00Z
7
value 0.00359
scoring_system epss
scoring_elements 0.57963
published_at 2026-04-01T12:55:00Z
8
value 0.00359
scoring_system epss
scoring_elements 0.5807
published_at 2026-04-04T12:55:00Z
9
value 0.00359
scoring_system epss
scoring_elements 0.58118
published_at 2026-04-11T12:55:00Z
10
value 0.00359
scoring_system epss
scoring_elements 0.58102
published_at 2026-04-09T12:55:00Z
11
value 0.00359
scoring_system epss
scoring_elements 0.58099
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12471
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
11
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12471.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12471.yaml
12
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
13
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-12471
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-12471
15
reference_url https://phabricator.wikimedia.org/T207603
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T207603
16
reference_url https://seclists.org/bugtraq/2019/Jun/12
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2019/Jun/12
17
reference_url https://www.debian.org/security/2019/dsa-4460
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2019/dsa-4460
18
reference_url https://github.com/advisories/GHSA-2rm7-xxx8-35jh
reference_id GHSA-2rm7-xxx8-35jh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2rm7-xxx8-35jh
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2019-12471, GHSA-2rm7-xxx8-35jh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kjp3-cs2f-t7b4
86
url VCID-m1j5-3ecf-dffj
vulnerability_id VCID-m1j5-3ecf-dffj
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28202.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28202.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-28202
reference_id
reference_type
scores
0
value 0.00585
scoring_system epss
scoring_elements 0.69072
published_at 2026-04-21T12:55:00Z
1
value 0.00585
scoring_system epss
scoring_elements 0.69088
published_at 2026-04-11T12:55:00Z
2
value 0.00585
scoring_system epss
scoring_elements 0.69073
published_at 2026-04-12T12:55:00Z
3
value 0.00585
scoring_system epss
scoring_elements 0.69043
published_at 2026-04-13T12:55:00Z
4
value 0.00585
scoring_system epss
scoring_elements 0.69083
published_at 2026-04-16T12:55:00Z
5
value 0.00585
scoring_system epss
scoring_elements 0.69092
published_at 2026-04-18T12:55:00Z
6
value 0.00715
scoring_system epss
scoring_elements 0.72322
published_at 2026-04-02T12:55:00Z
7
value 0.00715
scoring_system epss
scoring_elements 0.7234
published_at 2026-04-04T12:55:00Z
8
value 0.00715
scoring_system epss
scoring_elements 0.72317
published_at 2026-04-07T12:55:00Z
9
value 0.00715
scoring_system epss
scoring_elements 0.72356
published_at 2026-04-08T12:55:00Z
10
value 0.00715
scoring_system epss
scoring_elements 0.72368
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-28202
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
17
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2074123
reference_id 2074123
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2074123
18
reference_url https://security.archlinux.org/AVG-2677
reference_id AVG-2677
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2677
19
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
url https://security.gentoo.org/glsa/202305-24
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2022-28202
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m1j5-3ecf-dffj
87
url VCID-m1xy-yucr-dqfs
vulnerability_id VCID-m1xy-yucr-dqfs
summary Vulnerability in Wikimedia Foundation ConfirmEdit. This vulnerability is associated with program files includes/FancyCaptcha/ApiFancyCaptchaReload.Php. This issue affects ConfirmEdit: *.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61635
reference_id
reference_type
scores
0
value 0.00016
scoring_system epss
scoring_elements 0.03646
published_at 2026-04-02T12:55:00Z
1
value 0.00016
scoring_system epss
scoring_elements 0.03661
published_at 2026-04-04T12:55:00Z
2
value 0.00016
scoring_system epss
scoring_elements 0.03672
published_at 2026-04-07T12:55:00Z
3
value 0.00016
scoring_system epss
scoring_elements 0.03675
published_at 2026-04-08T12:55:00Z
4
value 0.00016
scoring_system epss
scoring_elements 0.03696
published_at 2026-04-09T12:55:00Z
5
value 0.00017
scoring_system epss
scoring_elements 0.03948
published_at 2026-04-18T12:55:00Z
6
value 0.00017
scoring_system epss
scoring_elements 0.0407
published_at 2026-04-21T12:55:00Z
7
value 0.00017
scoring_system epss
scoring_elements 0.04001
published_at 2026-04-11T12:55:00Z
8
value 0.00017
scoring_system epss
scoring_elements 0.03986
published_at 2026-04-12T12:55:00Z
9
value 0.00017
scoring_system epss
scoring_elements 0.03956
published_at 2026-04-13T12:55:00Z
10
value 0.00017
scoring_system epss
scoring_elements 0.03936
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61635
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61635
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61635
2
reference_url https://phabricator.wikimedia.org/T355073
reference_id T355073
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/AU:Y/RE:M/U:Amber
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:13:27Z/
url https://phabricator.wikimedia.org/T355073
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-61635
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m1xy-yucr-dqfs
88
url VCID-m7uw-sa5j-u3bw
vulnerability_id VCID-m7uw-sa5j-u3bw
summary Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.JqueryMsg/mediawiki.JqueryMsg.Js. This issue affects MediaWiki: from * before 1.39.16, 1.43.6, 1.44.3, 1.45.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67481
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01314
published_at 2026-04-11T12:55:00Z
1
value 0.00013
scoring_system epss
scoring_elements 0.01999
published_at 2026-04-21T12:55:00Z
2
value 0.00013
scoring_system epss
scoring_elements 0.01915
published_at 2026-04-18T12:55:00Z
3
value 0.00013
scoring_system epss
scoring_elements 0.01941
published_at 2026-04-12T12:55:00Z
4
value 0.00013
scoring_system epss
scoring_elements 0.01935
published_at 2026-04-13T12:55:00Z
5
value 0.00021
scoring_system epss
scoring_elements 0.05791
published_at 2026-04-09T12:55:00Z
6
value 0.00021
scoring_system epss
scoring_elements 0.0573
published_at 2026-04-04T12:55:00Z
7
value 0.00021
scoring_system epss
scoring_elements 0.05726
published_at 2026-04-07T12:55:00Z
8
value 0.00021
scoring_system epss
scoring_elements 0.05765
published_at 2026-04-08T12:55:00Z
9
value 0.00021
scoring_system epss
scoring_elements 0.05689
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67481
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67481
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67481
2
reference_url https://phabricator.wikimedia.org/T251032
reference_id T251032
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:26:13Z/
url https://phabricator.wikimedia.org/T251032
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-67481
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m7uw-sa5j-u3bw
89
url VCID-mbs4-gs37-1fh5
vulnerability_id VCID-mbs4-gs37-1fh5
summary Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/RecentChanges/EnhancedChangesList.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61646
reference_id
reference_type
scores
0
value 6e-05
scoring_system epss
scoring_elements 0.00396
published_at 2026-04-04T12:55:00Z
1
value 6e-05
scoring_system epss
scoring_elements 0.00385
published_at 2026-04-07T12:55:00Z
2
value 6e-05
scoring_system epss
scoring_elements 0.00382
published_at 2026-04-11T12:55:00Z
3
value 6e-05
scoring_system epss
scoring_elements 0.00383
published_at 2026-04-09T12:55:00Z
4
value 7e-05
scoring_system epss
scoring_elements 0.00548
published_at 2026-04-13T12:55:00Z
5
value 7e-05
scoring_system epss
scoring_elements 0.00587
published_at 2026-04-21T12:55:00Z
6
value 7e-05
scoring_system epss
scoring_elements 0.00547
published_at 2026-04-12T12:55:00Z
7
value 7e-05
scoring_system epss
scoring_elements 0.0055
published_at 2026-04-18T12:55:00Z
8
value 7e-05
scoring_system epss
scoring_elements 0.00545
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61646
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61646
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61646
2
reference_url https://phabricator.wikimedia.org/T398706
reference_id T398706
reference_type
scores
0
value 1.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:04:40Z/
url https://phabricator.wikimedia.org/T398706
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-61646
risk_score 0.3
exploitability 0.5
weighted_severity 0.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mbs4-gs37-1fh5
90
url VCID-mzd9-bu4b-wfar
vulnerability_id VCID-mzd9-bu4b-wfar
summary The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-7444
reference_id
reference_type
scores
0
value 0.00451
scoring_system epss
scoring_elements 0.63607
published_at 2026-04-01T12:55:00Z
1
value 0.00451
scoring_system epss
scoring_elements 0.63666
published_at 2026-04-02T12:55:00Z
2
value 0.00451
scoring_system epss
scoring_elements 0.63692
published_at 2026-04-04T12:55:00Z
3
value 0.00451
scoring_system epss
scoring_elements 0.63651
published_at 2026-04-07T12:55:00Z
4
value 0.00451
scoring_system epss
scoring_elements 0.63703
published_at 2026-04-08T12:55:00Z
5
value 0.00451
scoring_system epss
scoring_elements 0.6372
published_at 2026-04-09T12:55:00Z
6
value 0.00451
scoring_system epss
scoring_elements 0.63734
published_at 2026-04-11T12:55:00Z
7
value 0.00451
scoring_system epss
scoring_elements 0.63719
published_at 2026-04-12T12:55:00Z
8
value 0.00451
scoring_system epss
scoring_elements 0.63686
published_at 2026-04-13T12:55:00Z
9
value 0.00451
scoring_system epss
scoring_elements 0.63721
published_at 2026-04-16T12:55:00Z
10
value 0.00451
scoring_system epss
scoring_elements 0.63731
published_at 2026-04-18T12:55:00Z
11
value 0.00451
scoring_system epss
scoring_elements 0.63715
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-7444
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7444
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7444
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799096
reference_id 799096
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799096
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2013-7444
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mzd9-bu4b-wfar
91
url VCID-nqg1-1fyx-ruf9
vulnerability_id VCID-nqg1-1fyx-ruf9
summary mediawiki: redirects to any interwiki link in special search
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0364.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0364.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-0364
reference_id
reference_type
scores
0
value 0.00205
scoring_system epss
scoring_elements 0.42617
published_at 2026-04-01T12:55:00Z
1
value 0.00205
scoring_system epss
scoring_elements 0.42687
published_at 2026-04-13T12:55:00Z
2
value 0.00205
scoring_system epss
scoring_elements 0.42715
published_at 2026-04-04T12:55:00Z
3
value 0.00205
scoring_system epss
scoring_elements 0.42655
published_at 2026-04-07T12:55:00Z
4
value 0.00205
scoring_system epss
scoring_elements 0.42706
published_at 2026-04-08T12:55:00Z
5
value 0.00205
scoring_system epss
scoring_elements 0.42719
published_at 2026-04-09T12:55:00Z
6
value 0.00205
scoring_system epss
scoring_elements 0.4274
published_at 2026-04-11T12:55:00Z
7
value 0.00205
scoring_system epss
scoring_elements 0.42704
published_at 2026-04-12T12:55:00Z
8
value 0.00205
scoring_system epss
scoring_elements 0.42749
published_at 2026-04-16T12:55:00Z
9
value 0.00205
scoring_system epss
scoring_elements 0.42737
published_at 2026-04-18T12:55:00Z
10
value 0.00205
scoring_system epss
scoring_elements 0.42674
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-0364
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0364
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0364
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1569779
reference_id 1569779
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1569779
4
reference_url https://security.archlinux.org/ASA-201704-3
reference_id ASA-201704-3
reference_type
scores
url https://security.archlinux.org/ASA-201704-3
5
reference_url https://security.archlinux.org/AVG-236
reference_id AVG-236
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-236
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2017-0364
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nqg1-1fyx-ruf9
92
url VCID-nre7-4fpc-9keb
vulnerability_id VCID-nre7-4fpc-9keb
summary MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote authenticated users with undelete permissions to bypass intended suppressrevision and deleterevision restrictions and remove the revision deletion status of arbitrary file revisions by using Special:Undelete.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6336
reference_id
reference_type
scores
0
value 0.00105
scoring_system epss
scoring_elements 0.28516
published_at 2026-04-21T12:55:00Z
1
value 0.00105
scoring_system epss
scoring_elements 0.28564
published_at 2026-04-18T12:55:00Z
2
value 0.00105
scoring_system epss
scoring_elements 0.28615
published_at 2026-04-01T12:55:00Z
3
value 0.00105
scoring_system epss
scoring_elements 0.28698
published_at 2026-04-02T12:55:00Z
4
value 0.00105
scoring_system epss
scoring_elements 0.28746
published_at 2026-04-04T12:55:00Z
5
value 0.00105
scoring_system epss
scoring_elements 0.28553
published_at 2026-04-07T12:55:00Z
6
value 0.00105
scoring_system epss
scoring_elements 0.28618
published_at 2026-04-08T12:55:00Z
7
value 0.00105
scoring_system epss
scoring_elements 0.28658
published_at 2026-04-09T12:55:00Z
8
value 0.00105
scoring_system epss
scoring_elements 0.2866
published_at 2026-04-11T12:55:00Z
9
value 0.00105
scoring_system epss
scoring_elements 0.28616
published_at 2026-04-12T12:55:00Z
10
value 0.00105
scoring_system epss
scoring_elements 0.28568
published_at 2026-04-13T12:55:00Z
11
value 0.00105
scoring_system epss
scoring_elements 0.28588
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6336
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1369613
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1369613
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6336
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6336
3
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
4
reference_url https://phabricator.wikimedia.org/T132926
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T132926
5
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-6336
reference_id CVE-2016-6336
reference_type
scores
0
value 4.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:N/I:P/A:N
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2016-6336
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2016-6336
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nre7-4fpc-9keb
93
url VCID-nsd6-kt5p-w7fe
vulnerability_id VCID-nsd6-kt5p-w7fe
summary Cross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1, when is configured with a relative URL, allows remote authenticated users to inject arbitrary web script or HTML via wikitext, as demonstrated by a wikilink to a page named "javascript:alert('XSS!')."
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8622
reference_id
reference_type
scores
0
value 0.00302
scoring_system epss
scoring_elements 0.53589
published_at 2026-04-21T12:55:00Z
1
value 0.00302
scoring_system epss
scoring_elements 0.53607
published_at 2026-04-18T12:55:00Z
2
value 0.00302
scoring_system epss
scoring_elements 0.53487
published_at 2026-04-01T12:55:00Z
3
value 0.00302
scoring_system epss
scoring_elements 0.53511
published_at 2026-04-02T12:55:00Z
4
value 0.00302
scoring_system epss
scoring_elements 0.53536
published_at 2026-04-04T12:55:00Z
5
value 0.00302
scoring_system epss
scoring_elements 0.53505
published_at 2026-04-07T12:55:00Z
6
value 0.00302
scoring_system epss
scoring_elements 0.53555
published_at 2026-04-08T12:55:00Z
7
value 0.00302
scoring_system epss
scoring_elements 0.53551
published_at 2026-04-09T12:55:00Z
8
value 0.00302
scoring_system epss
scoring_elements 0.53601
published_at 2026-04-16T12:55:00Z
9
value 0.00302
scoring_system epss
scoring_elements 0.53583
published_at 2026-04-12T12:55:00Z
10
value 0.00302
scoring_system epss
scoring_elements 0.53565
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8622
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8622
2
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html
3
reference_url https://phabricator.wikimedia.org/T117899
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T117899
4
reference_url http://www.openwall.com/lists/oss-security/2015/12/21/8
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/12/21/8
5
reference_url http://www.openwall.com/lists/oss-security/2015/12/23/7
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/12/23/7
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8622
reference_id CVE-2015-8622
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:P/A:N
1
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2015-8622
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2015-8622
risk_score 2.8
exploitability 0.5
weighted_severity 5.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nsd6-kt5p-w7fe
94
url VCID-nwsr-ruca-2kha
vulnerability_id VCID-nwsr-ruca-2kha
summary
Fix failure to strip Authorization header on HTTP downgrade
### Impact

`Authorization` headers on requests are sensitive information. On making a request using the `https` scheme to a server which responds with a redirect to a URI with the `http` scheme, we should not forward the `Authorization` header on. This is much the same as to how we don't forward on the header if the host changes. Prior to this fix, `https` to `http` downgrades did not result in the `Authorization` header being removed, only changes to the host.

### Patches

Affected Guzzle 7 users should upgrade to Guzzle 7.4.4 as soon as possible. Affected users using any earlier series of Guzzle should upgrade to Guzzle 6.5.7 or 7.4.4.

### Workarounds

An alternative approach would be to use your own redirect middleware, rather than ours, if you are unable to upgrade. If you do not require or expect redirects to be followed, one should simply disable redirects all together.

### References

* [RFC9110 Section 15.4](https://www.rfc-editor.org/rfc/rfc9110.html#name-redirection-3xx)

### For more information

If you have any questions or comments about this advisory, please get in touch with us in `#guzzle` on the [PHP HTTP Slack](https://php-http.slack.com/). Do not report additional security advisories in that public channel, however - please follow our [vulnerability reporting process](https://github.com/guzzle/guzzle/security/policy).
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-31043
reference_id
reference_type
scores
0
value 0.01454
scoring_system epss
scoring_elements 0.80753
published_at 2026-04-02T12:55:00Z
1
value 0.01454
scoring_system epss
scoring_elements 0.80841
published_at 2026-04-21T12:55:00Z
2
value 0.01454
scoring_system epss
scoring_elements 0.80838
published_at 2026-04-16T12:55:00Z
3
value 0.01454
scoring_system epss
scoring_elements 0.80801
published_at 2026-04-13T12:55:00Z
4
value 0.01454
scoring_system epss
scoring_elements 0.80809
published_at 2026-04-12T12:55:00Z
5
value 0.01454
scoring_system epss
scoring_elements 0.80824
published_at 2026-04-11T12:55:00Z
6
value 0.01454
scoring_system epss
scoring_elements 0.80807
published_at 2026-04-09T12:55:00Z
7
value 0.01454
scoring_system epss
scoring_elements 0.80799
published_at 2026-04-08T12:55:00Z
8
value 0.01454
scoring_system epss
scoring_elements 0.80771
published_at 2026-04-07T12:55:00Z
9
value 0.01454
scoring_system epss
scoring_elements 0.80774
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-31043
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
16
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2022-31043.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2022-31043.yaml
17
reference_url https://github.com/guzzle/guzzle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/guzzle/guzzle
18
reference_url https://github.com/guzzle/guzzle/commit/e3ff079b22820c2029d4c2a87796b6a0b8716ad8
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:54:28Z/
url https://github.com/guzzle/guzzle/commit/e3ff079b22820c2029d4c2a87796b6a0b8716ad8
19
reference_url https://github.com/guzzle/guzzle/security/advisories/GHSA-w248-ffj2-4v5q
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:54:28Z/
url https://github.com/guzzle/guzzle/security/advisories/GHSA-w248-ffj2-4v5q
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-31043
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-31043
21
reference_url https://www.debian.org/security/2022/dsa-5246
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:54:28Z/
url https://www.debian.org/security/2022/dsa-5246
22
reference_url https://www.drupal.org/sa-core-2022-011
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:54:28Z/
url https://www.drupal.org/sa-core-2022-011
23
reference_url https://www.rfc-editor.org/rfc/rfc9110.html#name-redirection-3xx
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:54:28Z/
url https://www.rfc-editor.org/rfc/rfc9110.html#name-redirection-3xx
24
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012821
reference_id 1012821
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012821
25
reference_url https://security.archlinux.org/AVG-2823
reference_id AVG-2823
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2823
26
reference_url https://github.com/advisories/GHSA-w248-ffj2-4v5q
reference_id GHSA-w248-ffj2-4v5q
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w248-ffj2-4v5q
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2022-31043, GHSA-w248-ffj2-4v5q
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nwsr-ruca-2kha
95
url VCID-pm3s-z5ap-qqay
vulnerability_id VCID-pm3s-z5ap-qqay
summary MediaWiki: MediaWiki: Arbitrary code execution via Cross-site Scripting (XSS)
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61640.json
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61640.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61640
reference_id
reference_type
scores
0
value 5e-05
scoring_system epss
scoring_elements 0.00267
published_at 2026-04-04T12:55:00Z
1
value 5e-05
scoring_system epss
scoring_elements 0.00259
published_at 2026-04-09T12:55:00Z
2
value 5e-05
scoring_system epss
scoring_elements 0.00263
published_at 2026-04-07T12:55:00Z
3
value 5e-05
scoring_system epss
scoring_elements 0.00261
published_at 2026-04-08T12:55:00Z
4
value 6e-05
scoring_system epss
scoring_elements 0.00347
published_at 2026-04-18T12:55:00Z
5
value 6e-05
scoring_system epss
scoring_elements 0.00343
published_at 2026-04-16T12:55:00Z
6
value 6e-05
scoring_system epss
scoring_elements 0.0037
published_at 2026-04-21T12:55:00Z
7
value 6e-05
scoring_system epss
scoring_elements 0.00353
published_at 2026-04-11T12:55:00Z
8
value 6e-05
scoring_system epss
scoring_elements 0.0035
published_at 2026-04-12T12:55:00Z
9
value 6e-05
scoring_system epss
scoring_elements 0.00348
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61640
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61640
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61640
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2436106
reference_id 2436106
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2436106
4
reference_url https://phabricator.wikimedia.org/T402075
reference_id T402075
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:09:45Z/
url https://phabricator.wikimedia.org/T402075
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-61640
risk_score 2.0
exploitability 0.5
weighted_severity 4.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pm3s-z5ap-qqay
96
url VCID-pm5t-23j4-6yh6
vulnerability_id VCID-pm5t-23j4-6yh6
summary
MediaWiki Cross-site Scripting (XSS) vulnerability
An issue was discovered in MediaWiki before 1.31.9 and 1.32.x through 1.34.x before 1.34.3. The non-jqueryMsg version of mw.message().parse() doesn't escape HTML. This affects both message contents (which are generally safe) and the parameters (which can be based on user input). (When jqueryMsg is loaded, it correctly accepts only whitelisted tags in message contents, and escapes all parameters. Situations with an unloaded jqueryMsg are rare in practice, but can for example occur for Special:SpecialPages on a wiki with no extensions installed.)
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25828.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25828.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-25828
reference_id
reference_type
scores
0
value 0.00387
scoring_system epss
scoring_elements 0.5985
published_at 2026-04-21T12:55:00Z
1
value 0.00387
scoring_system epss
scoring_elements 0.59866
published_at 2026-04-18T12:55:00Z
2
value 0.00387
scoring_system epss
scoring_elements 0.59859
published_at 2026-04-16T12:55:00Z
3
value 0.00387
scoring_system epss
scoring_elements 0.59839
published_at 2026-04-12T12:55:00Z
4
value 0.00387
scoring_system epss
scoring_elements 0.59856
published_at 2026-04-11T12:55:00Z
5
value 0.00387
scoring_system epss
scoring_elements 0.59835
published_at 2026-04-09T12:55:00Z
6
value 0.00387
scoring_system epss
scoring_elements 0.59703
published_at 2026-04-01T12:55:00Z
7
value 0.00387
scoring_system epss
scoring_elements 0.59822
published_at 2026-04-13T12:55:00Z
8
value 0.00387
scoring_system epss
scoring_elements 0.5977
published_at 2026-04-07T12:55:00Z
9
value 0.00387
scoring_system epss
scoring_elements 0.59777
published_at 2026-04-02T12:55:00Z
10
value 0.00387
scoring_system epss
scoring_elements 0.59801
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-25828
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
10
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25828.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25828.yaml
11
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
13
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/mediawiki-announce
14
reference_url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
15
reference_url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-25828
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-25828
17
reference_url https://phabricator.wikimedia.org/T115888
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T115888
18
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1903776
reference_id 1903776
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1903776
19
reference_url https://github.com/advisories/GHSA-h8qx-mj6v-2934
reference_id GHSA-h8qx-mj6v-2934
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-h8qx-mj6v-2934
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2020-25828, GHSA-h8qx-mj6v-2934
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pm5t-23j4-6yh6
97
url VCID-pw9d-1cwb-tyb9
vulnerability_id VCID-pw9d-1cwb-tyb9
summary security update
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-28201
reference_id
reference_type
scores
0
value 0.00067
scoring_system epss
scoring_elements 0.20656
published_at 2026-04-21T12:55:00Z
1
value 0.00067
scoring_system epss
scoring_elements 0.20849
published_at 2026-04-02T12:55:00Z
2
value 0.00067
scoring_system epss
scoring_elements 0.20907
published_at 2026-04-04T12:55:00Z
3
value 0.00067
scoring_system epss
scoring_elements 0.20621
published_at 2026-04-07T12:55:00Z
4
value 0.00067
scoring_system epss
scoring_elements 0.20697
published_at 2026-04-08T12:55:00Z
5
value 0.00067
scoring_system epss
scoring_elements 0.20759
published_at 2026-04-09T12:55:00Z
6
value 0.00067
scoring_system epss
scoring_elements 0.20777
published_at 2026-04-11T12:55:00Z
7
value 0.00067
scoring_system epss
scoring_elements 0.20733
published_at 2026-04-12T12:55:00Z
8
value 0.00067
scoring_system epss
scoring_elements 0.20682
published_at 2026-04-13T12:55:00Z
9
value 0.00067
scoring_system epss
scoring_elements 0.20668
published_at 2026-04-16T12:55:00Z
10
value 0.00067
scoring_system epss
scoring_elements 0.20665
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-28201
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
16
reference_url https://security.archlinux.org/AVG-2823
reference_id AVG-2823
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2823
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2022-28201
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pw9d-1cwb-tyb9
98
url VCID-pwjk-pzpj-aff6
vulnerability_id VCID-pwjk-pzpj-aff6
summary Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1; Parsoid: before 0.16.5, 0.19.2, 0.20.2.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-32699
reference_id
reference_type
scores
0
value 0.00328
scoring_system epss
scoring_elements 0.55778
published_at 2026-04-02T12:55:00Z
1
value 0.00394
scoring_system epss
scoring_elements 0.6033
published_at 2026-04-21T12:55:00Z
2
value 0.00394
scoring_system epss
scoring_elements 0.60333
published_at 2026-04-16T12:55:00Z
3
value 0.00394
scoring_system epss
scoring_elements 0.60341
published_at 2026-04-18T12:55:00Z
4
value 0.00394
scoring_system epss
scoring_elements 0.60272
published_at 2026-04-04T12:55:00Z
5
value 0.00394
scoring_system epss
scoring_elements 0.60241
published_at 2026-04-07T12:55:00Z
6
value 0.00394
scoring_system epss
scoring_elements 0.6029
published_at 2026-04-08T12:55:00Z
7
value 0.00394
scoring_system epss
scoring_elements 0.60305
published_at 2026-04-09T12:55:00Z
8
value 0.00394
scoring_system epss
scoring_elements 0.60326
published_at 2026-04-11T12:55:00Z
9
value 0.00394
scoring_system epss
scoring_elements 0.60312
published_at 2026-04-12T12:55:00Z
10
value 0.00394
scoring_system epss
scoring_elements 0.60293
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-32699
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32699
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32699
2
reference_url https://phabricator.wikimedia.org/T387130
reference_id T387130
reference_type
scores
0
value 2.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/RE:M/U:Amber
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-10T18:51:20Z/
url https://phabricator.wikimedia.org/T387130
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-32699
risk_score 0.7
exploitability 0.5
weighted_severity 1.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pwjk-pzpj-aff6
99
url VCID-qjhk-97j6-2qfm
vulnerability_id VCID-qjhk-97j6-2qfm
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44854.json
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44854.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-44854
reference_id
reference_type
scores
0
value 0.00187
scoring_system epss
scoring_elements 0.40491
published_at 2026-04-01T12:55:00Z
1
value 0.00187
scoring_system epss
scoring_elements 0.40571
published_at 2026-04-08T12:55:00Z
2
value 0.00187
scoring_system epss
scoring_elements 0.40484
published_at 2026-04-21T12:55:00Z
3
value 0.00187
scoring_system epss
scoring_elements 0.40599
published_at 2026-04-11T12:55:00Z
4
value 0.00187
scoring_system epss
scoring_elements 0.40562
published_at 2026-04-12T12:55:00Z
5
value 0.00187
scoring_system epss
scoring_elements 0.40543
published_at 2026-04-13T12:55:00Z
6
value 0.00187
scoring_system epss
scoring_elements 0.40591
published_at 2026-04-16T12:55:00Z
7
value 0.00187
scoring_system epss
scoring_elements 0.4056
published_at 2026-04-18T12:55:00Z
8
value 0.00187
scoring_system epss
scoring_elements 0.40598
published_at 2026-04-04T12:55:00Z
9
value 0.00187
scoring_system epss
scoring_elements 0.4052
published_at 2026-04-07T12:55:00Z
10
value 0.00187
scoring_system epss
scoring_elements 0.40581
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-44854
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
17
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2156316
reference_id 2156316
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2156316
18
reference_url https://security.archlinux.org/AVG-2823
reference_id AVG-2823
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2823
19
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T15:53:28Z/
url https://security.gentoo.org/glsa/202305-24
20
reference_url https://phabricator.wikimedia.org/T292763
reference_id T292763
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T15:53:28Z/
url https://phabricator.wikimedia.org/T292763
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-44854
risk_score 1.9
exploitability 0.5
weighted_severity 3.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qjhk-97j6-2qfm
100
url VCID-qme5-cvje-1fg4
vulnerability_id VCID-qme5-cvje-1fg4
summary MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not properly restrict access to revisions, which allows remote authenticated users with the viewsuppressed user right to remove revision suppressions via a crafted revisiondelete action, which returns a valid a change form.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8004
reference_id
reference_type
scores
0
value 0.00159
scoring_system epss
scoring_elements 0.36779
published_at 2026-04-21T12:55:00Z
1
value 0.00159
scoring_system epss
scoring_elements 0.36769
published_at 2026-04-01T12:55:00Z
2
value 0.00159
scoring_system epss
scoring_elements 0.36929
published_at 2026-04-02T12:55:00Z
3
value 0.00159
scoring_system epss
scoring_elements 0.36962
published_at 2026-04-04T12:55:00Z
4
value 0.00159
scoring_system epss
scoring_elements 0.36794
published_at 2026-04-07T12:55:00Z
5
value 0.00159
scoring_system epss
scoring_elements 0.36844
published_at 2026-04-08T12:55:00Z
6
value 0.00159
scoring_system epss
scoring_elements 0.36859
published_at 2026-04-09T12:55:00Z
7
value 0.00159
scoring_system epss
scoring_elements 0.36868
published_at 2026-04-11T12:55:00Z
8
value 0.00159
scoring_system epss
scoring_elements 0.36833
published_at 2026-04-12T12:55:00Z
9
value 0.00159
scoring_system epss
scoring_elements 0.36808
published_at 2026-04-13T12:55:00Z
10
value 0.00159
scoring_system epss
scoring_elements 0.36853
published_at 2026-04-16T12:55:00Z
11
value 0.00159
scoring_system epss
scoring_elements 0.36837
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8004
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8004
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8004
2
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html
3
reference_url https://phabricator.wikimedia.org/T95589
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T95589
4
reference_url http://www.securitytracker.com/id/1034028
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1034028
5
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8004
reference_id CVE-2015-8004
reference_type
scores
0
value 4.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:N/I:P/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2015-8004
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2015-8004
risk_score 1.8
exploitability 0.5
weighted_severity 3.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qme5-cvje-1fg4
101
url VCID-qmx3-kcnd-zuhe
vulnerability_id VCID-qmx3-kcnd-zuhe
summary
Wikimedia MediaWiki Incorrect Access Control vulnerability
An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.27.0 through 1.32.1. Directly POSTing to Special:ChangeEmail would allow for bypassing re-authentication, allowing for potential account takeover.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12468
reference_id
reference_type
scores
0
value 0.00519
scoring_system epss
scoring_elements 0.66728
published_at 2026-04-02T12:55:00Z
1
value 0.00519
scoring_system epss
scoring_elements 0.66797
published_at 2026-04-21T12:55:00Z
2
value 0.00519
scoring_system epss
scoring_elements 0.66814
published_at 2026-04-18T12:55:00Z
3
value 0.00519
scoring_system epss
scoring_elements 0.66774
published_at 2026-04-08T12:55:00Z
4
value 0.00519
scoring_system epss
scoring_elements 0.66725
published_at 2026-04-07T12:55:00Z
5
value 0.00519
scoring_system epss
scoring_elements 0.66753
published_at 2026-04-04T12:55:00Z
6
value 0.00519
scoring_system epss
scoring_elements 0.66688
published_at 2026-04-01T12:55:00Z
7
value 0.00519
scoring_system epss
scoring_elements 0.668
published_at 2026-04-16T12:55:00Z
8
value 0.00519
scoring_system epss
scoring_elements 0.66766
published_at 2026-04-13T12:55:00Z
9
value 0.00519
scoring_system epss
scoring_elements 0.66796
published_at 2026-04-12T12:55:00Z
10
value 0.00519
scoring_system epss
scoring_elements 0.6681
published_at 2026-04-11T12:55:00Z
11
value 0.00519
scoring_system epss
scoring_elements 0.66789
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12468
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
11
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12468.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12468.yaml
12
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
13
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/mediawiki-announce
14
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
15
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-12468
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-12468
16
reference_url https://phabricator.wikimedia.org/T197279
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T197279
17
reference_url https://seclists.org/bugtraq/2019/Jun/12
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2019/Jun/12
18
reference_url https://www.debian.org/security/2019/dsa-4460
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2019/dsa-4460
19
reference_url https://github.com/advisories/GHSA-wrhx-3pxr-6vgg
reference_id GHSA-wrhx-3pxr-6vgg
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wrhx-3pxr-6vgg
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2019-12468, GHSA-wrhx-3pxr-6vgg
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qmx3-kcnd-zuhe
102
url VCID-qpgu-mg6m-vyef
vulnerability_id VCID-qpgu-mg6m-vyef
summary Vulnerability in Wikimedia Foundation Scribunto, Wikimedia Foundation luasandbox. This vulnerability is associated with program files includes/Engines/LuaCommon/lualib/mwInit.Lua, library.C. This issue affects Scribunto: from * before 1.39.16, 1.43.6, 1.44.3, 1.45.1; luasandbox: from * before fea2304f8f6ab30314369a612f4f5b165e68e95a.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67482
reference_id
reference_type
scores
0
value 0.0002
scoring_system epss
scoring_elements 0.05245
published_at 2026-04-02T12:55:00Z
1
value 0.0002
scoring_system epss
scoring_elements 0.05277
published_at 2026-04-04T12:55:00Z
2
value 0.0002
scoring_system epss
scoring_elements 0.05303
published_at 2026-04-07T12:55:00Z
3
value 0.0002
scoring_system epss
scoring_elements 0.05337
published_at 2026-04-08T12:55:00Z
4
value 0.0002
scoring_system epss
scoring_elements 0.05359
published_at 2026-04-09T12:55:00Z
5
value 0.0002
scoring_system epss
scoring_elements 0.05326
published_at 2026-04-11T12:55:00Z
6
value 0.00021
scoring_system epss
scoring_elements 0.05497
published_at 2026-04-16T12:55:00Z
7
value 0.00021
scoring_system epss
scoring_elements 0.0567
published_at 2026-04-21T12:55:00Z
8
value 0.00021
scoring_system epss
scoring_elements 0.05507
published_at 2026-04-18T12:55:00Z
9
value 0.00021
scoring_system epss
scoring_elements 0.05554
published_at 2026-04-12T12:55:00Z
10
value 0.00021
scoring_system epss
scoring_elements 0.05547
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67482
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67482
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67482
2
reference_url https://phabricator.wikimedia.org/T408135
reference_id T408135
reference_type
scores
0
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:26:14Z/
url https://phabricator.wikimedia.org/T408135
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-67482
risk_score 0.5
exploitability 0.5
weighted_severity 1.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qpgu-mg6m-vyef
103
url VCID-qqvd-cjs3-7kab
vulnerability_id VCID-qqvd-cjs3-7kab
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-34912.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-34912.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-34912
reference_id
reference_type
scores
0
value 0.00236
scoring_system epss
scoring_elements 0.46482
published_at 2026-04-02T12:55:00Z
1
value 0.00236
scoring_system epss
scoring_elements 0.46502
published_at 2026-04-12T12:55:00Z
2
value 0.00236
scoring_system epss
scoring_elements 0.46452
published_at 2026-04-07T12:55:00Z
3
value 0.00236
scoring_system epss
scoring_elements 0.46507
published_at 2026-04-09T12:55:00Z
4
value 0.00236
scoring_system epss
scoring_elements 0.4653
published_at 2026-04-11T12:55:00Z
5
value 0.00236
scoring_system epss
scoring_elements 0.46511
published_at 2026-04-13T12:55:00Z
6
value 0.00236
scoring_system epss
scoring_elements 0.46568
published_at 2026-04-16T12:55:00Z
7
value 0.00236
scoring_system epss
scoring_elements 0.46565
published_at 2026-04-18T12:55:00Z
8
value 0.00236
scoring_system epss
scoring_elements 0.46512
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-34912
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
17
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2112772
reference_id 2112772
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2112772
18
reference_url https://security.archlinux.org/AVG-2823
reference_id AVG-2823
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2823
19
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
url https://security.gentoo.org/glsa/202305-24
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2022-34912
risk_score 2.8
exploitability 0.5
weighted_severity 5.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qqvd-cjs3-7kab
104
url VCID-qwcp-5hh8-z3gp
vulnerability_id VCID-qwcp-5hh8-z3gp
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41767.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41767.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-41767
reference_id
reference_type
scores
0
value 0.00245
scoring_system epss
scoring_elements 0.47785
published_at 2026-04-21T12:55:00Z
1
value 0.00245
scoring_system epss
scoring_elements 0.47754
published_at 2026-04-02T12:55:00Z
2
value 0.00245
scoring_system epss
scoring_elements 0.47773
published_at 2026-04-09T12:55:00Z
3
value 0.00245
scoring_system epss
scoring_elements 0.47798
published_at 2026-04-11T12:55:00Z
4
value 0.00245
scoring_system epss
scoring_elements 0.47784
published_at 2026-04-13T12:55:00Z
5
value 0.00245
scoring_system epss
scoring_elements 0.47839
published_at 2026-04-16T12:55:00Z
6
value 0.00245
scoring_system epss
scoring_elements 0.47832
published_at 2026-04-18T12:55:00Z
7
value 0.00245
scoring_system epss
scoring_elements 0.47774
published_at 2026-04-12T12:55:00Z
8
value 0.00245
scoring_system epss
scoring_elements 0.47723
published_at 2026-04-07T12:55:00Z
9
value 0.00245
scoring_system epss
scoring_elements 0.47777
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-41767
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
17
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2156331
reference_id 2156331
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2156331
18
reference_url https://security.archlinux.org/AVG-2823
reference_id AVG-2823
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2823
19
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T14:22:46Z/
url https://security.gentoo.org/glsa/202305-24
20
reference_url https://phabricator.wikimedia.org/T316304
reference_id T316304
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T14:22:46Z/
url https://phabricator.wikimedia.org/T316304
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2022-41767
risk_score 1.9
exploitability 0.5
weighted_severity 3.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qwcp-5hh8-z3gp
105
url VCID-rhq2-r3hq-tqc5
vulnerability_id VCID-rhq2-r3hq-tqc5
summary The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not restrict the uploaded data to the claimed file size, which allows remote authenticated users to cause a denial of service via a chunk that exceeds the file size.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8001
reference_id
reference_type
scores
0
value 0.00324
scoring_system epss
scoring_elements 0.55476
published_at 2026-04-21T12:55:00Z
1
value 0.00324
scoring_system epss
scoring_elements 0.55318
published_at 2026-04-01T12:55:00Z
2
value 0.00324
scoring_system epss
scoring_elements 0.55432
published_at 2026-04-02T12:55:00Z
3
value 0.00324
scoring_system epss
scoring_elements 0.55456
published_at 2026-04-04T12:55:00Z
4
value 0.00324
scoring_system epss
scoring_elements 0.55435
published_at 2026-04-07T12:55:00Z
5
value 0.00324
scoring_system epss
scoring_elements 0.55486
published_at 2026-04-08T12:55:00Z
6
value 0.00324
scoring_system epss
scoring_elements 0.55487
published_at 2026-04-09T12:55:00Z
7
value 0.00324
scoring_system epss
scoring_elements 0.55497
published_at 2026-04-11T12:55:00Z
8
value 0.00324
scoring_system epss
scoring_elements 0.55475
published_at 2026-04-12T12:55:00Z
9
value 0.00324
scoring_system epss
scoring_elements 0.55458
published_at 2026-04-13T12:55:00Z
10
value 0.00324
scoring_system epss
scoring_elements 0.55495
published_at 2026-04-16T12:55:00Z
11
value 0.00324
scoring_system epss
scoring_elements 0.55498
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8001
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8001
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8001
2
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html
3
reference_url https://phabricator.wikimedia.org/T91203
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T91203
4
reference_url http://www.securitytracker.com/id/1034028
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1034028
5
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8001
reference_id CVE-2015-8001
reference_type
scores
0
value 3.5
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:S/C:N/I:N/A:P
url https://nvd.nist.gov/vuln/detail/CVE-2015-8001
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2015-8001
risk_score 1.6
exploitability 0.5
weighted_severity 3.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rhq2-r3hq-tqc5
106
url VCID-ruur-4cvx-cqct
vulnerability_id VCID-ruur-4cvx-cqct
summary mediawiki: cross site scripting
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-36675.json
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-36675.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-36675
reference_id
reference_type
scores
0
value 0.00526
scoring_system epss
scoring_elements 0.66994
published_at 2026-04-02T12:55:00Z
1
value 0.00526
scoring_system epss
scoring_elements 0.67057
published_at 2026-04-21T12:55:00Z
2
value 0.00526
scoring_system epss
scoring_elements 0.67055
published_at 2026-04-09T12:55:00Z
3
value 0.00526
scoring_system epss
scoring_elements 0.67074
published_at 2026-04-11T12:55:00Z
4
value 0.00526
scoring_system epss
scoring_elements 0.6706
published_at 2026-04-12T12:55:00Z
5
value 0.00526
scoring_system epss
scoring_elements 0.67029
published_at 2026-04-13T12:55:00Z
6
value 0.00526
scoring_system epss
scoring_elements 0.67062
published_at 2026-04-16T12:55:00Z
7
value 0.00526
scoring_system epss
scoring_elements 0.67076
published_at 2026-04-18T12:55:00Z
8
value 0.00526
scoring_system epss
scoring_elements 0.67019
published_at 2026-04-04T12:55:00Z
9
value 0.00526
scoring_system epss
scoring_elements 0.66993
published_at 2026-04-07T12:55:00Z
10
value 0.00526
scoring_system epss
scoring_elements 0.67042
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-36675
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36674
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36674
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36675
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36675
5
reference_url https://www.mediawiki.org/wiki/Release_notes/1.40#Other_changes_in_1.40
reference_id 1.40#Other_changes_in_1.40
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-05T15:24:50Z/
url https://www.mediawiki.org/wiki/Release_notes/1.40#Other_changes_in_1.40
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2217428
reference_id 2217428
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2217428
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2UIVGYECQGTUC2LLPVCZBPDLCTOHL2F6/
reference_id 2UIVGYECQGTUC2LLPVCZBPDLCTOHL2F6
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-05T15:24:50Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2UIVGYECQGTUC2LLPVCZBPDLCTOHL2F6/
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CHRX6DSLAMVXCV2YMJEWOLTBEYSESE5/
reference_id 6CHRX6DSLAMVXCV2YMJEWOLTBEYSESE5
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-05T15:24:50Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CHRX6DSLAMVXCV2YMJEWOLTBEYSESE5/
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOAXEGYBOEM4JWB4J3BDH73NK2LCYC3O/
reference_id DOAXEGYBOEM4JWB4J3BDH73NK2LCYC3O
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-05T15:24:50Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOAXEGYBOEM4JWB4J3BDH73NK2LCYC3O/
10
reference_url https://phabricator.wikimedia.org/T332889
reference_id T332889
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-05T15:24:50Z/
url https://phabricator.wikimedia.org/T332889
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2023-36675
risk_score 1.6
exploitability 0.5
weighted_severity 3.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ruur-4cvx-cqct
107
url VCID-rwtk-hep1-xfaw
vulnerability_id VCID-rwtk-hep1-xfaw
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which could result in a Denial of Service condition.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30152.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30152.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-30152
reference_id
reference_type
scores
0
value 0.00374
scoring_system epss
scoring_elements 0.59101
published_at 2026-04-21T12:55:00Z
1
value 0.00374
scoring_system epss
scoring_elements 0.59116
published_at 2026-04-16T12:55:00Z
2
value 0.00374
scoring_system epss
scoring_elements 0.59121
published_at 2026-04-18T12:55:00Z
3
value 0.00526
scoring_system epss
scoring_elements 0.66976
published_at 2026-04-02T12:55:00Z
4
value 0.00526
scoring_system epss
scoring_elements 0.66975
published_at 2026-04-07T12:55:00Z
5
value 0.00526
scoring_system epss
scoring_elements 0.67024
published_at 2026-04-08T12:55:00Z
6
value 0.00526
scoring_system epss
scoring_elements 0.67036
published_at 2026-04-09T12:55:00Z
7
value 0.00526
scoring_system epss
scoring_elements 0.67056
published_at 2026-04-11T12:55:00Z
8
value 0.00526
scoring_system epss
scoring_elements 0.67041
published_at 2026-04-12T12:55:00Z
9
value 0.00526
scoring_system epss
scoring_elements 0.6701
published_at 2026-04-13T12:55:00Z
10
value 0.00526
scoring_system epss
scoring_elements 0.66938
published_at 2026-04-01T12:55:00Z
11
value 0.00526
scoring_system epss
scoring_elements 0.67001
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-30152
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20270
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27291
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30152
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30154
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30155
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30157
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30158
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30159
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1948636
reference_id 1948636
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1948636
11
reference_url https://security.archlinux.org/AVG-1775
reference_id AVG-1775
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1775
12
reference_url https://security.gentoo.org/glsa/202107-40
reference_id GLSA-202107-40
reference_type
scores
url https://security.gentoo.org/glsa/202107-40
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-30152
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rwtk-hep1-xfaw
108
url VCID-rz65-w7x5-57hu
vulnerability_id VCID-rz65-w7x5-57hu
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-34911.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-34911.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-34911
reference_id
reference_type
scores
0
value 0.00435
scoring_system epss
scoring_elements 0.62828
published_at 2026-04-02T12:55:00Z
1
value 0.00435
scoring_system epss
scoring_elements 0.62858
published_at 2026-04-04T12:55:00Z
2
value 0.00435
scoring_system epss
scoring_elements 0.62822
published_at 2026-04-07T12:55:00Z
3
value 0.00435
scoring_system epss
scoring_elements 0.62873
published_at 2026-04-08T12:55:00Z
4
value 0.00435
scoring_system epss
scoring_elements 0.62889
published_at 2026-04-09T12:55:00Z
5
value 0.00435
scoring_system epss
scoring_elements 0.62907
published_at 2026-04-11T12:55:00Z
6
value 0.00435
scoring_system epss
scoring_elements 0.62897
published_at 2026-04-12T12:55:00Z
7
value 0.00435
scoring_system epss
scoring_elements 0.62875
published_at 2026-04-13T12:55:00Z
8
value 0.00435
scoring_system epss
scoring_elements 0.62915
published_at 2026-04-16T12:55:00Z
9
value 0.00435
scoring_system epss
scoring_elements 0.62923
published_at 2026-04-18T12:55:00Z
10
value 0.00435
scoring_system epss
scoring_elements 0.62902
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-34911
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
17
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2112770
reference_id 2112770
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2112770
18
reference_url https://security.archlinux.org/AVG-2823
reference_id AVG-2823
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2823
19
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
url https://security.gentoo.org/glsa/202305-24
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2022-34911
risk_score 2.8
exploitability 0.5
weighted_severity 5.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rz65-w7x5-57hu
109
url VCID-sc5s-s7vg-dygq
vulnerability_id VCID-sc5s-s7vg-dygq
summary mediawiki: denial of service
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-34506.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-34506.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34506
reference_id
reference_type
scores
0
value 0.00171
scoring_system epss
scoring_elements 0.38284
published_at 2026-04-21T12:55:00Z
1
value 0.00171
scoring_system epss
scoring_elements 0.38346
published_at 2026-04-12T12:55:00Z
2
value 0.00171
scoring_system epss
scoring_elements 0.38321
published_at 2026-04-13T12:55:00Z
3
value 0.00171
scoring_system epss
scoring_elements 0.38369
published_at 2026-04-16T12:55:00Z
4
value 0.00171
scoring_system epss
scoring_elements 0.38348
published_at 2026-04-18T12:55:00Z
5
value 0.00171
scoring_system epss
scoring_elements 0.3842
published_at 2026-04-02T12:55:00Z
6
value 0.00171
scoring_system epss
scoring_elements 0.38444
published_at 2026-04-04T12:55:00Z
7
value 0.00171
scoring_system epss
scoring_elements 0.38308
published_at 2026-04-07T12:55:00Z
8
value 0.00171
scoring_system epss
scoring_elements 0.38358
published_at 2026-04-08T12:55:00Z
9
value 0.00171
scoring_system epss
scoring_elements 0.38367
published_at 2026-04-09T12:55:00Z
10
value 0.00171
scoring_system epss
scoring_elements 0.38383
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34506
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34506
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34506
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2279231
reference_id 2279231
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2279231
4
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FU2FGUXXK6TMV6R52VRECLC6XCSQQISY/
reference_id FU2FGUXXK6TMV6R52VRECLC6XCSQQISY
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-05-06T14:48:08Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FU2FGUXXK6TMV6R52VRECLC6XCSQQISY/
5
reference_url https://phabricator.wikimedia.org/T357760
reference_id T357760
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-05-06T14:48:08Z/
url https://phabricator.wikimedia.org/T357760
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2024-34506
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sc5s-s7vg-dygq
110
url VCID-sca5-n7rz-rffq
vulnerability_id VCID-sca5-n7rz-rffq
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44856.json
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44856.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-44856
reference_id
reference_type
scores
0
value 0.00176
scoring_system epss
scoring_elements 0.38942
published_at 2026-04-01T12:55:00Z
1
value 0.00176
scoring_system epss
scoring_elements 0.39127
published_at 2026-04-02T12:55:00Z
2
value 0.00176
scoring_system epss
scoring_elements 0.39032
published_at 2026-04-21T12:55:00Z
3
value 0.00176
scoring_system epss
scoring_elements 0.39153
published_at 2026-04-11T12:55:00Z
4
value 0.00176
scoring_system epss
scoring_elements 0.39116
published_at 2026-04-12T12:55:00Z
5
value 0.00176
scoring_system epss
scoring_elements 0.39096
published_at 2026-04-13T12:55:00Z
6
value 0.00176
scoring_system epss
scoring_elements 0.39151
published_at 2026-04-16T12:55:00Z
7
value 0.00176
scoring_system epss
scoring_elements 0.39121
published_at 2026-04-18T12:55:00Z
8
value 0.00176
scoring_system epss
scoring_elements 0.3915
published_at 2026-04-04T12:55:00Z
9
value 0.00176
scoring_system epss
scoring_elements 0.39069
published_at 2026-04-07T12:55:00Z
10
value 0.00176
scoring_system epss
scoring_elements 0.39124
published_at 2026-04-08T12:55:00Z
11
value 0.00176
scoring_system epss
scoring_elements 0.39141
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-44856
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
17
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2156326
reference_id 2156326
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2156326
18
reference_url https://security.archlinux.org/AVG-2823
reference_id AVG-2823
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2823
19
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T15:49:08Z/
url https://security.gentoo.org/glsa/202305-24
20
reference_url https://phabricator.wikimedia.org/T271037
reference_id T271037
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T15:49:08Z/
url https://phabricator.wikimedia.org/T271037
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-44856
risk_score 2.2
exploitability 0.5
weighted_severity 4.4
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sca5-n7rz-rffq
111
url VCID-sf61-byhw-17gv
vulnerability_id VCID-sf61-byhw-17gv
summary
Mediawiki Improper Privilege Management
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.
references
0
reference_url https://access.redhat.com/errata/RHSA-2019:3142
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3142
1
reference_url https://access.redhat.com/errata/RHSA-2019:3238
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3238
2
reference_url https://access.redhat.com/errata/RHSA-2019:3813
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3813
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0503.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0503.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-0503
reference_id
reference_type
scores
0
value 0.00383
scoring_system epss
scoring_elements 0.59493
published_at 2026-04-01T12:55:00Z
1
value 0.00383
scoring_system epss
scoring_elements 0.59631
published_at 2026-04-21T12:55:00Z
2
value 0.00383
scoring_system epss
scoring_elements 0.59647
published_at 2026-04-18T12:55:00Z
3
value 0.00383
scoring_system epss
scoring_elements 0.5964
published_at 2026-04-16T12:55:00Z
4
value 0.00383
scoring_system epss
scoring_elements 0.59607
published_at 2026-04-13T12:55:00Z
5
value 0.00383
scoring_system epss
scoring_elements 0.59627
published_at 2026-04-12T12:55:00Z
6
value 0.00383
scoring_system epss
scoring_elements 0.59611
published_at 2026-04-08T12:55:00Z
7
value 0.00383
scoring_system epss
scoring_elements 0.5956
published_at 2026-04-07T12:55:00Z
8
value 0.00383
scoring_system epss
scoring_elements 0.59591
published_at 2026-04-04T12:55:00Z
9
value 0.00383
scoring_system epss
scoring_elements 0.59566
published_at 2026-04-02T12:55:00Z
10
value 0.00383
scoring_system epss
scoring_elements 0.59643
published_at 2026-04-11T12:55:00Z
11
value 0.00383
scoring_system epss
scoring_elements 0.59624
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-0503
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0503
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0503
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0504
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0504
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0505
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0505
8
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
9
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html
10
reference_url https://phabricator.wikimedia.org/T169545
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T169545
11
reference_url https://www.debian.org/security/2018/dsa-4301
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2018/dsa-4301
12
reference_url http://www.securitytracker.com/id/1041695
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1041695
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1634161
reference_id 1634161
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1634161
14
reference_url https://security.archlinux.org/ASA-201809-5
reference_id ASA-201809-5
reference_type
scores
url https://security.archlinux.org/ASA-201809-5
15
reference_url https://security.archlinux.org/AVG-765
reference_id AVG-765
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-765
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-0503
reference_id CVE-2018-0503
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-0503
17
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2018-0503.yaml
reference_id CVE-2018-0503.YAML
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2018-0503.yaml
18
reference_url https://github.com/advisories/GHSA-mhfv-9h99-jwg7
reference_id GHSA-mhfv-9h99-jwg7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mhfv-9h99-jwg7
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2018-0503, GHSA-mhfv-9h99-jwg7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sf61-byhw-17gv
112
url VCID-sh6q-pur2-gkag
vulnerability_id VCID-sh6q-pur2-gkag
summary mediawiki: SVG filter evasion using default attribute values in DTD declaration
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0366.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0366.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-0366
reference_id
reference_type
scores
0
value 0.00387
scoring_system epss
scoring_elements 0.59711
published_at 2026-04-01T12:55:00Z
1
value 0.00387
scoring_system epss
scoring_elements 0.59784
published_at 2026-04-02T12:55:00Z
2
value 0.00387
scoring_system epss
scoring_elements 0.59808
published_at 2026-04-04T12:55:00Z
3
value 0.00387
scoring_system epss
scoring_elements 0.59778
published_at 2026-04-07T12:55:00Z
4
value 0.00387
scoring_system epss
scoring_elements 0.59829
published_at 2026-04-08T12:55:00Z
5
value 0.00387
scoring_system epss
scoring_elements 0.59843
published_at 2026-04-09T12:55:00Z
6
value 0.00387
scoring_system epss
scoring_elements 0.59863
published_at 2026-04-11T12:55:00Z
7
value 0.00387
scoring_system epss
scoring_elements 0.59846
published_at 2026-04-12T12:55:00Z
8
value 0.00387
scoring_system epss
scoring_elements 0.59828
published_at 2026-04-13T12:55:00Z
9
value 0.00387
scoring_system epss
scoring_elements 0.59866
published_at 2026-04-16T12:55:00Z
10
value 0.00387
scoring_system epss
scoring_elements 0.59873
published_at 2026-04-18T12:55:00Z
11
value 0.00387
scoring_system epss
scoring_elements 0.59858
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-0366
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0366
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0366
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1569788
reference_id 1569788
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1569788
4
reference_url https://security.archlinux.org/ASA-201704-3
reference_id ASA-201704-3
reference_type
scores
url https://security.archlinux.org/ASA-201704-3
5
reference_url https://security.archlinux.org/AVG-236
reference_id AVG-236
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-236
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2017-0366
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sh6q-pur2-gkag
113
url VCID-sr9a-a6vt-1qgt
vulnerability_id VCID-sr9a-a6vt-1qgt
summary Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid. This vulnerability is associated with program files includes/parser/Sanitizer.Php, src/Core/Sanitizer.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1; Parsoid: from * before 0.16.6, 0.20.4, 0.21.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61638
reference_id
reference_type
scores
0
value 6e-05
scoring_system epss
scoring_elements 0.00312
published_at 2026-04-07T12:55:00Z
1
value 6e-05
scoring_system epss
scoring_elements 0.00323
published_at 2026-04-02T12:55:00Z
2
value 6e-05
scoring_system epss
scoring_elements 0.00311
published_at 2026-04-09T12:55:00Z
3
value 6e-05
scoring_system epss
scoring_elements 0.00321
published_at 2026-04-04T12:55:00Z
4
value 7e-05
scoring_system epss
scoring_elements 0.00463
published_at 2026-04-21T12:55:00Z
5
value 7e-05
scoring_system epss
scoring_elements 0.00428
published_at 2026-04-16T12:55:00Z
6
value 7e-05
scoring_system epss
scoring_elements 0.00433
published_at 2026-04-18T12:55:00Z
7
value 7e-05
scoring_system epss
scoring_elements 0.00437
published_at 2026-04-11T12:55:00Z
8
value 7e-05
scoring_system epss
scoring_elements 0.00432
published_at 2026-04-12T12:55:00Z
9
value 7e-05
scoring_system epss
scoring_elements 0.00431
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61638
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61638
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61638
2
reference_url https://phabricator.wikimedia.org/T401099
reference_id T401099
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:10:22Z/
url https://phabricator.wikimedia.org/T401099
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-61638
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sr9a-a6vt-1qgt
114
url VCID-sz6n-4pbk-d7ay
vulnerability_id VCID-sz6n-4pbk-d7ay
summary mediawiki: information disclosure in the api.log
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0361.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0361.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-0361
reference_id
reference_type
scores
0
value 0.00079
scoring_system epss
scoring_elements 0.23281
published_at 2026-04-01T12:55:00Z
1
value 0.00079
scoring_system epss
scoring_elements 0.2332
published_at 2026-04-21T12:55:00Z
2
value 0.00079
scoring_system epss
scoring_elements 0.23345
published_at 2026-04-16T12:55:00Z
3
value 0.00079
scoring_system epss
scoring_elements 0.2334
published_at 2026-04-18T12:55:00Z
4
value 0.00079
scoring_system epss
scoring_elements 0.23455
published_at 2026-04-02T12:55:00Z
5
value 0.00079
scoring_system epss
scoring_elements 0.23493
published_at 2026-04-04T12:55:00Z
6
value 0.00079
scoring_system epss
scoring_elements 0.23277
published_at 2026-04-07T12:55:00Z
7
value 0.00079
scoring_system epss
scoring_elements 0.2335
published_at 2026-04-08T12:55:00Z
8
value 0.00079
scoring_system epss
scoring_elements 0.234
published_at 2026-04-09T12:55:00Z
9
value 0.00079
scoring_system epss
scoring_elements 0.2342
published_at 2026-04-11T12:55:00Z
10
value 0.00079
scoring_system epss
scoring_elements 0.23382
published_at 2026-04-12T12:55:00Z
11
value 0.00079
scoring_system epss
scoring_elements 0.23328
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-0361
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0361
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0361
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1569705
reference_id 1569705
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1569705
4
reference_url https://security.archlinux.org/ASA-201704-3
reference_id ASA-201704-3
reference_type
scores
url https://security.archlinux.org/ASA-201704-3
5
reference_url https://security.archlinux.org/ASA-201711-20
reference_id ASA-201711-20
reference_type
scores
url https://security.archlinux.org/ASA-201711-20
6
reference_url https://security.archlinux.org/AVG-236
reference_id AVG-236
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-236
7
reference_url https://security.archlinux.org/AVG-490
reference_id AVG-490
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-490
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2017-0361
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sz6n-4pbk-d7ay
115
url VCID-t6w8-cgct-gbgz
vulnerability_id VCID-t6w8-cgct-gbgz
summary
MediaWiki information disclosure
In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16738.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16738.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-16738
reference_id
reference_type
scores
0
value 0.00415
scoring_system epss
scoring_elements 0.61711
published_at 2026-04-18T12:55:00Z
1
value 0.00415
scoring_system epss
scoring_elements 0.61705
published_at 2026-04-16T12:55:00Z
2
value 0.00415
scoring_system epss
scoring_elements 0.61536
published_at 2026-04-01T12:55:00Z
3
value 0.00415
scoring_system epss
scoring_elements 0.61659
published_at 2026-04-08T12:55:00Z
4
value 0.00415
scoring_system epss
scoring_elements 0.61611
published_at 2026-04-07T12:55:00Z
5
value 0.00415
scoring_system epss
scoring_elements 0.6164
published_at 2026-04-04T12:55:00Z
6
value 0.00415
scoring_system epss
scoring_elements 0.6161
published_at 2026-04-02T12:55:00Z
7
value 0.00415
scoring_system epss
scoring_elements 0.61664
published_at 2026-04-13T12:55:00Z
8
value 0.00415
scoring_system epss
scoring_elements 0.61684
published_at 2026-04-12T12:55:00Z
9
value 0.00415
scoring_system epss
scoring_elements 0.61695
published_at 2026-04-21T12:55:00Z
10
value 0.00415
scoring_system epss
scoring_elements 0.61674
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-16738
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16738
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16738
3
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-16738.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-16738.yaml
4
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OMG3BMUHGWTAPYTK2NXM6CXF6FYLOUO
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OMG3BMUHGWTAPYTK2NXM6CXF6FYLOUO
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OMG3BMUHGWTAPYTK2NXM6CXF6FYLOUO/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OMG3BMUHGWTAPYTK2NXM6CXF6FYLOUO/
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QBAOLXETM5BOYQG6OQVHGB2LNLZUXVN6
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QBAOLXETM5BOYQG6OQVHGB2LNLZUXVN6
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QBAOLXETM5BOYQG6OQVHGB2LNLZUXVN6/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QBAOLXETM5BOYQG6OQVHGB2LNLZUXVN6/
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7OMG3BMUHGWTAPYTK2NXM6CXF6FYLOUO
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7OMG3BMUHGWTAPYTK2NXM6CXF6FYLOUO
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QBAOLXETM5BOYQG6OQVHGB2LNLZUXVN6
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QBAOLXETM5BOYQG6OQVHGB2LNLZUXVN6
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-16738
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-16738
12
reference_url https://phabricator.wikimedia.org/T230402
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T230402
13
reference_url https://seclists.org/bugtraq/2019/Oct/32
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2019/Oct/32
14
reference_url https://www.debian.org/security/2019/dsa-4545
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2019/dsa-4545
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1755762
reference_id 1755762
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1755762
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
reference_id cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
reference_id cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
21
reference_url https://github.com/advisories/GHSA-7hwr-f745-5rwq
reference_id GHSA-7hwr-f745-5rwq
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7hwr-f745-5rwq
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2019-16738, GHSA-7hwr-f745-5rwq
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t6w8-cgct-gbgz
116
url VCID-tq2e-c9ym-a3hj
vulnerability_id VCID-tq2e-c9ym-a3hj
summary
Wikimedia information leak vulnerability
Wikimedia MediaWiki 1.23.0 through 1.32.1 has an information leak. Privileged API responses that include whether a recent change has been patrolled may be cached publicly. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12474
reference_id
reference_type
scores
0
value 0.00261
scoring_system epss
scoring_elements 0.49391
published_at 2026-04-07T12:55:00Z
1
value 0.00261
scoring_system epss
scoring_elements 0.49445
published_at 2026-04-21T12:55:00Z
2
value 0.00261
scoring_system epss
scoring_elements 0.49475
published_at 2026-04-18T12:55:00Z
3
value 0.00261
scoring_system epss
scoring_elements 0.49478
published_at 2026-04-16T12:55:00Z
4
value 0.00261
scoring_system epss
scoring_elements 0.49432
published_at 2026-04-13T12:55:00Z
5
value 0.00261
scoring_system epss
scoring_elements 0.4943
published_at 2026-04-12T12:55:00Z
6
value 0.00261
scoring_system epss
scoring_elements 0.49411
published_at 2026-04-02T12:55:00Z
7
value 0.00261
scoring_system epss
scoring_elements 0.49382
published_at 2026-04-01T12:55:00Z
8
value 0.00261
scoring_system epss
scoring_elements 0.49438
published_at 2026-04-04T12:55:00Z
9
value 0.00261
scoring_system epss
scoring_elements 0.49458
published_at 2026-04-11T12:55:00Z
10
value 0.00261
scoring_system epss
scoring_elements 0.49441
published_at 2026-04-09T12:55:00Z
11
value 0.00261
scoring_system epss
scoring_elements 0.49446
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12474
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
11
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12474.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12474.yaml
12
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
13
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-12474
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-12474
15
reference_url https://phabricator.wikimedia.org/T212118
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T212118
16
reference_url https://seclists.org/bugtraq/2019/Jun/12
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2019/Jun/12
17
reference_url https://www.debian.org/security/2019/dsa-4460
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2019/dsa-4460
18
reference_url https://github.com/advisories/GHSA-2qrr-c2gh-pr35
reference_id GHSA-2qrr-c2gh-pr35
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2qrr-c2gh-pr35
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2019-12474, GHSA-2qrr-c2gh-pr35
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tq2e-c9ym-a3hj
117
url VCID-tutk-y8jg-n7dh
vulnerability_id VCID-tutk-y8jg-n7dh
summary Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files includes/Mail/UserMailer.Php. This issue affects CheckUser: from * before 1.39.14, 1.43.4, 1.44.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67478
reference_id
reference_type
scores
0
value 0.0002
scoring_system epss
scoring_elements 0.05376
published_at 2026-04-18T12:55:00Z
1
value 0.0002
scoring_system epss
scoring_elements 0.0554
published_at 2026-04-21T12:55:00Z
2
value 0.0002
scoring_system epss
scoring_elements 0.05372
published_at 2026-04-16T12:55:00Z
3
value 0.00021
scoring_system epss
scoring_elements 0.05583
published_at 2026-04-08T12:55:00Z
4
value 0.00021
scoring_system epss
scoring_elements 0.0551
published_at 2026-04-02T12:55:00Z
5
value 0.00021
scoring_system epss
scoring_elements 0.05579
published_at 2026-04-11T12:55:00Z
6
value 0.00021
scoring_system epss
scoring_elements 0.05607
published_at 2026-04-09T12:55:00Z
7
value 0.00021
scoring_system epss
scoring_elements 0.05546
published_at 2026-04-04T12:55:00Z
8
value 0.00021
scoring_system epss
scoring_elements 0.05545
published_at 2026-04-07T12:55:00Z
9
value 0.00022
scoring_system epss
scoring_elements 0.05811
published_at 2026-04-13T12:55:00Z
10
value 0.00022
scoring_system epss
scoring_elements 0.05818
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67478
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67478
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67478
2
reference_url https://phabricator.wikimedia.org/T385403
reference_id T385403
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:29:08Z/
url https://phabricator.wikimedia.org/T385403
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-67478
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tutk-y8jg-n7dh
118
url VCID-u2xc-ztge-p3bv
vulnerability_id VCID-u2xc-ztge-p3bv
summary
MediaWiki Incorrect Access Control vulnerability
An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is possible to bypass the limits on IP range blocks ($wgBlockCIDRLimit) by using the API. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12472
reference_id
reference_type
scores
0
value 0.00151
scoring_system epss
scoring_elements 0.3576
published_at 2026-04-21T12:55:00Z
1
value 0.00151
scoring_system epss
scoring_elements 0.35707
published_at 2026-04-01T12:55:00Z
2
value 0.00151
scoring_system epss
scoring_elements 0.35905
published_at 2026-04-02T12:55:00Z
3
value 0.00151
scoring_system epss
scoring_elements 0.35935
published_at 2026-04-04T12:55:00Z
4
value 0.00151
scoring_system epss
scoring_elements 0.35765
published_at 2026-04-07T12:55:00Z
5
value 0.00151
scoring_system epss
scoring_elements 0.35816
published_at 2026-04-08T12:55:00Z
6
value 0.00151
scoring_system epss
scoring_elements 0.35838
published_at 2026-04-09T12:55:00Z
7
value 0.00151
scoring_system epss
scoring_elements 0.35845
published_at 2026-04-11T12:55:00Z
8
value 0.00151
scoring_system epss
scoring_elements 0.35805
published_at 2026-04-12T12:55:00Z
9
value 0.00151
scoring_system epss
scoring_elements 0.35782
published_at 2026-04-13T12:55:00Z
10
value 0.00151
scoring_system epss
scoring_elements 0.35821
published_at 2026-04-16T12:55:00Z
11
value 0.00151
scoring_system epss
scoring_elements 0.35809
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12472
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
11
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12472.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12472.yaml
12
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
13
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-12472
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-12472
15
reference_url https://phabricator.wikimedia.org/T199540
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T199540
16
reference_url https://github.com/advisories/GHSA-7mqg-5fgh-xh4r
reference_id GHSA-7mqg-5fgh-xh4r
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7mqg-5fgh-xh4r
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2019-12472, GHSA-7mqg-5fgh-xh4r
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u2xc-ztge-p3bv
119
url VCID-ubbe-qu8g-5fa1
vulnerability_id VCID-ubbe-qu8g-5fa1
summary mediawiki: unsafe use of temporary directory
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0367.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0367.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-0367
reference_id
reference_type
scores
0
value 0.00516
scoring_system epss
scoring_elements 0.66555
published_at 2026-04-01T12:55:00Z
1
value 0.00516
scoring_system epss
scoring_elements 0.66594
published_at 2026-04-02T12:55:00Z
2
value 0.00516
scoring_system epss
scoring_elements 0.66621
published_at 2026-04-04T12:55:00Z
3
value 0.00516
scoring_system epss
scoring_elements 0.66592
published_at 2026-04-07T12:55:00Z
4
value 0.00516
scoring_system epss
scoring_elements 0.6664
published_at 2026-04-08T12:55:00Z
5
value 0.00516
scoring_system epss
scoring_elements 0.66653
published_at 2026-04-09T12:55:00Z
6
value 0.00516
scoring_system epss
scoring_elements 0.66673
published_at 2026-04-11T12:55:00Z
7
value 0.00516
scoring_system epss
scoring_elements 0.6666
published_at 2026-04-12T12:55:00Z
8
value 0.00516
scoring_system epss
scoring_elements 0.66628
published_at 2026-04-13T12:55:00Z
9
value 0.00516
scoring_system epss
scoring_elements 0.66663
published_at 2026-04-21T12:55:00Z
10
value 0.00516
scoring_system epss
scoring_elements 0.66677
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-0367
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0367
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0367
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1569791
reference_id 1569791
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1569791
4
reference_url https://security.archlinux.org/ASA-201704-3
reference_id ASA-201704-3
reference_type
scores
url https://security.archlinux.org/ASA-201704-3
5
reference_url https://security.archlinux.org/AVG-236
reference_id AVG-236
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-236
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2017-0367
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ubbe-qu8g-5fa1
120
url VCID-ujdn-y48t-pbch
vulnerability_id VCID-ujdn-y48t-pbch
summary
MediaWiki Special:UserRights exposes the existence of hidden users
In MediaWiki before 1.31.9 and 1.32.x through 1.34.x before 1.34.3, Special:UserRights exposes the existence of hidden users.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25813.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25813.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-25813
reference_id
reference_type
scores
0
value 0.00366
scoring_system epss
scoring_elements 0.58639
published_at 2026-04-18T12:55:00Z
1
value 0.00366
scoring_system epss
scoring_elements 0.58634
published_at 2026-04-16T12:55:00Z
2
value 0.00366
scoring_system epss
scoring_elements 0.5864
published_at 2026-04-11T12:55:00Z
3
value 0.00366
scoring_system epss
scoring_elements 0.58565
published_at 2026-04-07T12:55:00Z
4
value 0.00366
scoring_system epss
scoring_elements 0.58595
published_at 2026-04-04T12:55:00Z
5
value 0.00366
scoring_system epss
scoring_elements 0.58574
published_at 2026-04-02T12:55:00Z
6
value 0.00366
scoring_system epss
scoring_elements 0.58489
published_at 2026-04-01T12:55:00Z
7
value 0.00366
scoring_system epss
scoring_elements 0.586
published_at 2026-04-13T12:55:00Z
8
value 0.00366
scoring_system epss
scoring_elements 0.5862
published_at 2026-04-12T12:55:00Z
9
value 0.00366
scoring_system epss
scoring_elements 0.58623
published_at 2026-04-09T12:55:00Z
10
value 0.00366
scoring_system epss
scoring_elements 0.58616
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-25813
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
10
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25813.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25813.yaml
11
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6
14
reference_url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
15
reference_url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
16
reference_url https://meta.wikimedia.org/wiki/Special:UserRights
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://meta.wikimedia.org/wiki/Special:UserRights
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-25813
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-25813
18
reference_url https://phabricator.wikimedia.org/T232568
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T232568
19
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1903764
reference_id 1903764
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1903764
20
reference_url https://github.com/advisories/GHSA-c4rj-wrmq-52rj
reference_id GHSA-c4rj-wrmq-52rj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c4rj-wrmq-52rj
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2020-25813, GHSA-c4rj-wrmq-52rj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ujdn-y48t-pbch
121
url VCID-uzv4-9xtx-ryhr
vulnerability_id VCID-uzv4-9xtx-ryhr
summary
Multiple vulnerabilities have been found in Firejail, the worst of
    which could result in the arbitrary execution of code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-17367
reference_id
reference_type
scores
0
value 0.00135
scoring_system epss
scoring_elements 0.33197
published_at 2026-04-01T12:55:00Z
1
value 0.00135
scoring_system epss
scoring_elements 0.33324
published_at 2026-04-02T12:55:00Z
2
value 0.00135
scoring_system epss
scoring_elements 0.33356
published_at 2026-04-04T12:55:00Z
3
value 0.00135
scoring_system epss
scoring_elements 0.33189
published_at 2026-04-07T12:55:00Z
4
value 0.00135
scoring_system epss
scoring_elements 0.33232
published_at 2026-04-08T12:55:00Z
5
value 0.00135
scoring_system epss
scoring_elements 0.33265
published_at 2026-04-09T12:55:00Z
6
value 0.00135
scoring_system epss
scoring_elements 0.3327
published_at 2026-04-11T12:55:00Z
7
value 0.00135
scoring_system epss
scoring_elements 0.33229
published_at 2026-04-12T12:55:00Z
8
value 0.00135
scoring_system epss
scoring_elements 0.33206
published_at 2026-04-13T12:55:00Z
9
value 0.00135
scoring_system epss
scoring_elements 0.33246
published_at 2026-04-16T12:55:00Z
10
value 0.00135
scoring_system epss
scoring_elements 0.33223
published_at 2026-04-18T12:55:00Z
11
value 0.00135
scoring_system epss
scoring_elements 0.33186
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-17367
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
9
reference_url https://security.gentoo.org/glsa/202101-02
reference_id GLSA-202101-02
reference_type
scores
url https://security.gentoo.org/glsa/202101-02
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2020-17367
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uzv4-9xtx-ryhr
122
url VCID-v27j-4pnt-n7h9
vulnerability_id VCID-v27j-4pnt-n7h9
summary
Mediawiki BotPassword can bypass CentralAuth's account lock
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock
references
0
reference_url https://access.redhat.com/errata/RHSA-2019:3142
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3142
1
reference_url https://access.redhat.com/errata/RHSA-2019:3238
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3238
2
reference_url https://access.redhat.com/errata/RHSA-2019:3813
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3813
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0505.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0505.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-0505
reference_id
reference_type
scores
0
value 0.00427
scoring_system epss
scoring_elements 0.62309
published_at 2026-04-01T12:55:00Z
1
value 0.00427
scoring_system epss
scoring_elements 0.6245
published_at 2026-04-21T12:55:00Z
2
value 0.00427
scoring_system epss
scoring_elements 0.62466
published_at 2026-04-18T12:55:00Z
3
value 0.00427
scoring_system epss
scoring_elements 0.6246
published_at 2026-04-16T12:55:00Z
4
value 0.00427
scoring_system epss
scoring_elements 0.62415
published_at 2026-04-13T12:55:00Z
5
value 0.00427
scoring_system epss
scoring_elements 0.62437
published_at 2026-04-12T12:55:00Z
6
value 0.00427
scoring_system epss
scoring_elements 0.62411
published_at 2026-04-08T12:55:00Z
7
value 0.00427
scoring_system epss
scoring_elements 0.62362
published_at 2026-04-07T12:55:00Z
8
value 0.00427
scoring_system epss
scoring_elements 0.62397
published_at 2026-04-04T12:55:00Z
9
value 0.00427
scoring_system epss
scoring_elements 0.62367
published_at 2026-04-02T12:55:00Z
10
value 0.00427
scoring_system epss
scoring_elements 0.62447
published_at 2026-04-11T12:55:00Z
11
value 0.00427
scoring_system epss
scoring_elements 0.62428
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-0505
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0503
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0503
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0504
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0504
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0505
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0505
8
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
9
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html
10
reference_url https://phabricator.wikimedia.org/T194605
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T194605
11
reference_url https://www.debian.org/security/2018/dsa-4301
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2018/dsa-4301
12
reference_url http://www.securitytracker.com/id/1041695
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1041695
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1634166
reference_id 1634166
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1634166
14
reference_url https://security.archlinux.org/ASA-201809-5
reference_id ASA-201809-5
reference_type
scores
url https://security.archlinux.org/ASA-201809-5
15
reference_url https://security.archlinux.org/AVG-765
reference_id AVG-765
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-765
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-0505
reference_id CVE-2018-0505
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-0505
17
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2018-0505.yaml
reference_id CVE-2018-0505.YAML
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2018-0505.yaml
18
reference_url https://github.com/advisories/GHSA-5c6w-f4w2-2grp
reference_id GHSA-5c6w-f4w2-2grp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5c6w-f4w2-2grp
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2018-0505, GHSA-5c6w-f4w2-2grp
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v27j-4pnt-n7h9
123
url VCID-v3dp-7stt-tygf
vulnerability_id VCID-v3dp-7stt-tygf
summary MediaWiki: MediaWiki: Cross-site Scripting vulnerability due to improper input neutralization
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-67475.json
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-67475.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67475
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01642
published_at 2026-04-11T12:55:00Z
1
value 0.00014
scoring_system epss
scoring_elements 0.02532
published_at 2026-04-21T12:55:00Z
2
value 0.00014
scoring_system epss
scoring_elements 0.02443
published_at 2026-04-13T12:55:00Z
3
value 0.00014
scoring_system epss
scoring_elements 0.02425
published_at 2026-04-16T12:55:00Z
4
value 0.00014
scoring_system epss
scoring_elements 0.02432
published_at 2026-04-18T12:55:00Z
5
value 0.00023
scoring_system epss
scoring_elements 0.06192
published_at 2026-04-02T12:55:00Z
6
value 0.00023
scoring_system epss
scoring_elements 0.06288
published_at 2026-04-09T12:55:00Z
7
value 0.00023
scoring_system epss
scoring_elements 0.06223
published_at 2026-04-04T12:55:00Z
8
value 0.00023
scoring_system epss
scoring_elements 0.06203
published_at 2026-04-07T12:55:00Z
9
value 0.00023
scoring_system epss
scoring_elements 0.06247
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67475
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67475
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67475
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2436176
reference_id 2436176
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2436176
4
reference_url https://phabricator.wikimedia.org/T406664
reference_id T406664
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:29:07Z/
url https://phabricator.wikimedia.org/T406664
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-67475
risk_score 2.0
exploitability 0.5
weighted_severity 4.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v3dp-7stt-tygf
124
url VCID-vjd5-jv5h-yfhw
vulnerability_id VCID-vjd5-jv5h-yfhw
summary Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated with program files includes/ApiVisualEditorEdit.Php, modules/ve-mw/init/targets/ve.Init.Mw.DesktopArticleTarget.Js, modules/ve-mw/ui/dialogs/ve.Ui.MWSaveDialog.Js. This issue affects VisualEditor: from * before 1.39.14, 1.43.4, 1.44.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61655
reference_id
reference_type
scores
0
value 0.00018
scoring_system epss
scoring_elements 0.04535
published_at 2026-04-11T12:55:00Z
1
value 0.00021
scoring_system epss
scoring_elements 0.05502
published_at 2026-04-18T12:55:00Z
2
value 0.00021
scoring_system epss
scoring_elements 0.05549
published_at 2026-04-12T12:55:00Z
3
value 0.00021
scoring_system epss
scoring_elements 0.05542
published_at 2026-04-13T12:55:00Z
4
value 0.00021
scoring_system epss
scoring_elements 0.05492
published_at 2026-04-16T12:55:00Z
5
value 0.00021
scoring_system epss
scoring_elements 0.05664
published_at 2026-04-21T12:55:00Z
6
value 0.00043
scoring_system epss
scoring_elements 0.13053
published_at 2026-04-09T12:55:00Z
7
value 0.00043
scoring_system epss
scoring_elements 0.13121
published_at 2026-04-04T12:55:00Z
8
value 0.00043
scoring_system epss
scoring_elements 0.12923
published_at 2026-04-07T12:55:00Z
9
value 0.00043
scoring_system epss
scoring_elements 0.13002
published_at 2026-04-08T12:55:00Z
10
value 0.00043
scoring_system epss
scoring_elements 0.13067
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61655
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61655
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61655
2
reference_url https://phabricator.wikimedia.org/T395858
reference_id T395858
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:00:47Z/
url https://phabricator.wikimedia.org/T395858
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-61655
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vjd5-jv5h-yfhw
125
url VCID-w3f8-nrqd-p7gq
vulnerability_id VCID-w3f8-nrqd-p7gq
summary
Mediawiki information disclosure vulnerability
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid
references
0
reference_url https://access.redhat.com/errata/RHSA-2019:3238
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3238
1
reference_url https://access.redhat.com/errata/RHSA-2019:3813
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3813
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0504.json
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0504.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-0504
reference_id
reference_type
scores
0
value 0.01531
scoring_system epss
scoring_elements 0.81353
published_at 2026-04-21T12:55:00Z
1
value 0.01612
scoring_system epss
scoring_elements 0.81702
published_at 2026-04-01T12:55:00Z
2
value 0.01612
scoring_system epss
scoring_elements 0.81805
published_at 2026-04-18T12:55:00Z
3
value 0.01612
scoring_system epss
scoring_elements 0.8176
published_at 2026-04-08T12:55:00Z
4
value 0.01612
scoring_system epss
scoring_elements 0.81733
published_at 2026-04-07T12:55:00Z
5
value 0.01612
scoring_system epss
scoring_elements 0.81736
published_at 2026-04-04T12:55:00Z
6
value 0.01612
scoring_system epss
scoring_elements 0.81713
published_at 2026-04-02T12:55:00Z
7
value 0.01612
scoring_system epss
scoring_elements 0.81804
published_at 2026-04-16T12:55:00Z
8
value 0.01612
scoring_system epss
scoring_elements 0.81767
published_at 2026-04-13T12:55:00Z
9
value 0.01612
scoring_system epss
scoring_elements 0.81772
published_at 2026-04-12T12:55:00Z
10
value 0.01612
scoring_system epss
scoring_elements 0.81784
published_at 2026-04-11T12:55:00Z
11
value 0.01612
scoring_system epss
scoring_elements 0.81765
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-0504
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0503
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0503
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0504
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0504
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0505
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0505
7
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
8
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html
9
reference_url https://phabricator.wikimedia.org/T187638
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T187638
10
reference_url https://www.debian.org/security/2018/dsa-4301
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2018/dsa-4301
11
reference_url http://www.securitytracker.com/id/1041695
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1041695
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1634168
reference_id 1634168
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1634168
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-0504
reference_id CVE-2018-0504
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-0504
14
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2018-0504.yaml
reference_id CVE-2018-0504.YAML
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2018-0504.yaml
15
reference_url https://github.com/advisories/GHSA-hr8v-f4g2-p66f
reference_id GHSA-hr8v-f4g2-p66f
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hr8v-f4g2-p66f
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2018-0504, GHSA-hr8v-f4g2-p66f
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w3f8-nrqd-p7gq
126
url VCID-w51y-hprj-buap
vulnerability_id VCID-w51y-hprj-buap
summary Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/actions/RevertAction.Php, includes/api/ApiFileRevert.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-32696
reference_id
reference_type
scores
0
value 0.00273
scoring_system epss
scoring_elements 0.50697
published_at 2026-04-02T12:55:00Z
1
value 0.00328
scoring_system epss
scoring_elements 0.55749
published_at 2026-04-21T12:55:00Z
2
value 0.00328
scoring_system epss
scoring_elements 0.5573
published_at 2026-04-13T12:55:00Z
3
value 0.00328
scoring_system epss
scoring_elements 0.55771
published_at 2026-04-18T12:55:00Z
4
value 0.00328
scoring_system epss
scoring_elements 0.55726
published_at 2026-04-04T12:55:00Z
5
value 0.00328
scoring_system epss
scoring_elements 0.55704
published_at 2026-04-07T12:55:00Z
6
value 0.00328
scoring_system epss
scoring_elements 0.55755
published_at 2026-04-08T12:55:00Z
7
value 0.00328
scoring_system epss
scoring_elements 0.55759
published_at 2026-04-09T12:55:00Z
8
value 0.00328
scoring_system epss
scoring_elements 0.55767
published_at 2026-04-16T12:55:00Z
9
value 0.00328
scoring_system epss
scoring_elements 0.55748
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-32696
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32696
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32696
2
reference_url https://phabricator.wikimedia.org/T304474
reference_id T304474
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/RE:M/U:Green
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-10T19:06:02Z/
url https://phabricator.wikimedia.org/T304474
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-32696
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w51y-hprj-buap
127
url VCID-weh4-ev3r-jyep
vulnerability_id VCID-weh4-ev3r-jyep
summary security update
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8812
reference_id
reference_type
scores
0
value 0.00832
scoring_system epss
scoring_elements 0.74605
published_at 2026-04-21T12:55:00Z
1
value 0.00832
scoring_system epss
scoring_elements 0.74606
published_at 2026-04-16T12:55:00Z
2
value 0.00832
scoring_system epss
scoring_elements 0.74614
published_at 2026-04-18T12:55:00Z
3
value 0.00832
scoring_system epss
scoring_elements 0.7452
published_at 2026-04-01T12:55:00Z
4
value 0.00832
scoring_system epss
scoring_elements 0.74525
published_at 2026-04-02T12:55:00Z
5
value 0.00832
scoring_system epss
scoring_elements 0.74551
published_at 2026-04-04T12:55:00Z
6
value 0.00832
scoring_system epss
scoring_elements 0.74526
published_at 2026-04-07T12:55:00Z
7
value 0.00832
scoring_system epss
scoring_elements 0.74558
published_at 2026-04-08T12:55:00Z
8
value 0.00832
scoring_system epss
scoring_elements 0.74573
published_at 2026-04-09T12:55:00Z
9
value 0.00832
scoring_system epss
scoring_elements 0.74597
published_at 2026-04-11T12:55:00Z
10
value 0.00832
scoring_system epss
scoring_elements 0.74577
published_at 2026-04-12T12:55:00Z
11
value 0.00832
scoring_system epss
scoring_elements 0.74568
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8812
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8808
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8808
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8809
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8809
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8810
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8810
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8811
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8811
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8812
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8814
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8815
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8815
8
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html
9
reference_url https://www.debian.org/security/2017/dsa-4036
reference_id
reference_type
scores
url https://www.debian.org/security/2017/dsa-4036
10
reference_url http://www.securitytracker.com/id/1039812
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1039812
11
reference_url https://security.archlinux.org/ASA-201711-20
reference_id ASA-201711-20
reference_type
scores
url https://security.archlinux.org/ASA-201711-20
12
reference_url https://security.archlinux.org/AVG-490
reference_id AVG-490
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-490
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-8812
reference_id CVE-2017-8812
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:P/A:N
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2017-8812
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
aliases CVE-2017-8812
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-weh4-ev3r-jyep
128
url VCID-wjx4-aawn-23f6
vulnerability_id VCID-wjx4-aawn-23f6
summary security update
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8810
reference_id
reference_type
scores
0
value 0.00959
scoring_system epss
scoring_elements 0.76499
published_at 2026-04-21T12:55:00Z
1
value 0.00959
scoring_system epss
scoring_elements 0.76508
published_at 2026-04-16T12:55:00Z
2
value 0.00959
scoring_system epss
scoring_elements 0.76512
published_at 2026-04-18T12:55:00Z
3
value 0.00959
scoring_system epss
scoring_elements 0.76408
published_at 2026-04-01T12:55:00Z
4
value 0.00959
scoring_system epss
scoring_elements 0.76411
published_at 2026-04-02T12:55:00Z
5
value 0.00959
scoring_system epss
scoring_elements 0.7644
published_at 2026-04-04T12:55:00Z
6
value 0.00959
scoring_system epss
scoring_elements 0.76422
published_at 2026-04-07T12:55:00Z
7
value 0.00959
scoring_system epss
scoring_elements 0.76454
published_at 2026-04-08T12:55:00Z
8
value 0.00959
scoring_system epss
scoring_elements 0.76467
published_at 2026-04-13T12:55:00Z
9
value 0.00959
scoring_system epss
scoring_elements 0.76493
published_at 2026-04-11T12:55:00Z
10
value 0.00959
scoring_system epss
scoring_elements 0.76472
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8810
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8808
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8808
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8809
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8809
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8810
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8810
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8811
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8811
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8812
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8814
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8815
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8815
8
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html
9
reference_url https://www.debian.org/security/2017/dsa-4036
reference_id
reference_type
scores
url https://www.debian.org/security/2017/dsa-4036
10
reference_url http://www.securitytracker.com/id/1039812
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1039812
11
reference_url https://security.archlinux.org/ASA-201711-20
reference_id ASA-201711-20
reference_type
scores
url https://security.archlinux.org/ASA-201711-20
12
reference_url https://security.archlinux.org/AVG-490
reference_id AVG-490
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-490
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.1:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.28.2:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.0:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.29.1:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-8810
reference_id CVE-2017-8810
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
1
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2017-8810
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
aliases CVE-2017-8810
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wjx4-aawn-23f6
129
url VCID-wraf-59ce-u3br
vulnerability_id VCID-wraf-59ce-u3br
summary MediaWiki: MediaWiki: Vulnerability in parsing and sanitization
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-67479.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-67479.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67479
reference_id
reference_type
scores
0
value 0.0002
scoring_system epss
scoring_elements 0.05245
published_at 2026-04-02T12:55:00Z
1
value 0.0002
scoring_system epss
scoring_elements 0.05277
published_at 2026-04-04T12:55:00Z
2
value 0.0002
scoring_system epss
scoring_elements 0.05303
published_at 2026-04-07T12:55:00Z
3
value 0.0002
scoring_system epss
scoring_elements 0.05337
published_at 2026-04-08T12:55:00Z
4
value 0.0002
scoring_system epss
scoring_elements 0.05359
published_at 2026-04-09T12:55:00Z
5
value 0.0002
scoring_system epss
scoring_elements 0.05326
published_at 2026-04-11T12:55:00Z
6
value 0.00021
scoring_system epss
scoring_elements 0.05497
published_at 2026-04-16T12:55:00Z
7
value 0.00021
scoring_system epss
scoring_elements 0.0567
published_at 2026-04-21T12:55:00Z
8
value 0.00021
scoring_system epss
scoring_elements 0.05507
published_at 2026-04-18T12:55:00Z
9
value 0.00021
scoring_system epss
scoring_elements 0.05554
published_at 2026-04-12T12:55:00Z
10
value 0.00021
scoring_system epss
scoring_elements 0.05547
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67479
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67479
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67479
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2436184
reference_id 2436184
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2436184
4
reference_url https://phabricator.wikimedia.org/T407131
reference_id T407131
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:26:19Z/
url https://phabricator.wikimedia.org/T407131
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-67479
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wraf-59ce-u3br
130
url VCID-wzqf-k99e-vbeu
vulnerability_id VCID-wzqf-k99e-vbeu
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-31091
reference_id
reference_type
scores
0
value 0.0034
scoring_system epss
scoring_elements 0.5672
published_at 2026-04-02T12:55:00Z
1
value 0.0034
scoring_system epss
scoring_elements 0.56742
published_at 2026-04-21T12:55:00Z
2
value 0.0034
scoring_system epss
scoring_elements 0.56768
published_at 2026-04-18T12:55:00Z
3
value 0.0034
scoring_system epss
scoring_elements 0.5674
published_at 2026-04-13T12:55:00Z
4
value 0.0034
scoring_system epss
scoring_elements 0.56761
published_at 2026-04-12T12:55:00Z
5
value 0.0034
scoring_system epss
scoring_elements 0.56784
published_at 2026-04-11T12:55:00Z
6
value 0.0034
scoring_system epss
scoring_elements 0.56775
published_at 2026-04-09T12:55:00Z
7
value 0.0034
scoring_system epss
scoring_elements 0.56771
published_at 2026-04-16T12:55:00Z
8
value 0.0034
scoring_system epss
scoring_elements 0.56719
published_at 2026-04-07T12:55:00Z
9
value 0.0034
scoring_system epss
scoring_elements 0.56741
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-31091
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
16
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2022-31091.yaml
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2022-31091.yaml
17
reference_url https://github.com/guzzle/guzzle
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/guzzle/guzzle
18
reference_url https://github.com/guzzle/guzzle/commit/1dd98b0564cb3f6bd16ce683cb755f94c10fbd82
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:04:47Z/
url https://github.com/guzzle/guzzle/commit/1dd98b0564cb3f6bd16ce683cb755f94c10fbd82
19
reference_url https://github.com/guzzle/guzzle/security/advisories/GHSA-q559-8m2m-g699
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:04:47Z/
url https://github.com/guzzle/guzzle/security/advisories/GHSA-q559-8m2m-g699
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-31091
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-31091
21
reference_url https://www.debian.org/security/2022/dsa-5246
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:04:47Z/
url https://www.debian.org/security/2022/dsa-5246
22
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014492
reference_id 1014492
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014492
23
reference_url https://security.archlinux.org/AVG-2823
reference_id AVG-2823
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2823
24
reference_url https://github.com/advisories/GHSA-q559-8m2m-g699
reference_id GHSA-q559-8m2m-g699
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q559-8m2m-g699
25
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:04:47Z/
url https://security.gentoo.org/glsa/202305-24
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2022-31091, GHSA-q559-8m2m-g699, GMS-2022-2529
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wzqf-k99e-vbeu
131
url VCID-xj9q-7kq3-x7b4
vulnerability_id VCID-xj9q-7kq3-x7b4
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-6728
reference_id
reference_type
scores
0
value 0.00158
scoring_system epss
scoring_elements 0.36539
published_at 2026-04-01T12:55:00Z
1
value 0.00158
scoring_system epss
scoring_elements 0.36711
published_at 2026-04-02T12:55:00Z
2
value 0.00158
scoring_system epss
scoring_elements 0.36742
published_at 2026-04-04T12:55:00Z
3
value 0.00158
scoring_system epss
scoring_elements 0.3658
published_at 2026-04-07T12:55:00Z
4
value 0.00158
scoring_system epss
scoring_elements 0.36632
published_at 2026-04-08T12:55:00Z
5
value 0.00158
scoring_system epss
scoring_elements 0.3665
published_at 2026-04-09T12:55:00Z
6
value 0.00158
scoring_system epss
scoring_elements 0.36658
published_at 2026-04-11T12:55:00Z
7
value 0.00158
scoring_system epss
scoring_elements 0.36624
published_at 2026-04-12T12:55:00Z
8
value 0.00158
scoring_system epss
scoring_elements 0.36599
published_at 2026-04-13T12:55:00Z
9
value 0.00158
scoring_system epss
scoring_elements 0.36645
published_at 2026-04-16T12:55:00Z
10
value 0.00158
scoring_system epss
scoring_elements 0.36627
published_at 2026-04-18T12:55:00Z
11
value 0.00158
scoring_system epss
scoring_elements 0.36568
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-6728
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6728
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6728
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799096
reference_id 799096
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799096
3
reference_url https://security.gentoo.org/glsa/201510-05
reference_id GLSA-201510-05
reference_type
scores
url https://security.gentoo.org/glsa/201510-05
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2015-6728
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xj9q-7kq3-x7b4
132
url VCID-xjz8-ebps-ckb1
vulnerability_id VCID-xjz8-ebps-ckb1
summary MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 does not generate head items in the context of a given title, which allows remote attackers to obtain sensitive information via a parse action to api.php.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6335
reference_id
reference_type
scores
0
value 0.00273
scoring_system epss
scoring_elements 0.50785
published_at 2026-04-21T12:55:00Z
1
value 0.00273
scoring_system epss
scoring_elements 0.50806
published_at 2026-04-18T12:55:00Z
2
value 0.00273
scoring_system epss
scoring_elements 0.50669
published_at 2026-04-01T12:55:00Z
3
value 0.00273
scoring_system epss
scoring_elements 0.50723
published_at 2026-04-02T12:55:00Z
4
value 0.00273
scoring_system epss
scoring_elements 0.50748
published_at 2026-04-04T12:55:00Z
5
value 0.00273
scoring_system epss
scoring_elements 0.50704
published_at 2026-04-07T12:55:00Z
6
value 0.00273
scoring_system epss
scoring_elements 0.5076
published_at 2026-04-13T12:55:00Z
7
value 0.00273
scoring_system epss
scoring_elements 0.50756
published_at 2026-04-09T12:55:00Z
8
value 0.00273
scoring_system epss
scoring_elements 0.508
published_at 2026-04-16T12:55:00Z
9
value 0.00273
scoring_system epss
scoring_elements 0.50776
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6335
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1369613
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1369613
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6335
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6335
3
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
4
reference_url https://phabricator.wikimedia.org/T139565
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T139565
5
reference_url https://phabricator.wikimedia.org/T139570
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T139570
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.1:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.2:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.3:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.4:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.27.0:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-6335
reference_id CVE-2016-6335
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
1
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2016-6335
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2016-6335
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xjz8-ebps-ckb1
133
url VCID-xqkp-986n-m7f3
vulnerability_id VCID-xqkp-986n-m7f3
summary mediawiki: Improper Access Control to protected pages
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0369.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0369.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-0369
reference_id
reference_type
scores
0
value 0.00141
scoring_system epss
scoring_elements 0.34023
published_at 2026-04-01T12:55:00Z
1
value 0.00141
scoring_system epss
scoring_elements 0.34361
published_at 2026-04-02T12:55:00Z
2
value 0.00141
scoring_system epss
scoring_elements 0.34389
published_at 2026-04-04T12:55:00Z
3
value 0.00141
scoring_system epss
scoring_elements 0.34255
published_at 2026-04-07T12:55:00Z
4
value 0.00141
scoring_system epss
scoring_elements 0.34298
published_at 2026-04-08T12:55:00Z
5
value 0.00141
scoring_system epss
scoring_elements 0.34328
published_at 2026-04-09T12:55:00Z
6
value 0.00141
scoring_system epss
scoring_elements 0.34329
published_at 2026-04-11T12:55:00Z
7
value 0.00141
scoring_system epss
scoring_elements 0.34289
published_at 2026-04-18T12:55:00Z
8
value 0.00141
scoring_system epss
scoring_elements 0.34265
published_at 2026-04-13T12:55:00Z
9
value 0.00141
scoring_system epss
scoring_elements 0.34301
published_at 2026-04-16T12:55:00Z
10
value 0.00141
scoring_system epss
scoring_elements 0.34251
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-0369
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0369
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0369
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1569800
reference_id 1569800
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1569800
4
reference_url https://security.archlinux.org/ASA-201704-3
reference_id ASA-201704-3
reference_type
scores
url https://security.archlinux.org/ASA-201704-3
5
reference_url https://security.archlinux.org/AVG-236
reference_id AVG-236
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-236
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2017-0369
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xqkp-986n-m7f3
134
url VCID-xtd9-wbd9-67ew
vulnerability_id VCID-xtd9-wbd9-67ew
summary Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/user/User.Php. This issue affects MediaWiki: from 1.27.0 before 1.39.13, 1.42.7 1.43.2, 1.44.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-6593
reference_id
reference_type
scores
0
value 0.00016
scoring_system epss
scoring_elements 0.03646
published_at 2026-04-02T12:55:00Z
1
value 0.00016
scoring_system epss
scoring_elements 0.03661
published_at 2026-04-04T12:55:00Z
2
value 0.00016
scoring_system epss
scoring_elements 0.03672
published_at 2026-04-07T12:55:00Z
3
value 0.00016
scoring_system epss
scoring_elements 0.03675
published_at 2026-04-08T12:55:00Z
4
value 0.00016
scoring_system epss
scoring_elements 0.03696
published_at 2026-04-09T12:55:00Z
5
value 0.00017
scoring_system epss
scoring_elements 0.03948
published_at 2026-04-18T12:55:00Z
6
value 0.00017
scoring_system epss
scoring_elements 0.0407
published_at 2026-04-21T12:55:00Z
7
value 0.00017
scoring_system epss
scoring_elements 0.04001
published_at 2026-04-11T12:55:00Z
8
value 0.00017
scoring_system epss
scoring_elements 0.03986
published_at 2026-04-12T12:55:00Z
9
value 0.00017
scoring_system epss
scoring_elements 0.03956
published_at 2026-04-13T12:55:00Z
10
value 0.00017
scoring_system epss
scoring_elements 0.03936
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-6593
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6593
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6593
2
reference_url https://phabricator.wikimedia.org/T396230
reference_id T396230
reference_type
scores
0
value 2.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-04T14:42:43Z/
url https://phabricator.wikimedia.org/T396230
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-6593
risk_score 0.7
exploitability 0.5
weighted_severity 1.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xtd9-wbd9-67ew
135
url VCID-yakw-r8bh-5bde
vulnerability_id VCID-yakw-r8bh-5bde
summary security update
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-28203
reference_id
reference_type
scores
0
value 0.00418
scoring_system epss
scoring_elements 0.61852
published_at 2026-04-18T12:55:00Z
1
value 0.00418
scoring_system epss
scoring_elements 0.61751
published_at 2026-04-07T12:55:00Z
2
value 0.00418
scoring_system epss
scoring_elements 0.61781
published_at 2026-04-04T12:55:00Z
3
value 0.00418
scoring_system epss
scoring_elements 0.618
published_at 2026-04-08T12:55:00Z
4
value 0.00418
scoring_system epss
scoring_elements 0.61815
published_at 2026-04-09T12:55:00Z
5
value 0.00418
scoring_system epss
scoring_elements 0.61835
published_at 2026-04-21T12:55:00Z
6
value 0.00418
scoring_system epss
scoring_elements 0.61823
published_at 2026-04-12T12:55:00Z
7
value 0.00418
scoring_system epss
scoring_elements 0.61803
published_at 2026-04-13T12:55:00Z
8
value 0.00418
scoring_system epss
scoring_elements 0.61847
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-28203
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44854
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44855
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44856
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28201
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28202
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28203
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29248
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31042
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31043
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31090
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31091
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34911
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34912
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41765
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41767
16
reference_url https://security.archlinux.org/AVG-2823
reference_id AVG-2823
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2823
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2022-28203
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yakw-r8bh-5bde
136
url VCID-yc9s-xn4z-jbde
vulnerability_id VCID-yc9s-xn4z-jbde
summary The User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12 and 1.24.x before 1.24.5 does not perform token comparison in constant time before returning, which allows remote attackers to guess the edit token and bypass CSRF protection via a timing attack, a different vulnerability than CVE-2015-8624.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8623
reference_id
reference_type
scores
0
value 0.00128
scoring_system epss
scoring_elements 0.32132
published_at 2026-04-21T12:55:00Z
1
value 0.00128
scoring_system epss
scoring_elements 0.32158
published_at 2026-04-18T12:55:00Z
2
value 0.00128
scoring_system epss
scoring_elements 0.32145
published_at 2026-04-13T12:55:00Z
3
value 0.00128
scoring_system epss
scoring_elements 0.32275
published_at 2026-04-02T12:55:00Z
4
value 0.00128
scoring_system epss
scoring_elements 0.32313
published_at 2026-04-04T12:55:00Z
5
value 0.00128
scoring_system epss
scoring_elements 0.32137
published_at 2026-04-07T12:55:00Z
6
value 0.00128
scoring_system epss
scoring_elements 0.32187
published_at 2026-04-08T12:55:00Z
7
value 0.00128
scoring_system epss
scoring_elements 0.32214
published_at 2026-04-09T12:55:00Z
8
value 0.00128
scoring_system epss
scoring_elements 0.32216
published_at 2026-04-11T12:55:00Z
9
value 0.00128
scoring_system epss
scoring_elements 0.32177
published_at 2026-04-12T12:55:00Z
10
value 0.00128
scoring_system epss
scoring_elements 0.32179
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8623
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8623
2
reference_url https://gerrit.wikimedia.org/r/#/c/156336/5/includes/User.php
reference_id
reference_type
scores
url https://gerrit.wikimedia.org/r/#/c/156336/5/includes/User.php
3
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html
4
reference_url https://phabricator.wikimedia.org/T119309
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T119309
5
reference_url http://www.openwall.com/lists/oss-security/2015/12/21/8
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/12/21/8
6
reference_url http://www.openwall.com/lists/oss-security/2015/12/23/7
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/12/23/7
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8623
reference_id CVE-2015-8623
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
1
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2015-8623
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2015-8623
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yc9s-xn4z-jbde
137
url VCID-yr8d-347g-pugg
vulnerability_id VCID-yr8d-347g-pugg
summary
Wikimedia MediaWik exposed suppressed log in RevisionDelete page
Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12470
reference_id
reference_type
scores
0
value 0.00168
scoring_system epss
scoring_elements 0.3805
published_at 2026-04-02T12:55:00Z
1
value 0.00168
scoring_system epss
scoring_elements 0.37936
published_at 2026-04-21T12:55:00Z
2
value 0.00168
scoring_system epss
scoring_elements 0.38018
published_at 2026-04-16T12:55:00Z
3
value 0.00168
scoring_system epss
scoring_elements 0.38007
published_at 2026-04-08T12:55:00Z
4
value 0.00168
scoring_system epss
scoring_elements 0.37956
published_at 2026-04-07T12:55:00Z
5
value 0.00168
scoring_system epss
scoring_elements 0.38074
published_at 2026-04-04T12:55:00Z
6
value 0.00168
scoring_system epss
scoring_elements 0.37889
published_at 2026-04-01T12:55:00Z
7
value 0.00168
scoring_system epss
scoring_elements 0.37973
published_at 2026-04-13T12:55:00Z
8
value 0.00168
scoring_system epss
scoring_elements 0.37998
published_at 2026-04-18T12:55:00Z
9
value 0.00168
scoring_system epss
scoring_elements 0.38034
published_at 2026-04-11T12:55:00Z
10
value 0.00168
scoring_system epss
scoring_elements 0.38017
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12470
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12466
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12467
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12468
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12469
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12470
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12471
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12472
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12473
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12474
11
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12470.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12470.yaml
12
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
13
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-12470
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-12470
15
reference_url https://phabricator.wikimedia.org/T222038
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T222038
16
reference_url https://seclists.org/bugtraq/2019/Jun/12
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2019/Jun/12
17
reference_url https://www.debian.org/security/2019/dsa-4460
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2019/dsa-4460
18
reference_url https://github.com/advisories/GHSA-733q-m38x-q7cc
reference_id GHSA-733q-m38x-q7cc
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-733q-m38x-q7cc
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
purl pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1na8-nyq1-yfcy
3
vulnerability VCID-2wcb-hty6-uyez
4
vulnerability VCID-2xja-2whv-fqe4
5
vulnerability VCID-32f4-khen-3yez
6
vulnerability VCID-3s9f-prpy-hbcx
7
vulnerability VCID-3zue-5ccg-23hs
8
vulnerability VCID-424y-cjxg-c7az
9
vulnerability VCID-4dfp-3qk9-j7fg
10
vulnerability VCID-4keq-jcfa-13hc
11
vulnerability VCID-4yhr-jjt9-afaq
12
vulnerability VCID-5myd-ngfx-5qhb
13
vulnerability VCID-674z-nf4t-b7ez
14
vulnerability VCID-6ads-gs3n-dubh
15
vulnerability VCID-73p6-esc6-tydd
16
vulnerability VCID-74ej-8sna-jyek
17
vulnerability VCID-7ar6-14bb-yfc5
18
vulnerability VCID-7eba-7gsc-hbfg
19
vulnerability VCID-7j54-uz1w-y3dn
20
vulnerability VCID-7m3q-wuh7-k7fn
21
vulnerability VCID-7wh4-say2-pqap
22
vulnerability VCID-812q-n5hg-u7dx
23
vulnerability VCID-8sqw-6aae-13f5
24
vulnerability VCID-8uw8-ja3w-r3da
25
vulnerability VCID-92hf-r3sb-jbhy
26
vulnerability VCID-9346-9aaj-fkfw
27
vulnerability VCID-95d1-mkm6-r3cq
28
vulnerability VCID-9exs-x5s1-4bhg
29
vulnerability VCID-9g1g-z7d8-c7ah
30
vulnerability VCID-9nnu-4mda-7qg9
31
vulnerability VCID-9xyz-wzr8-wqhz
32
vulnerability VCID-a8nh-mvhd-bka7
33
vulnerability VCID-ad34-frk5-kqds
34
vulnerability VCID-arzd-7xhw-qqb4
35
vulnerability VCID-at9r-vw7p-6bfv
36
vulnerability VCID-av7r-cpew-xkcn
37
vulnerability VCID-azup-qzq7-sbh6
38
vulnerability VCID-b5ke-cjtq-q3ev
39
vulnerability VCID-b8r6-r39r-3ffm
40
vulnerability VCID-bbef-akjp-a3gp
41
vulnerability VCID-brg4-rv29-1fgz
42
vulnerability VCID-c8zy-wsn9-63af
43
vulnerability VCID-ckkj-z5nq-akhb
44
vulnerability VCID-d6kz-e82q-6kh3
45
vulnerability VCID-den1-257q-euc9
46
vulnerability VCID-e8np-4nbw-t3b3
47
vulnerability VCID-ea7c-xk4h-13fs
48
vulnerability VCID-eefm-65rj-pyg2
49
vulnerability VCID-eud3-k24q-6ber
50
vulnerability VCID-fnzm-dxb3-v7hr
51
vulnerability VCID-fptt-2t1j-8fec
52
vulnerability VCID-fwb3-kxy8-73hz
53
vulnerability VCID-gma6-b9cy-kqee
54
vulnerability VCID-h3d2-nr9e-nqbk
55
vulnerability VCID-h789-pcxv-kbgd
56
vulnerability VCID-h8jw-brz8-hkfn
57
vulnerability VCID-j1bz-4bex-4key
58
vulnerability VCID-jm7q-2w3j-buhh
59
vulnerability VCID-jwkd-wdus-6ygg
60
vulnerability VCID-k1f5-msra-4kam
61
vulnerability VCID-k7qb-7hbj-1qc2
62
vulnerability VCID-kjp3-cs2f-t7b4
63
vulnerability VCID-m1j5-3ecf-dffj
64
vulnerability VCID-m1xy-yucr-dqfs
65
vulnerability VCID-m7uw-sa5j-u3bw
66
vulnerability VCID-mbs4-gs37-1fh5
67
vulnerability VCID-nwsr-ruca-2kha
68
vulnerability VCID-pm3s-z5ap-qqay
69
vulnerability VCID-pm5t-23j4-6yh6
70
vulnerability VCID-pw9d-1cwb-tyb9
71
vulnerability VCID-pwjk-pzpj-aff6
72
vulnerability VCID-qjhk-97j6-2qfm
73
vulnerability VCID-qmx3-kcnd-zuhe
74
vulnerability VCID-qpgu-mg6m-vyef
75
vulnerability VCID-qqvd-cjs3-7kab
76
vulnerability VCID-qwcp-5hh8-z3gp
77
vulnerability VCID-ruur-4cvx-cqct
78
vulnerability VCID-rwtk-hep1-xfaw
79
vulnerability VCID-rz65-w7x5-57hu
80
vulnerability VCID-sc5s-s7vg-dygq
81
vulnerability VCID-sca5-n7rz-rffq
82
vulnerability VCID-sf61-byhw-17gv
83
vulnerability VCID-sr9a-a6vt-1qgt
84
vulnerability VCID-t6w8-cgct-gbgz
85
vulnerability VCID-tq2e-c9ym-a3hj
86
vulnerability VCID-tutk-y8jg-n7dh
87
vulnerability VCID-u2xc-ztge-p3bv
88
vulnerability VCID-ujdn-y48t-pbch
89
vulnerability VCID-uzv4-9xtx-ryhr
90
vulnerability VCID-v27j-4pnt-n7h9
91
vulnerability VCID-v3dp-7stt-tygf
92
vulnerability VCID-vjd5-jv5h-yfhw
93
vulnerability VCID-w3f8-nrqd-p7gq
94
vulnerability VCID-w51y-hprj-buap
95
vulnerability VCID-wraf-59ce-u3br
96
vulnerability VCID-wzqf-k99e-vbeu
97
vulnerability VCID-xtd9-wbd9-67ew
98
vulnerability VCID-yakw-r8bh-5bde
99
vulnerability VCID-yr8d-347g-pugg
100
vulnerability VCID-z3qw-4ejj-uffj
101
vulnerability VCID-z8qp-v64u-tuh8
102
vulnerability VCID-z9d9-aer5-gfa9
103
vulnerability VCID-zgdf-mxfn-gbea
104
vulnerability VCID-zj5a-p9u4-ducw
105
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.7-1~deb9u3
1
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2019-12470, GHSA-733q-m38x-q7cc
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yr8d-347g-pugg
138
url VCID-z3qw-4ejj-uffj
vulnerability_id VCID-z3qw-4ejj-uffj
summary Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fields/HTMLMultiSelectField.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3469
reference_id
reference_type
scores
0
value 0.00436
scoring_system epss
scoring_elements 0.62921
published_at 2026-04-02T12:55:00Z
1
value 0.00523
scoring_system epss
scoring_elements 0.6693
published_at 2026-04-21T12:55:00Z
2
value 0.00523
scoring_system epss
scoring_elements 0.66932
published_at 2026-04-16T12:55:00Z
3
value 0.00523
scoring_system epss
scoring_elements 0.66947
published_at 2026-04-18T12:55:00Z
4
value 0.00523
scoring_system epss
scoring_elements 0.6689
published_at 2026-04-04T12:55:00Z
5
value 0.00523
scoring_system epss
scoring_elements 0.66863
published_at 2026-04-07T12:55:00Z
6
value 0.00523
scoring_system epss
scoring_elements 0.66911
published_at 2026-04-08T12:55:00Z
7
value 0.00523
scoring_system epss
scoring_elements 0.66925
published_at 2026-04-09T12:55:00Z
8
value 0.00523
scoring_system epss
scoring_elements 0.66945
published_at 2026-04-11T12:55:00Z
9
value 0.00523
scoring_system epss
scoring_elements 0.66931
published_at 2026-04-12T12:55:00Z
10
value 0.00523
scoring_system epss
scoring_elements 0.66899
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3469
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3469
2
reference_url https://phabricator.wikimedia.org/T358689
reference_id T358689
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/RE:M/U:Green
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-10T19:06:28Z/
url https://phabricator.wikimedia.org/T358689
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-3469
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z3qw-4ejj-uffj
139
url VCID-z8qp-v64u-tuh8
vulnerability_id VCID-z8qp-v64u-tuh8
summary MediaWiki: MediaWiki: Vulnerability in ApiFormatXml.Php requiring high privileges
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-67484.json
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-67484.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67484
reference_id
reference_type
scores
0
value 0.00033
scoring_system epss
scoring_elements 0.09518
published_at 2026-04-21T12:55:00Z
1
value 0.00033
scoring_system epss
scoring_elements 0.09366
published_at 2026-04-16T12:55:00Z
2
value 0.00033
scoring_system epss
scoring_elements 0.09368
published_at 2026-04-18T12:55:00Z
3
value 0.00034
scoring_system epss
scoring_elements 0.09879
published_at 2026-04-07T12:55:00Z
4
value 0.00034
scoring_system epss
scoring_elements 0.09933
published_at 2026-04-02T12:55:00Z
5
value 0.00034
scoring_system epss
scoring_elements 0.09954
published_at 2026-04-08T12:55:00Z
6
value 0.00034
scoring_system epss
scoring_elements 0.10004
published_at 2026-04-09T12:55:00Z
7
value 0.00034
scoring_system epss
scoring_elements 0.10019
published_at 2026-04-11T12:55:00Z
8
value 0.00034
scoring_system epss
scoring_elements 0.09981
published_at 2026-04-04T12:55:00Z
9
value 0.0004
scoring_system epss
scoring_elements 0.12073
published_at 2026-04-12T12:55:00Z
10
value 0.0004
scoring_system epss
scoring_elements 0.12043
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67484
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67484
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67484
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2436190
reference_id 2436190
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2436190
4
reference_url https://phabricator.wikimedia.org/T401995
reference_id T401995
reference_type
scores
0
value 0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:02:03Z/
url https://phabricator.wikimedia.org/T401995
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-67484
risk_score 2.1
exploitability 0.5
weighted_severity 4.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z8qp-v64u-tuh8
140
url VCID-z9d9-aer5-gfa9
vulnerability_id VCID-z9d9-aer5-gfa9
summary Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-41800.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-41800.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-41800
reference_id
reference_type
scores
0
value 0.00177
scoring_system epss
scoring_elements 0.3925
published_at 2026-04-21T12:55:00Z
1
value 0.00177
scoring_system epss
scoring_elements 0.39342
published_at 2026-04-08T12:55:00Z
2
value 0.00177
scoring_system epss
scoring_elements 0.39337
published_at 2026-04-18T12:55:00Z
3
value 0.00177
scoring_system epss
scoring_elements 0.39365
published_at 2026-04-16T12:55:00Z
4
value 0.00177
scoring_system epss
scoring_elements 0.39313
published_at 2026-04-13T12:55:00Z
5
value 0.00177
scoring_system epss
scoring_elements 0.39331
published_at 2026-04-12T12:55:00Z
6
value 0.00177
scoring_system epss
scoring_elements 0.39164
published_at 2026-04-01T12:55:00Z
7
value 0.00177
scoring_system epss
scoring_elements 0.39371
published_at 2026-04-11T12:55:00Z
8
value 0.00177
scoring_system epss
scoring_elements 0.3935
published_at 2026-04-02T12:55:00Z
9
value 0.00177
scoring_system epss
scoring_elements 0.39374
published_at 2026-04-04T12:55:00Z
10
value 0.00177
scoring_system epss
scoring_elements 0.39287
published_at 2026-04-07T12:55:00Z
11
value 0.00177
scoring_system epss
scoring_elements 0.39359
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-41800
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35197
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35197
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41798
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41798
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41799
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41799
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41800
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41800
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41801
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41801
7
reference_url https://github.com/wikimedia/mediawiki/commit/781caf83dba90c18349f930bbaaa0e89f003f874
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki/commit/781caf83dba90c18349f930bbaaa0e89f003f874
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CJDYJQWT43GBD6GNQ4OW7JOZ6WQ6DZTN
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CJDYJQWT43GBD6GNQ4OW7JOZ6WQ6DZTN
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CJDYJQWT43GBD6GNQ4OW7JOZ6WQ6DZTN/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CJDYJQWT43GBD6GNQ4OW7JOZ6WQ6DZTN/
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDBPECBWN6LWNSWIQMVXK6PP4YFEUYHA
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDBPECBWN6LWNSWIQMVXK6PP4YFEUYHA
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDBPECBWN6LWNSWIQMVXK6PP4YFEUYHA/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDBPECBWN6LWNSWIQMVXK6PP4YFEUYHA/
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QNEAI2T3Y65I55ZB6UE6RMC662RZTGRX
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QNEAI2T3Y65I55ZB6UE6RMC662RZTGRX
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QNEAI2T3Y65I55ZB6UE6RMC662RZTGRX/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QNEAI2T3Y65I55ZB6UE6RMC662RZTGRX/
14
reference_url https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/2IFS5CM2YV4VMSODPX3J2LFHKSEWVFV5
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/2IFS5CM2YV4VMSODPX3J2LFHKSEWVFV5
15
reference_url https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/2IFS5CM2YV4VMSODPX3J2LFHKSEWVFV5/
reference_id
reference_type
scores
url https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/2IFS5CM2YV4VMSODPX3J2LFHKSEWVFV5/
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41800
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-41800
17
reference_url https://phabricator.wikimedia.org/T284419
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T284419
18
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2009517
reference_id 2009517
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2009517
19
reference_url https://security.archlinux.org/AVG-2434
reference_id AVG-2434
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2434
20
reference_url https://github.com/advisories/GHSA-c8wv-qwwc-6j73
reference_id GHSA-c8wv-qwwc-6j73
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c8wv-qwwc-6j73
21
reference_url https://security.gentoo.org/glsa/202305-24
reference_id GLSA-202305-24
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202305-24
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
1
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2021-41800, GHSA-c8wv-qwwc-6j73
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z9d9-aer5-gfa9
141
url VCID-zgdf-mxfn-gbea
vulnerability_id VCID-zgdf-mxfn-gbea
summary
img_auth.php may leak private extension images into the public cache
In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis behind a caching server using the img_auth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them. This occurs because Cache-Control and Vary headers were mishandled.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15005.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15005.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-15005
reference_id
reference_type
scores
0
value 0.00737
scoring_system epss
scoring_elements 0.72868
published_at 2026-04-21T12:55:00Z
1
value 0.00737
scoring_system epss
scoring_elements 0.72768
published_at 2026-04-01T12:55:00Z
2
value 0.00737
scoring_system epss
scoring_elements 0.72776
published_at 2026-04-02T12:55:00Z
3
value 0.00737
scoring_system epss
scoring_elements 0.72796
published_at 2026-04-04T12:55:00Z
4
value 0.00737
scoring_system epss
scoring_elements 0.72773
published_at 2026-04-07T12:55:00Z
5
value 0.00737
scoring_system epss
scoring_elements 0.72811
published_at 2026-04-08T12:55:00Z
6
value 0.00737
scoring_system epss
scoring_elements 0.72825
published_at 2026-04-09T12:55:00Z
7
value 0.00737
scoring_system epss
scoring_elements 0.7285
published_at 2026-04-11T12:55:00Z
8
value 0.00737
scoring_system epss
scoring_elements 0.72833
published_at 2026-04-12T12:55:00Z
9
value 0.00737
scoring_system epss
scoring_elements 0.72824
published_at 2026-04-13T12:55:00Z
10
value 0.00737
scoring_system epss
scoring_elements 0.72866
published_at 2026-04-16T12:55:00Z
11
value 0.00737
scoring_system epss
scoring_elements 0.72876
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-15005
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15005
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17367
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17368
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25812
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25813
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25814
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25827
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25828
10
reference_url https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_31/RELEASE-NOTES-1.31
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_31/RELEASE-NOTES-1.31
11
reference_url https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_33/RELEASE-NOTES-1.33
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_33/RELEASE-NOTES-1.33
12
reference_url https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_34/RELEASE-NOTES-1.34
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_34/RELEASE-NOTES-1.34
13
reference_url https://github.com/wikimedia/mediawiki
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wikimedia/mediawiki
14
reference_url https://lists.debian.org/debian-lts-announce/2020/12/msg00034.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/12/msg00034.html
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EEZIMLJMJS72SJXPYL736XMUAVCRQD2H
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EEZIMLJMJS72SJXPYL736XMUAVCRQD2H
16
reference_url https://lists.wikimedia.org/pipermail/wikitech-l/2020-June/093535.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.wikimedia.org/pipermail/wikitech-l/2020-June/093535.html
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-15005
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-15005
18
reference_url https://phabricator.wikimedia.org/T248947
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://phabricator.wikimedia.org/T248947
19
reference_url https://www.debian.org/security/2020/dsa-4767
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2020/dsa-4767
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1851026
reference_id 1851026
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1851026
21
reference_url https://github.com/advisories/GHSA-xpv7-93cm-4mxv
reference_id GHSA-xpv7-93cm-4mxv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xpv7-93cm-4mxv
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
purl pkg:deb/debian/mediawiki@1:1.31.16-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1na8-nyq1-yfcy
1
vulnerability VCID-2wcb-hty6-uyez
2
vulnerability VCID-2xja-2whv-fqe4
3
vulnerability VCID-32f4-khen-3yez
4
vulnerability VCID-3zue-5ccg-23hs
5
vulnerability VCID-424y-cjxg-c7az
6
vulnerability VCID-4dfp-3qk9-j7fg
7
vulnerability VCID-4yhr-jjt9-afaq
8
vulnerability VCID-5myd-ngfx-5qhb
9
vulnerability VCID-674z-nf4t-b7ez
10
vulnerability VCID-6ads-gs3n-dubh
11
vulnerability VCID-73p6-esc6-tydd
12
vulnerability VCID-74ej-8sna-jyek
13
vulnerability VCID-7ar6-14bb-yfc5
14
vulnerability VCID-7eba-7gsc-hbfg
15
vulnerability VCID-7j54-uz1w-y3dn
16
vulnerability VCID-7m3q-wuh7-k7fn
17
vulnerability VCID-7wh4-say2-pqap
18
vulnerability VCID-812q-n5hg-u7dx
19
vulnerability VCID-8sqw-6aae-13f5
20
vulnerability VCID-8uw8-ja3w-r3da
21
vulnerability VCID-92hf-r3sb-jbhy
22
vulnerability VCID-9346-9aaj-fkfw
23
vulnerability VCID-95d1-mkm6-r3cq
24
vulnerability VCID-9exs-x5s1-4bhg
25
vulnerability VCID-9g1g-z7d8-c7ah
26
vulnerability VCID-9nnu-4mda-7qg9
27
vulnerability VCID-9xyz-wzr8-wqhz
28
vulnerability VCID-a8nh-mvhd-bka7
29
vulnerability VCID-ad34-frk5-kqds
30
vulnerability VCID-arzd-7xhw-qqb4
31
vulnerability VCID-av7r-cpew-xkcn
32
vulnerability VCID-azup-qzq7-sbh6
33
vulnerability VCID-b5ke-cjtq-q3ev
34
vulnerability VCID-b8r6-r39r-3ffm
35
vulnerability VCID-brg4-rv29-1fgz
36
vulnerability VCID-c8zy-wsn9-63af
37
vulnerability VCID-ckkj-z5nq-akhb
38
vulnerability VCID-d6kz-e82q-6kh3
39
vulnerability VCID-den1-257q-euc9
40
vulnerability VCID-e8np-4nbw-t3b3
41
vulnerability VCID-ea7c-xk4h-13fs
42
vulnerability VCID-eefm-65rj-pyg2
43
vulnerability VCID-fnzm-dxb3-v7hr
44
vulnerability VCID-fptt-2t1j-8fec
45
vulnerability VCID-fwb3-kxy8-73hz
46
vulnerability VCID-h3d2-nr9e-nqbk
47
vulnerability VCID-h789-pcxv-kbgd
48
vulnerability VCID-h8jw-brz8-hkfn
49
vulnerability VCID-j1bz-4bex-4key
50
vulnerability VCID-jm7q-2w3j-buhh
51
vulnerability VCID-jwkd-wdus-6ygg
52
vulnerability VCID-k1f5-msra-4kam
53
vulnerability VCID-k7qb-7hbj-1qc2
54
vulnerability VCID-m1j5-3ecf-dffj
55
vulnerability VCID-m1xy-yucr-dqfs
56
vulnerability VCID-m7uw-sa5j-u3bw
57
vulnerability VCID-mbs4-gs37-1fh5
58
vulnerability VCID-nwsr-ruca-2kha
59
vulnerability VCID-pm3s-z5ap-qqay
60
vulnerability VCID-pm5t-23j4-6yh6
61
vulnerability VCID-pw9d-1cwb-tyb9
62
vulnerability VCID-pwjk-pzpj-aff6
63
vulnerability VCID-qjhk-97j6-2qfm
64
vulnerability VCID-qpgu-mg6m-vyef
65
vulnerability VCID-qqvd-cjs3-7kab
66
vulnerability VCID-qwcp-5hh8-z3gp
67
vulnerability VCID-ruur-4cvx-cqct
68
vulnerability VCID-rwtk-hep1-xfaw
69
vulnerability VCID-rz65-w7x5-57hu
70
vulnerability VCID-sc5s-s7vg-dygq
71
vulnerability VCID-sca5-n7rz-rffq
72
vulnerability VCID-sr9a-a6vt-1qgt
73
vulnerability VCID-tutk-y8jg-n7dh
74
vulnerability VCID-ujdn-y48t-pbch
75
vulnerability VCID-v3dp-7stt-tygf
76
vulnerability VCID-vjd5-jv5h-yfhw
77
vulnerability VCID-w51y-hprj-buap
78
vulnerability VCID-wraf-59ce-u3br
79
vulnerability VCID-wzqf-k99e-vbeu
80
vulnerability VCID-xtd9-wbd9-67ew
81
vulnerability VCID-yakw-r8bh-5bde
82
vulnerability VCID-z3qw-4ejj-uffj
83
vulnerability VCID-z8qp-v64u-tuh8
84
vulnerability VCID-z9d9-aer5-gfa9
85
vulnerability VCID-zj5a-p9u4-ducw
86
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.31.16-1%252Bdeb10u2
aliases CVE-2020-15005, GHSA-xpv7-93cm-4mxv
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zgdf-mxfn-gbea
142
url VCID-zhp6-af71-57gk
vulnerability_id VCID-zhp6-af71-57gk
summary The User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 generates passwords smaller than $wgMinimalPasswordLength, which makes it easier for remote attackers to obtain access via a brute-force attack.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8626
reference_id
reference_type
scores
0
value 0.00642
scoring_system epss
scoring_elements 0.70629
published_at 2026-04-21T12:55:00Z
1
value 0.00642
scoring_system epss
scoring_elements 0.70651
published_at 2026-04-18T12:55:00Z
2
value 0.00642
scoring_system epss
scoring_elements 0.70533
published_at 2026-04-01T12:55:00Z
3
value 0.00642
scoring_system epss
scoring_elements 0.70547
published_at 2026-04-02T12:55:00Z
4
value 0.00642
scoring_system epss
scoring_elements 0.70564
published_at 2026-04-04T12:55:00Z
5
value 0.00642
scoring_system epss
scoring_elements 0.70541
published_at 2026-04-07T12:55:00Z
6
value 0.00642
scoring_system epss
scoring_elements 0.70587
published_at 2026-04-08T12:55:00Z
7
value 0.00642
scoring_system epss
scoring_elements 0.70602
published_at 2026-04-09T12:55:00Z
8
value 0.00642
scoring_system epss
scoring_elements 0.70625
published_at 2026-04-11T12:55:00Z
9
value 0.00642
scoring_system epss
scoring_elements 0.7061
published_at 2026-04-12T12:55:00Z
10
value 0.00642
scoring_system epss
scoring_elements 0.70596
published_at 2026-04-13T12:55:00Z
11
value 0.00642
scoring_system epss
scoring_elements 0.70641
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8626
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8626
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8626
2
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html
3
reference_url https://phabricator.wikimedia.org/T115522
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T115522
4
reference_url http://www.openwall.com/lists/oss-security/2015/12/21/8
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/12/21/8
5
reference_url http://www.openwall.com/lists/oss-security/2015/12/23/7
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2015/12/23/7
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.0:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.1:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.2:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.3:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.24.4:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.0:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.1:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.2:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.25.3:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.26.0:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8626
reference_id CVE-2015-8626
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
1
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2015-8626
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2015-8626
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zhp6-af71-57gk
143
url VCID-zj5a-p9u4-ducw
vulnerability_id VCID-zj5a-p9u4-ducw
summary mediawiki: XSS in youhavenewmessagesmanyusers and youhavenewmessages i18n messages
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-45360.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-45360.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-45360
reference_id
reference_type
scores
0
value 0.00393
scoring_system epss
scoring_elements 0.60318
published_at 2026-04-21T12:55:00Z
1
value 0.00393
scoring_system epss
scoring_elements 0.60283
published_at 2026-04-13T12:55:00Z
2
value 0.00393
scoring_system epss
scoring_elements 0.60323
published_at 2026-04-16T12:55:00Z
3
value 0.00393
scoring_system epss
scoring_elements 0.6033
published_at 2026-04-18T12:55:00Z
4
value 0.00393
scoring_system epss
scoring_elements 0.60236
published_at 2026-04-02T12:55:00Z
5
value 0.00393
scoring_system epss
scoring_elements 0.60262
published_at 2026-04-04T12:55:00Z
6
value 0.00393
scoring_system epss
scoring_elements 0.60229
published_at 2026-04-07T12:55:00Z
7
value 0.00393
scoring_system epss
scoring_elements 0.60279
published_at 2026-04-08T12:55:00Z
8
value 0.00393
scoring_system epss
scoring_elements 0.60294
published_at 2026-04-09T12:55:00Z
9
value 0.00393
scoring_system epss
scoring_elements 0.60314
published_at 2026-04-11T12:55:00Z
10
value 0.00393
scoring_system epss
scoring_elements 0.60301
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-45360
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3550
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3550
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45360
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45360
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45362
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45362
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45363
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45363
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2247803
reference_id 2247803
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2247803
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FU2FGUXXK6TMV6R52VRECLC6XCSQQISY/
reference_id FU2FGUXXK6TMV6R52VRECLC6XCSQQISY
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-11T14:08:22Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FU2FGUXXK6TMV6R52VRECLC6XCSQQISY/
8
reference_url https://phabricator.wikimedia.org/T340221
reference_id T340221
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-11T14:08:22Z/
url https://phabricator.wikimedia.org/T340221
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
purl pkg:deb/debian/mediawiki@1:1.35.13-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2wcb-hty6-uyez
1
vulnerability VCID-3zue-5ccg-23hs
2
vulnerability VCID-4yhr-jjt9-afaq
3
vulnerability VCID-5myd-ngfx-5qhb
4
vulnerability VCID-74ej-8sna-jyek
5
vulnerability VCID-7831-8u7z-6fep
6
vulnerability VCID-7wh4-say2-pqap
7
vulnerability VCID-8uw8-ja3w-r3da
8
vulnerability VCID-95d1-mkm6-r3cq
9
vulnerability VCID-a8nh-mvhd-bka7
10
vulnerability VCID-b5ke-cjtq-q3ev
11
vulnerability VCID-cbtm-g4t5-u3am
12
vulnerability VCID-d5vz-puw9-t7er
13
vulnerability VCID-den1-257q-euc9
14
vulnerability VCID-e8np-4nbw-t3b3
15
vulnerability VCID-fptt-2t1j-8fec
16
vulnerability VCID-h3d2-nr9e-nqbk
17
vulnerability VCID-h789-pcxv-kbgd
18
vulnerability VCID-k7qb-7hbj-1qc2
19
vulnerability VCID-kw32-af5a-hqg8
20
vulnerability VCID-m1xy-yucr-dqfs
21
vulnerability VCID-m7uw-sa5j-u3bw
22
vulnerability VCID-mbs4-gs37-1fh5
23
vulnerability VCID-pm3s-z5ap-qqay
24
vulnerability VCID-pwjk-pzpj-aff6
25
vulnerability VCID-qpgu-mg6m-vyef
26
vulnerability VCID-sr9a-a6vt-1qgt
27
vulnerability VCID-tutk-y8jg-n7dh
28
vulnerability VCID-v3dp-7stt-tygf
29
vulnerability VCID-vjd5-jv5h-yfhw
30
vulnerability VCID-w51y-hprj-buap
31
vulnerability VCID-wktm-ya6k-v7dv
32
vulnerability VCID-wraf-59ce-u3br
33
vulnerability VCID-x8t7-agtn-zudu
34
vulnerability VCID-xtd9-wbd9-67ew
35
vulnerability VCID-z3qw-4ejj-uffj
36
vulnerability VCID-z8qp-v64u-tuh8
37
vulnerability VCID-zmax-894d-5kfd
38
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.35.13-1%252Bdeb11u2
aliases CVE-2023-45360
risk_score 2.5
exploitability 0.5
weighted_severity 4.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zj5a-p9u4-ducw
144
url VCID-zmzk-jv3z-tub4
vulnerability_id VCID-zmzk-jv3z-tub4
summary mediawiki: open redirect to external sites
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0363.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0363.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-0363
reference_id
reference_type
scores
0
value 0.00205
scoring_system epss
scoring_elements 0.42617
published_at 2026-04-01T12:55:00Z
1
value 0.00205
scoring_system epss
scoring_elements 0.42687
published_at 2026-04-13T12:55:00Z
2
value 0.00205
scoring_system epss
scoring_elements 0.42715
published_at 2026-04-04T12:55:00Z
3
value 0.00205
scoring_system epss
scoring_elements 0.42655
published_at 2026-04-07T12:55:00Z
4
value 0.00205
scoring_system epss
scoring_elements 0.42706
published_at 2026-04-08T12:55:00Z
5
value 0.00205
scoring_system epss
scoring_elements 0.42719
published_at 2026-04-09T12:55:00Z
6
value 0.00205
scoring_system epss
scoring_elements 0.4274
published_at 2026-04-11T12:55:00Z
7
value 0.00205
scoring_system epss
scoring_elements 0.42704
published_at 2026-04-12T12:55:00Z
8
value 0.00205
scoring_system epss
scoring_elements 0.42749
published_at 2026-04-16T12:55:00Z
9
value 0.00205
scoring_system epss
scoring_elements 0.42737
published_at 2026-04-18T12:55:00Z
10
value 0.00205
scoring_system epss
scoring_elements 0.42674
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-0363
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0363
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0363
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1569749
reference_id 1569749
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1569749
4
reference_url https://security.archlinux.org/ASA-201704-3
reference_id ASA-201704-3
reference_type
scores
url https://security.archlinux.org/ASA-201704-3
5
reference_url https://security.archlinux.org/AVG-236
reference_id AVG-236
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-236
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2017-0363
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zmzk-jv3z-tub4
145
url VCID-ztxx-cc2c-87at
vulnerability_id VCID-ztxx-cc2c-87at
summary Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/recentchanges/RecentChangeRCFeedNotifier.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61643
reference_id
reference_type
scores
0
value 7e-05
scoring_system epss
scoring_elements 0.00619
published_at 2026-04-02T12:55:00Z
1
value 7e-05
scoring_system epss
scoring_elements 0.00611
published_at 2026-04-04T12:55:00Z
2
value 7e-05
scoring_system epss
scoring_elements 0.00614
published_at 2026-04-07T12:55:00Z
3
value 7e-05
scoring_system epss
scoring_elements 0.00612
published_at 2026-04-08T12:55:00Z
4
value 7e-05
scoring_system epss
scoring_elements 0.00606
published_at 2026-04-09T12:55:00Z
5
value 8e-05
scoring_system epss
scoring_elements 0.0077
published_at 2026-04-12T12:55:00Z
6
value 8e-05
scoring_system epss
scoring_elements 0.0082
published_at 2026-04-21T12:55:00Z
7
value 8e-05
scoring_system epss
scoring_elements 0.00777
published_at 2026-04-11T12:55:00Z
8
value 8e-05
scoring_system epss
scoring_elements 0.00776
published_at 2026-04-18T12:55:00Z
9
value 8e-05
scoring_system epss
scoring_elements 0.00772
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61643
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61643
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61643
2
reference_url https://phabricator.wikimedia.org/T403757
reference_id T403757
reference_type
scores
0
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/RE:M/U:Green
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-03T21:15:36Z/
url https://phabricator.wikimedia.org/T403757
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
purl pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7831-8u7z-6fep
1
vulnerability VCID-cbtm-g4t5-u3am
2
vulnerability VCID-d5vz-puw9-t7er
3
vulnerability VCID-kw32-af5a-hqg8
4
vulnerability VCID-wktm-ya6k-v7dv
5
vulnerability VCID-x8t7-agtn-zudu
6
vulnerability VCID-zmax-894d-5kfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.39.17-1~deb12u1
aliases CVE-2025-61643
risk_score 0.8
exploitability 0.5
weighted_severity 1.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ztxx-cc2c-87at
146
url VCID-zz68-pwk2-abew
vulnerability_id VCID-zz68-pwk2-abew
summary mediawiki: XSS in SearchHighlighter::highlightText()
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0365.json
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0365.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-0365
reference_id
reference_type
scores
0
value 0.00303
scoring_system epss
scoring_elements 0.53511
published_at 2026-04-01T12:55:00Z
1
value 0.00303
scoring_system epss
scoring_elements 0.53534
published_at 2026-04-02T12:55:00Z
2
value 0.00303
scoring_system epss
scoring_elements 0.5356
published_at 2026-04-04T12:55:00Z
3
value 0.00303
scoring_system epss
scoring_elements 0.53529
published_at 2026-04-07T12:55:00Z
4
value 0.00303
scoring_system epss
scoring_elements 0.53579
published_at 2026-04-08T12:55:00Z
5
value 0.00303
scoring_system epss
scoring_elements 0.53575
published_at 2026-04-09T12:55:00Z
6
value 0.00303
scoring_system epss
scoring_elements 0.53625
published_at 2026-04-11T12:55:00Z
7
value 0.00303
scoring_system epss
scoring_elements 0.53607
published_at 2026-04-12T12:55:00Z
8
value 0.00303
scoring_system epss
scoring_elements 0.5359
published_at 2026-04-13T12:55:00Z
9
value 0.00303
scoring_system epss
scoring_elements 0.53627
published_at 2026-04-16T12:55:00Z
10
value 0.00303
scoring_system epss
scoring_elements 0.53632
published_at 2026-04-18T12:55:00Z
11
value 0.00303
scoring_system epss
scoring_elements 0.53616
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-0365
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0365
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0365
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1569782
reference_id 1569782
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1569782
4
reference_url https://security.archlinux.org/ASA-201704-3
reference_id ASA-201704-3
reference_type
scores
url https://security.archlinux.org/ASA-201704-3
5
reference_url https://security.archlinux.org/AVG-236
reference_id AVG-236
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-236
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
purl pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1na8-nyq1-yfcy
4
vulnerability VCID-22yj-98wv-skc9
5
vulnerability VCID-2abz-k2yv-zkbp
6
vulnerability VCID-2wcb-hty6-uyez
7
vulnerability VCID-2xja-2whv-fqe4
8
vulnerability VCID-32f4-khen-3yez
9
vulnerability VCID-3s9f-prpy-hbcx
10
vulnerability VCID-3zue-5ccg-23hs
11
vulnerability VCID-424y-cjxg-c7az
12
vulnerability VCID-4dfp-3qk9-j7fg
13
vulnerability VCID-4keq-jcfa-13hc
14
vulnerability VCID-4yhr-jjt9-afaq
15
vulnerability VCID-5myd-ngfx-5qhb
16
vulnerability VCID-674z-nf4t-b7ez
17
vulnerability VCID-6ads-gs3n-dubh
18
vulnerability VCID-6jq2-8mv5-pqaa
19
vulnerability VCID-73p6-esc6-tydd
20
vulnerability VCID-74ej-8sna-jyek
21
vulnerability VCID-7ar6-14bb-yfc5
22
vulnerability VCID-7eba-7gsc-hbfg
23
vulnerability VCID-7j54-uz1w-y3dn
24
vulnerability VCID-7m3q-wuh7-k7fn
25
vulnerability VCID-7wh4-say2-pqap
26
vulnerability VCID-812q-n5hg-u7dx
27
vulnerability VCID-8sqw-6aae-13f5
28
vulnerability VCID-8uw8-ja3w-r3da
29
vulnerability VCID-92hf-r3sb-jbhy
30
vulnerability VCID-9346-9aaj-fkfw
31
vulnerability VCID-95d1-mkm6-r3cq
32
vulnerability VCID-9exs-x5s1-4bhg
33
vulnerability VCID-9g1g-z7d8-c7ah
34
vulnerability VCID-9nnu-4mda-7qg9
35
vulnerability VCID-9xyz-wzr8-wqhz
36
vulnerability VCID-a8nh-mvhd-bka7
37
vulnerability VCID-ad34-frk5-kqds
38
vulnerability VCID-arzd-7xhw-qqb4
39
vulnerability VCID-at9r-vw7p-6bfv
40
vulnerability VCID-av7r-cpew-xkcn
41
vulnerability VCID-azup-qzq7-sbh6
42
vulnerability VCID-b5ke-cjtq-q3ev
43
vulnerability VCID-b8r6-r39r-3ffm
44
vulnerability VCID-bbef-akjp-a3gp
45
vulnerability VCID-brg4-rv29-1fgz
46
vulnerability VCID-c8zy-wsn9-63af
47
vulnerability VCID-ckkj-z5nq-akhb
48
vulnerability VCID-d6kz-e82q-6kh3
49
vulnerability VCID-dbed-h6a2-fucf
50
vulnerability VCID-den1-257q-euc9
51
vulnerability VCID-e8np-4nbw-t3b3
52
vulnerability VCID-ea7c-xk4h-13fs
53
vulnerability VCID-eefm-65rj-pyg2
54
vulnerability VCID-eud3-k24q-6ber
55
vulnerability VCID-fnzm-dxb3-v7hr
56
vulnerability VCID-fptt-2t1j-8fec
57
vulnerability VCID-fwb3-kxy8-73hz
58
vulnerability VCID-gma6-b9cy-kqee
59
vulnerability VCID-h3d2-nr9e-nqbk
60
vulnerability VCID-h789-pcxv-kbgd
61
vulnerability VCID-h8jw-brz8-hkfn
62
vulnerability VCID-j1bz-4bex-4key
63
vulnerability VCID-jm7q-2w3j-buhh
64
vulnerability VCID-jwkd-wdus-6ygg
65
vulnerability VCID-k1f5-msra-4kam
66
vulnerability VCID-k7qb-7hbj-1qc2
67
vulnerability VCID-kjp3-cs2f-t7b4
68
vulnerability VCID-m1j5-3ecf-dffj
69
vulnerability VCID-m1xy-yucr-dqfs
70
vulnerability VCID-m7uw-sa5j-u3bw
71
vulnerability VCID-mbs4-gs37-1fh5
72
vulnerability VCID-nwsr-ruca-2kha
73
vulnerability VCID-pm3s-z5ap-qqay
74
vulnerability VCID-pm5t-23j4-6yh6
75
vulnerability VCID-pw9d-1cwb-tyb9
76
vulnerability VCID-pwjk-pzpj-aff6
77
vulnerability VCID-qjhk-97j6-2qfm
78
vulnerability VCID-qmx3-kcnd-zuhe
79
vulnerability VCID-qpgu-mg6m-vyef
80
vulnerability VCID-qqvd-cjs3-7kab
81
vulnerability VCID-qwcp-5hh8-z3gp
82
vulnerability VCID-ruur-4cvx-cqct
83
vulnerability VCID-rwtk-hep1-xfaw
84
vulnerability VCID-rz65-w7x5-57hu
85
vulnerability VCID-sc5s-s7vg-dygq
86
vulnerability VCID-sca5-n7rz-rffq
87
vulnerability VCID-sf61-byhw-17gv
88
vulnerability VCID-sr9a-a6vt-1qgt
89
vulnerability VCID-t6w8-cgct-gbgz
90
vulnerability VCID-tq2e-c9ym-a3hj
91
vulnerability VCID-tutk-y8jg-n7dh
92
vulnerability VCID-u2xc-ztge-p3bv
93
vulnerability VCID-ujdn-y48t-pbch
94
vulnerability VCID-uzv4-9xtx-ryhr
95
vulnerability VCID-v27j-4pnt-n7h9
96
vulnerability VCID-v3dp-7stt-tygf
97
vulnerability VCID-vjd5-jv5h-yfhw
98
vulnerability VCID-w3f8-nrqd-p7gq
99
vulnerability VCID-w51y-hprj-buap
100
vulnerability VCID-weh4-ev3r-jyep
101
vulnerability VCID-wjx4-aawn-23f6
102
vulnerability VCID-wraf-59ce-u3br
103
vulnerability VCID-wzqf-k99e-vbeu
104
vulnerability VCID-xtd9-wbd9-67ew
105
vulnerability VCID-yakw-r8bh-5bde
106
vulnerability VCID-yr8d-347g-pugg
107
vulnerability VCID-z3qw-4ejj-uffj
108
vulnerability VCID-z8qp-v64u-tuh8
109
vulnerability VCID-z9d9-aer5-gfa9
110
vulnerability VCID-zgdf-mxfn-gbea
111
vulnerability VCID-zj5a-p9u4-ducw
112
vulnerability VCID-ztxx-cc2c-87at
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.27.4-1~bpo8%252B1
aliases CVE-2017-0365
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zz68-pwk2-abew
Fixing_vulnerabilities
0
url VCID-1bkk-tvsa-ukb1
vulnerability_id VCID-1bkk-tvsa-ukb1
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2934
reference_id
reference_type
scores
0
value 0.00281
scoring_system epss
scoring_elements 0.51365
published_at 2026-04-01T12:55:00Z
1
value 0.00281
scoring_system epss
scoring_elements 0.51416
published_at 2026-04-02T12:55:00Z
2
value 0.00281
scoring_system epss
scoring_elements 0.51443
published_at 2026-04-04T12:55:00Z
3
value 0.00281
scoring_system epss
scoring_elements 0.51402
published_at 2026-04-07T12:55:00Z
4
value 0.00281
scoring_system epss
scoring_elements 0.51455
published_at 2026-04-08T12:55:00Z
5
value 0.00281
scoring_system epss
scoring_elements 0.51453
published_at 2026-04-09T12:55:00Z
6
value 0.00281
scoring_system epss
scoring_elements 0.51496
published_at 2026-04-11T12:55:00Z
7
value 0.00281
scoring_system epss
scoring_elements 0.51475
published_at 2026-04-12T12:55:00Z
8
value 0.00281
scoring_system epss
scoring_elements 0.51462
published_at 2026-04-13T12:55:00Z
9
value 0.00281
scoring_system epss
scoring_elements 0.51505
published_at 2026-04-16T12:55:00Z
10
value 0.00281
scoring_system epss
scoring_elements 0.51513
published_at 2026-04-18T12:55:00Z
11
value 0.00281
scoring_system epss
scoring_elements 0.5149
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2934
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2934
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2934
2
reference_url https://security.gentoo.org/glsa/201510-05
reference_id GLSA-201510-05
reference_type
scores
url https://security.gentoo.org/glsa/201510-05
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2015-2934
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1bkk-tvsa-ukb1
1
url VCID-4hp5-bdkg-fufh
vulnerability_id VCID-4hp5-bdkg-fufh
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2936
reference_id
reference_type
scores
0
value 0.0189
scoring_system epss
scoring_elements 0.83116
published_at 2026-04-01T12:55:00Z
1
value 0.0189
scoring_system epss
scoring_elements 0.83133
published_at 2026-04-02T12:55:00Z
2
value 0.0189
scoring_system epss
scoring_elements 0.83147
published_at 2026-04-04T12:55:00Z
3
value 0.0189
scoring_system epss
scoring_elements 0.83145
published_at 2026-04-07T12:55:00Z
4
value 0.0189
scoring_system epss
scoring_elements 0.8317
published_at 2026-04-08T12:55:00Z
5
value 0.0189
scoring_system epss
scoring_elements 0.83177
published_at 2026-04-09T12:55:00Z
6
value 0.0189
scoring_system epss
scoring_elements 0.83193
published_at 2026-04-11T12:55:00Z
7
value 0.0189
scoring_system epss
scoring_elements 0.83187
published_at 2026-04-12T12:55:00Z
8
value 0.0189
scoring_system epss
scoring_elements 0.83183
published_at 2026-04-13T12:55:00Z
9
value 0.0189
scoring_system epss
scoring_elements 0.8322
published_at 2026-04-18T12:55:00Z
10
value 0.0189
scoring_system epss
scoring_elements 0.83224
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2936
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2936
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2936
2
reference_url https://security.gentoo.org/glsa/201510-05
reference_id GLSA-201510-05
reference_type
scores
url https://security.gentoo.org/glsa/201510-05
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2015-2936
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4hp5-bdkg-fufh
2
url VCID-542a-pavw-b7ax
vulnerability_id VCID-542a-pavw-b7ax
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2932
reference_id
reference_type
scores
0
value 0.00281
scoring_system epss
scoring_elements 0.51365
published_at 2026-04-01T12:55:00Z
1
value 0.00281
scoring_system epss
scoring_elements 0.51416
published_at 2026-04-02T12:55:00Z
2
value 0.00281
scoring_system epss
scoring_elements 0.51443
published_at 2026-04-04T12:55:00Z
3
value 0.00281
scoring_system epss
scoring_elements 0.51402
published_at 2026-04-07T12:55:00Z
4
value 0.00281
scoring_system epss
scoring_elements 0.51455
published_at 2026-04-08T12:55:00Z
5
value 0.00281
scoring_system epss
scoring_elements 0.51453
published_at 2026-04-09T12:55:00Z
6
value 0.00281
scoring_system epss
scoring_elements 0.51496
published_at 2026-04-11T12:55:00Z
7
value 0.00281
scoring_system epss
scoring_elements 0.51475
published_at 2026-04-12T12:55:00Z
8
value 0.00281
scoring_system epss
scoring_elements 0.51462
published_at 2026-04-13T12:55:00Z
9
value 0.00281
scoring_system epss
scoring_elements 0.51505
published_at 2026-04-16T12:55:00Z
10
value 0.00281
scoring_system epss
scoring_elements 0.51513
published_at 2026-04-18T12:55:00Z
11
value 0.00281
scoring_system epss
scoring_elements 0.5149
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2932
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2932
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2932
2
reference_url https://security.gentoo.org/glsa/201510-05
reference_id GLSA-201510-05
reference_type
scores
url https://security.gentoo.org/glsa/201510-05
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2015-2932
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-542a-pavw-b7ax
3
url VCID-6gjh-cn8c-3yfp
vulnerability_id VCID-6gjh-cn8c-3yfp
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to execute arbitrary code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9277
reference_id
reference_type
scores
0
value 0.00862
scoring_system epss
scoring_elements 0.75088
published_at 2026-04-21T12:55:00Z
1
value 0.00862
scoring_system epss
scoring_elements 0.7501
published_at 2026-04-01T12:55:00Z
2
value 0.00862
scoring_system epss
scoring_elements 0.75012
published_at 2026-04-02T12:55:00Z
3
value 0.00862
scoring_system epss
scoring_elements 0.75041
published_at 2026-04-04T12:55:00Z
4
value 0.00862
scoring_system epss
scoring_elements 0.75017
published_at 2026-04-07T12:55:00Z
5
value 0.00862
scoring_system epss
scoring_elements 0.75051
published_at 2026-04-08T12:55:00Z
6
value 0.00862
scoring_system epss
scoring_elements 0.75063
published_at 2026-04-09T12:55:00Z
7
value 0.00862
scoring_system epss
scoring_elements 0.75085
published_at 2026-04-11T12:55:00Z
8
value 0.00862
scoring_system epss
scoring_elements 0.75064
published_at 2026-04-12T12:55:00Z
9
value 0.00862
scoring_system epss
scoring_elements 0.75053
published_at 2026-04-13T12:55:00Z
10
value 0.00862
scoring_system epss
scoring_elements 0.75091
published_at 2026-04-16T12:55:00Z
11
value 0.00862
scoring_system epss
scoring_elements 0.75098
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9277
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9277
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9277
2
reference_url http://securitytracker.com/id?1031301
reference_id
reference_type
scores
url http://securitytracker.com/id?1031301
3
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-November/000170.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-November/000170.html
4
reference_url https://phabricator.wikimedia.org/T73478
reference_id
reference_type
scores
url https://phabricator.wikimedia.org/T73478
5
reference_url http://www.debian.org/security/2014/dsa-3100
reference_id
reference_type
scores
url http://www.debian.org/security/2014/dsa-3100
6
reference_url http://www.openwall.com/lists/oss-security/2014/12/03/9
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2014/12/03/9
7
reference_url http://www.openwall.com/lists/oss-security/2014/12/04/16
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2014/12/04/16
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=772764
reference_id 772764
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=772764
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.20:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.20.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.1:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.20.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.2:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.20.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.3:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.20.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.4:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.20.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.5:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.20.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.6:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.20.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.7:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.20.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.20.8:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.21:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.21.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.1:*:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.21.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.10:*:*:*:*:*:*:*
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.21.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.11:*:*:*:*:*:*:*
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.21.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.2:*:*:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.21.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.3:*:*:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.21.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.4:*:*:*:*:*:*:*
26
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.21.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.5:*:*:*:*:*:*:*
27
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.21.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.6:*:*:*:*:*:*:*
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.21.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.7:*:*:*:*:*:*:*
29
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.21.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.8:*:*:*:*:*:*:*
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.21.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.21.9:*:*:*:*:*:*:*
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.0:*:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.1:*:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.10:*:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.11:*:*:*:*:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.12:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.12:*:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.13:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.13:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.13:*:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.2:*:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.3:*:*:*:*:*:*:*
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.4:*:*:*:*:*:*:*
40
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.5:*:*:*:*:*:*:*
41
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.6:*:*:*:*:*:*:*
42
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.7:*:*:*:*:*:*:*
43
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.8:*:*:*:*:*:*:*
44
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.23.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.0:*:*:*:*:*:*:*
45
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.23.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.1:*:*:*:*:*:*:*
46
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.23.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.2:*:*:*:*:*:*:*
47
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.23.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.3:*:*:*:*:*:*:*
48
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.23.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.4:*:*:*:*:*:*:*
49
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.23.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.5:*:*:*:*:*:*:*
50
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.23.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.6:*:*:*:*:*:*:*
51
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-9277
reference_id CVE-2014-9277
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
url https://nvd.nist.gov/vuln/detail/CVE-2014-9277
52
reference_url https://security.gentoo.org/glsa/201502-04
reference_id GLSA-201502-04
reference_type
scores
url https://security.gentoo.org/glsa/201502-04
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-0%2Bdeb7u3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-0%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1bkk-tvsa-ukb1
4
vulnerability VCID-1f7s-dk69-mqg2
5
vulnerability VCID-1fr2-q23d-ekdf
6
vulnerability VCID-1hwd-avxk-fqbs
7
vulnerability VCID-1na8-nyq1-yfcy
8
vulnerability VCID-22yj-98wv-skc9
9
vulnerability VCID-29fv-52ge-mbft
10
vulnerability VCID-2abz-k2yv-zkbp
11
vulnerability VCID-2fva-bc2j-dban
12
vulnerability VCID-2wcb-hty6-uyez
13
vulnerability VCID-2xja-2whv-fqe4
14
vulnerability VCID-32f4-khen-3yez
15
vulnerability VCID-3s9f-prpy-hbcx
16
vulnerability VCID-3yt6-jnfb-9fcw
17
vulnerability VCID-3zue-5ccg-23hs
18
vulnerability VCID-424y-cjxg-c7az
19
vulnerability VCID-4dfp-3qk9-j7fg
20
vulnerability VCID-4hp5-bdkg-fufh
21
vulnerability VCID-4keq-jcfa-13hc
22
vulnerability VCID-4yhr-jjt9-afaq
23
vulnerability VCID-542a-pavw-b7ax
24
vulnerability VCID-5fsv-cduw-ybb8
25
vulnerability VCID-5muy-wgqw-dffa
26
vulnerability VCID-5myd-ngfx-5qhb
27
vulnerability VCID-674z-nf4t-b7ez
28
vulnerability VCID-6ads-gs3n-dubh
29
vulnerability VCID-6gjh-cn8c-3yfp
30
vulnerability VCID-6jq2-8mv5-pqaa
31
vulnerability VCID-73p6-esc6-tydd
32
vulnerability VCID-74ej-8sna-jyek
33
vulnerability VCID-7ar6-14bb-yfc5
34
vulnerability VCID-7eba-7gsc-hbfg
35
vulnerability VCID-7j54-uz1w-y3dn
36
vulnerability VCID-7m3q-wuh7-k7fn
37
vulnerability VCID-7wh4-say2-pqap
38
vulnerability VCID-812q-n5hg-u7dx
39
vulnerability VCID-8sqw-6aae-13f5
40
vulnerability VCID-8svz-zhz1-vyh6
41
vulnerability VCID-8uw8-ja3w-r3da
42
vulnerability VCID-92hf-r3sb-jbhy
43
vulnerability VCID-9346-9aaj-fkfw
44
vulnerability VCID-95d1-mkm6-r3cq
45
vulnerability VCID-9e5y-vgvx-73d6
46
vulnerability VCID-9exs-x5s1-4bhg
47
vulnerability VCID-9g1g-z7d8-c7ah
48
vulnerability VCID-9nnu-4mda-7qg9
49
vulnerability VCID-9xyz-wzr8-wqhz
50
vulnerability VCID-a8nh-mvhd-bka7
51
vulnerability VCID-ad34-frk5-kqds
52
vulnerability VCID-aeju-gazv-abfz
53
vulnerability VCID-arzd-7xhw-qqb4
54
vulnerability VCID-at9r-vw7p-6bfv
55
vulnerability VCID-av7r-cpew-xkcn
56
vulnerability VCID-azup-qzq7-sbh6
57
vulnerability VCID-b5ke-cjtq-q3ev
58
vulnerability VCID-b8r6-r39r-3ffm
59
vulnerability VCID-bbef-akjp-a3gp
60
vulnerability VCID-bgjt-nzue-bqc1
61
vulnerability VCID-brg4-rv29-1fgz
62
vulnerability VCID-c8zy-wsn9-63af
63
vulnerability VCID-ckkj-z5nq-akhb
64
vulnerability VCID-cm78-savr-xuf7
65
vulnerability VCID-d6kz-e82q-6kh3
66
vulnerability VCID-dbed-h6a2-fucf
67
vulnerability VCID-den1-257q-euc9
68
vulnerability VCID-dgmf-63vf-gkhp
69
vulnerability VCID-e2td-jqbd-vbaa
70
vulnerability VCID-e3ad-yw1a-nbbu
71
vulnerability VCID-e8np-4nbw-t3b3
72
vulnerability VCID-ea7c-xk4h-13fs
73
vulnerability VCID-eefm-65rj-pyg2
74
vulnerability VCID-eud3-k24q-6ber
75
vulnerability VCID-fkvy-961u-37be
76
vulnerability VCID-fnzm-dxb3-v7hr
77
vulnerability VCID-fpkf-8mcr-6bee
78
vulnerability VCID-fptt-2t1j-8fec
79
vulnerability VCID-fujm-vb7d-vfhe
80
vulnerability VCID-fwb3-kxy8-73hz
81
vulnerability VCID-gma6-b9cy-kqee
82
vulnerability VCID-h3d2-nr9e-nqbk
83
vulnerability VCID-h5xs-ky4t-b7ad
84
vulnerability VCID-h789-pcxv-kbgd
85
vulnerability VCID-h8jw-brz8-hkfn
86
vulnerability VCID-j1bz-4bex-4key
87
vulnerability VCID-jm7q-2w3j-buhh
88
vulnerability VCID-jwkd-wdus-6ygg
89
vulnerability VCID-k1f5-msra-4kam
90
vulnerability VCID-k6ry-6a7f-eqd7
91
vulnerability VCID-k7qb-7hbj-1qc2
92
vulnerability VCID-kjp3-cs2f-t7b4
93
vulnerability VCID-m1j5-3ecf-dffj
94
vulnerability VCID-m1xy-yucr-dqfs
95
vulnerability VCID-m7uw-sa5j-u3bw
96
vulnerability VCID-mbs4-gs37-1fh5
97
vulnerability VCID-mzd9-bu4b-wfar
98
vulnerability VCID-nqg1-1fyx-ruf9
99
vulnerability VCID-nre7-4fpc-9keb
100
vulnerability VCID-nsd6-kt5p-w7fe
101
vulnerability VCID-nwsr-ruca-2kha
102
vulnerability VCID-peaj-crkx-yfgz
103
vulnerability VCID-pm3s-z5ap-qqay
104
vulnerability VCID-pm5t-23j4-6yh6
105
vulnerability VCID-pw9d-1cwb-tyb9
106
vulnerability VCID-pwjk-pzpj-aff6
107
vulnerability VCID-qgzv-a881-9khq
108
vulnerability VCID-qjhk-97j6-2qfm
109
vulnerability VCID-qme5-cvje-1fg4
110
vulnerability VCID-qmx3-kcnd-zuhe
111
vulnerability VCID-qpgu-mg6m-vyef
112
vulnerability VCID-qqvd-cjs3-7kab
113
vulnerability VCID-qwcp-5hh8-z3gp
114
vulnerability VCID-rhq2-r3hq-tqc5
115
vulnerability VCID-ruur-4cvx-cqct
116
vulnerability VCID-rwtk-hep1-xfaw
117
vulnerability VCID-rz65-w7x5-57hu
118
vulnerability VCID-s5j8-5sjt-cfeu
119
vulnerability VCID-sbq7-1cwg-bkhg
120
vulnerability VCID-sc5s-s7vg-dygq
121
vulnerability VCID-sca5-n7rz-rffq
122
vulnerability VCID-sf61-byhw-17gv
123
vulnerability VCID-sfp5-ygxn-nufe
124
vulnerability VCID-sh6q-pur2-gkag
125
vulnerability VCID-sr9a-a6vt-1qgt
126
vulnerability VCID-sz6n-4pbk-d7ay
127
vulnerability VCID-t6w8-cgct-gbgz
128
vulnerability VCID-tq2e-c9ym-a3hj
129
vulnerability VCID-tutk-y8jg-n7dh
130
vulnerability VCID-u2xc-ztge-p3bv
131
vulnerability VCID-ubbe-qu8g-5fa1
132
vulnerability VCID-ujdn-y48t-pbch
133
vulnerability VCID-uzv4-9xtx-ryhr
134
vulnerability VCID-v27j-4pnt-n7h9
135
vulnerability VCID-v3dp-7stt-tygf
136
vulnerability VCID-vjd5-jv5h-yfhw
137
vulnerability VCID-w3f8-nrqd-p7gq
138
vulnerability VCID-w51y-hprj-buap
139
vulnerability VCID-weh4-ev3r-jyep
140
vulnerability VCID-wjx4-aawn-23f6
141
vulnerability VCID-wraf-59ce-u3br
142
vulnerability VCID-wzqf-k99e-vbeu
143
vulnerability VCID-xj9q-7kq3-x7b4
144
vulnerability VCID-xjz8-ebps-ckb1
145
vulnerability VCID-xqkp-986n-m7f3
146
vulnerability VCID-xtd9-wbd9-67ew
147
vulnerability VCID-y2nw-1x3v-73em
148
vulnerability VCID-yakw-r8bh-5bde
149
vulnerability VCID-yc9s-xn4z-jbde
150
vulnerability VCID-yr8d-347g-pugg
151
vulnerability VCID-z3qw-4ejj-uffj
152
vulnerability VCID-z7qu-jq6m-7kgp
153
vulnerability VCID-z8qp-v64u-tuh8
154
vulnerability VCID-z9d9-aer5-gfa9
155
vulnerability VCID-zgdf-mxfn-gbea
156
vulnerability VCID-zh21-963v-ekhg
157
vulnerability VCID-zhp6-af71-57gk
158
vulnerability VCID-zj5a-p9u4-ducw
159
vulnerability VCID-zmzk-jv3z-tub4
160
vulnerability VCID-ztxx-cc2c-87at
161
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-0%252Bdeb7u3
1
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2014-9277
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6gjh-cn8c-3yfp
4
url VCID-aeju-gazv-abfz
vulnerability_id VCID-aeju-gazv-abfz
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2935
reference_id
reference_type
scores
0
value 0.00299
scoring_system epss
scoring_elements 0.53159
published_at 2026-04-01T12:55:00Z
1
value 0.00299
scoring_system epss
scoring_elements 0.53183
published_at 2026-04-02T12:55:00Z
2
value 0.00299
scoring_system epss
scoring_elements 0.53207
published_at 2026-04-04T12:55:00Z
3
value 0.00299
scoring_system epss
scoring_elements 0.53174
published_at 2026-04-07T12:55:00Z
4
value 0.00299
scoring_system epss
scoring_elements 0.53227
published_at 2026-04-08T12:55:00Z
5
value 0.00299
scoring_system epss
scoring_elements 0.53221
published_at 2026-04-09T12:55:00Z
6
value 0.00299
scoring_system epss
scoring_elements 0.53273
published_at 2026-04-11T12:55:00Z
7
value 0.00299
scoring_system epss
scoring_elements 0.53258
published_at 2026-04-12T12:55:00Z
8
value 0.00299
scoring_system epss
scoring_elements 0.53241
published_at 2026-04-13T12:55:00Z
9
value 0.00299
scoring_system epss
scoring_elements 0.53279
published_at 2026-04-16T12:55:00Z
10
value 0.00299
scoring_system epss
scoring_elements 0.53285
published_at 2026-04-18T12:55:00Z
11
value 0.00299
scoring_system epss
scoring_elements 0.53266
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2935
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2935
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2935
2
reference_url https://security.gentoo.org/glsa/201510-05
reference_id GLSA-201510-05
reference_type
scores
url https://security.gentoo.org/glsa/201510-05
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2015-2935
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-aeju-gazv-abfz
5
url VCID-dgmf-63vf-gkhp
vulnerability_id VCID-dgmf-63vf-gkhp
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2937
reference_id
reference_type
scores
0
value 0.02017
scoring_system epss
scoring_elements 0.83673
published_at 2026-04-01T12:55:00Z
1
value 0.02017
scoring_system epss
scoring_elements 0.83686
published_at 2026-04-02T12:55:00Z
2
value 0.02017
scoring_system epss
scoring_elements 0.83701
published_at 2026-04-04T12:55:00Z
3
value 0.02017
scoring_system epss
scoring_elements 0.83703
published_at 2026-04-07T12:55:00Z
4
value 0.02017
scoring_system epss
scoring_elements 0.83727
published_at 2026-04-08T12:55:00Z
5
value 0.02017
scoring_system epss
scoring_elements 0.83734
published_at 2026-04-09T12:55:00Z
6
value 0.02017
scoring_system epss
scoring_elements 0.8375
published_at 2026-04-11T12:55:00Z
7
value 0.02017
scoring_system epss
scoring_elements 0.83743
published_at 2026-04-12T12:55:00Z
8
value 0.02017
scoring_system epss
scoring_elements 0.83739
published_at 2026-04-13T12:55:00Z
9
value 0.02017
scoring_system epss
scoring_elements 0.83773
published_at 2026-04-16T12:55:00Z
10
value 0.02017
scoring_system epss
scoring_elements 0.83774
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2937
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2937
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2937
2
reference_url https://security.gentoo.org/glsa/201510-05
reference_id GLSA-201510-05
reference_type
scores
url https://security.gentoo.org/glsa/201510-05
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2015-2937
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dgmf-63vf-gkhp
6
url VCID-fkvy-961u-37be
vulnerability_id VCID-fkvy-961u-37be
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2940
reference_id
reference_type
scores
0
value 0.00295
scoring_system epss
scoring_elements 0.52745
published_at 2026-04-01T12:55:00Z
1
value 0.00295
scoring_system epss
scoring_elements 0.52769
published_at 2026-04-02T12:55:00Z
2
value 0.00295
scoring_system epss
scoring_elements 0.52795
published_at 2026-04-04T12:55:00Z
3
value 0.00295
scoring_system epss
scoring_elements 0.52762
published_at 2026-04-07T12:55:00Z
4
value 0.00295
scoring_system epss
scoring_elements 0.52813
published_at 2026-04-08T12:55:00Z
5
value 0.00295
scoring_system epss
scoring_elements 0.52807
published_at 2026-04-09T12:55:00Z
6
value 0.00295
scoring_system epss
scoring_elements 0.52858
published_at 2026-04-11T12:55:00Z
7
value 0.00295
scoring_system epss
scoring_elements 0.52842
published_at 2026-04-12T12:55:00Z
8
value 0.00295
scoring_system epss
scoring_elements 0.52826
published_at 2026-04-13T12:55:00Z
9
value 0.00295
scoring_system epss
scoring_elements 0.52863
published_at 2026-04-16T12:55:00Z
10
value 0.00295
scoring_system epss
scoring_elements 0.5287
published_at 2026-04-18T12:55:00Z
11
value 0.00295
scoring_system epss
scoring_elements 0.52853
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2940
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2940
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2940
2
reference_url https://security.gentoo.org/glsa/201510-05
reference_id GLSA-201510-05
reference_type
scores
url https://security.gentoo.org/glsa/201510-05
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2015-2940
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fkvy-961u-37be
7
url VCID-peaj-crkx-yfgz
vulnerability_id VCID-peaj-crkx-yfgz
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2933
reference_id
reference_type
scores
0
value 0.00281
scoring_system epss
scoring_elements 0.51365
published_at 2026-04-01T12:55:00Z
1
value 0.00281
scoring_system epss
scoring_elements 0.51416
published_at 2026-04-02T12:55:00Z
2
value 0.00281
scoring_system epss
scoring_elements 0.51443
published_at 2026-04-04T12:55:00Z
3
value 0.00281
scoring_system epss
scoring_elements 0.51402
published_at 2026-04-07T12:55:00Z
4
value 0.00281
scoring_system epss
scoring_elements 0.51455
published_at 2026-04-08T12:55:00Z
5
value 0.00281
scoring_system epss
scoring_elements 0.51453
published_at 2026-04-09T12:55:00Z
6
value 0.00281
scoring_system epss
scoring_elements 0.51496
published_at 2026-04-11T12:55:00Z
7
value 0.00281
scoring_system epss
scoring_elements 0.51475
published_at 2026-04-12T12:55:00Z
8
value 0.00281
scoring_system epss
scoring_elements 0.51462
published_at 2026-04-13T12:55:00Z
9
value 0.00281
scoring_system epss
scoring_elements 0.51505
published_at 2026-04-16T12:55:00Z
10
value 0.00281
scoring_system epss
scoring_elements 0.51513
published_at 2026-04-18T12:55:00Z
11
value 0.00281
scoring_system epss
scoring_elements 0.5149
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2933
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2933
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2933
2
reference_url https://security.gentoo.org/glsa/201510-05
reference_id GLSA-201510-05
reference_type
scores
url https://security.gentoo.org/glsa/201510-05
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2015-2933
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-peaj-crkx-yfgz
8
url VCID-qgzv-a881-9khq
vulnerability_id VCID-qgzv-a881-9khq
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2939
reference_id
reference_type
scores
0
value 0.00408
scoring_system epss
scoring_elements 0.6108
published_at 2026-04-01T12:55:00Z
1
value 0.00408
scoring_system epss
scoring_elements 0.61157
published_at 2026-04-02T12:55:00Z
2
value 0.00408
scoring_system epss
scoring_elements 0.61185
published_at 2026-04-04T12:55:00Z
3
value 0.00408
scoring_system epss
scoring_elements 0.61151
published_at 2026-04-07T12:55:00Z
4
value 0.00408
scoring_system epss
scoring_elements 0.61199
published_at 2026-04-08T12:55:00Z
5
value 0.00408
scoring_system epss
scoring_elements 0.61214
published_at 2026-04-09T12:55:00Z
6
value 0.00408
scoring_system epss
scoring_elements 0.61234
published_at 2026-04-11T12:55:00Z
7
value 0.00408
scoring_system epss
scoring_elements 0.61221
published_at 2026-04-12T12:55:00Z
8
value 0.00408
scoring_system epss
scoring_elements 0.61202
published_at 2026-04-13T12:55:00Z
9
value 0.00408
scoring_system epss
scoring_elements 0.61242
published_at 2026-04-16T12:55:00Z
10
value 0.00408
scoring_system epss
scoring_elements 0.61248
published_at 2026-04-18T12:55:00Z
11
value 0.00408
scoring_system epss
scoring_elements 0.61229
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2939
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2939
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2939
2
reference_url https://security.gentoo.org/glsa/201510-05
reference_id GLSA-201510-05
reference_type
scores
url https://security.gentoo.org/glsa/201510-05
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2015-2939
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qgzv-a881-9khq
9
url VCID-s5j8-5sjt-cfeu
vulnerability_id VCID-s5j8-5sjt-cfeu
summary security update
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-7295
reference_id
reference_type
scores
0
value 0.00238
scoring_system epss
scoring_elements 0.46877
published_at 2026-04-21T12:55:00Z
1
value 0.00238
scoring_system epss
scoring_elements 0.46816
published_at 2026-04-01T12:55:00Z
2
value 0.00238
scoring_system epss
scoring_elements 0.46855
published_at 2026-04-02T12:55:00Z
3
value 0.00238
scoring_system epss
scoring_elements 0.46871
published_at 2026-04-04T12:55:00Z
4
value 0.00238
scoring_system epss
scoring_elements 0.4682
published_at 2026-04-07T12:55:00Z
5
value 0.00238
scoring_system epss
scoring_elements 0.46874
published_at 2026-04-08T12:55:00Z
6
value 0.00238
scoring_system epss
scoring_elements 0.46873
published_at 2026-04-09T12:55:00Z
7
value 0.00238
scoring_system epss
scoring_elements 0.46896
published_at 2026-04-11T12:55:00Z
8
value 0.00238
scoring_system epss
scoring_elements 0.46869
published_at 2026-04-12T12:55:00Z
9
value 0.00238
scoring_system epss
scoring_elements 0.46876
published_at 2026-04-13T12:55:00Z
10
value 0.00238
scoring_system epss
scoring_elements 0.46932
published_at 2026-04-16T12:55:00Z
11
value 0.00238
scoring_system epss
scoring_elements 0.46928
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-7295
1
reference_url https://bugzilla.wikimedia.org/show_bug.cgi?id=70672
reference_id
reference_type
scores
url https://bugzilla.wikimedia.org/show_bug.cgi?id=70672
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7295
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7295
3
reference_url http://seclists.org/oss-sec/2014/q4/67
reference_id
reference_type
scores
url http://seclists.org/oss-sec/2014/q4/67
4
reference_url http://secunia.com/advisories/61752
reference_id
reference_type
scores
url http://secunia.com/advisories/61752
5
reference_url https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-October/000163.html
reference_id
reference_type
scores
url https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-October/000163.html
6
reference_url http://www.debian.org/security/2014/dsa-3046
reference_id
reference_type
scores
url http://www.debian.org/security/2014/dsa-3046
7
reference_url http://www.securityfocus.com/bid/70238
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/70238
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.0:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.1:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.10:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.11:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.12:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.12:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.13:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.13:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.13:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.14:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.14:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.14:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.15:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.15:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.15:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.16:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.16:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.16:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.17:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.17:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.17:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.18:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.18:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.18:*:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.2:*:*:*:*:*:*:*
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.3:*:*:*:*:*:*:*
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.4:*:*:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.5:*:*:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.6:*:*:*:*:*:*:*
26
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.7:*:*:*:*:*:*:*
27
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.8:*:*:*:*:*:*:*
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19.9:*:*:*:*:*:*:*
29
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19:beta_1:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19:beta_1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19:beta_1:*:*:*:*:*:*
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19:beta_2:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.19:beta_2:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.19:beta_2:*:*:*:*:*:*
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.0:*:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.1:*:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.10:*:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.11:*:*:*:*:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.2:*:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.3:*:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.4:*:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.5:*:*:*:*:*:*:*
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.6:*:*:*:*:*:*:*
40
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.7:*:*:*:*:*:*:*
41
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.8:*:*:*:*:*:*:*
42
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.22.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.22.9:*:*:*:*:*:*:*
43
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.23.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.0:*:*:*:*:*:*:*
44
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.23.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.1:*:*:*:*:*:*:*
45
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.23.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.2:*:*:*:*:*:*:*
46
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.23.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.3:*:*:*:*:*:*:*
47
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mediawiki:mediawiki:1.23.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mediawiki:mediawiki:1.23.4:*:*:*:*:*:*:*
48
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-7295
reference_id CVE-2014-7295
reference_type
scores
0
value 3.5
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:S/C:N/I:P/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2014-7295
49
reference_url https://security.gentoo.org/glsa/201502-04
reference_id GLSA-201502-04
reference_type
scores
url https://security.gentoo.org/glsa/201502-04
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-0%2Bdeb7u3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-0%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1bkk-tvsa-ukb1
4
vulnerability VCID-1f7s-dk69-mqg2
5
vulnerability VCID-1fr2-q23d-ekdf
6
vulnerability VCID-1hwd-avxk-fqbs
7
vulnerability VCID-1na8-nyq1-yfcy
8
vulnerability VCID-22yj-98wv-skc9
9
vulnerability VCID-29fv-52ge-mbft
10
vulnerability VCID-2abz-k2yv-zkbp
11
vulnerability VCID-2fva-bc2j-dban
12
vulnerability VCID-2wcb-hty6-uyez
13
vulnerability VCID-2xja-2whv-fqe4
14
vulnerability VCID-32f4-khen-3yez
15
vulnerability VCID-3s9f-prpy-hbcx
16
vulnerability VCID-3yt6-jnfb-9fcw
17
vulnerability VCID-3zue-5ccg-23hs
18
vulnerability VCID-424y-cjxg-c7az
19
vulnerability VCID-4dfp-3qk9-j7fg
20
vulnerability VCID-4hp5-bdkg-fufh
21
vulnerability VCID-4keq-jcfa-13hc
22
vulnerability VCID-4yhr-jjt9-afaq
23
vulnerability VCID-542a-pavw-b7ax
24
vulnerability VCID-5fsv-cduw-ybb8
25
vulnerability VCID-5muy-wgqw-dffa
26
vulnerability VCID-5myd-ngfx-5qhb
27
vulnerability VCID-674z-nf4t-b7ez
28
vulnerability VCID-6ads-gs3n-dubh
29
vulnerability VCID-6gjh-cn8c-3yfp
30
vulnerability VCID-6jq2-8mv5-pqaa
31
vulnerability VCID-73p6-esc6-tydd
32
vulnerability VCID-74ej-8sna-jyek
33
vulnerability VCID-7ar6-14bb-yfc5
34
vulnerability VCID-7eba-7gsc-hbfg
35
vulnerability VCID-7j54-uz1w-y3dn
36
vulnerability VCID-7m3q-wuh7-k7fn
37
vulnerability VCID-7wh4-say2-pqap
38
vulnerability VCID-812q-n5hg-u7dx
39
vulnerability VCID-8sqw-6aae-13f5
40
vulnerability VCID-8svz-zhz1-vyh6
41
vulnerability VCID-8uw8-ja3w-r3da
42
vulnerability VCID-92hf-r3sb-jbhy
43
vulnerability VCID-9346-9aaj-fkfw
44
vulnerability VCID-95d1-mkm6-r3cq
45
vulnerability VCID-9e5y-vgvx-73d6
46
vulnerability VCID-9exs-x5s1-4bhg
47
vulnerability VCID-9g1g-z7d8-c7ah
48
vulnerability VCID-9nnu-4mda-7qg9
49
vulnerability VCID-9xyz-wzr8-wqhz
50
vulnerability VCID-a8nh-mvhd-bka7
51
vulnerability VCID-ad34-frk5-kqds
52
vulnerability VCID-aeju-gazv-abfz
53
vulnerability VCID-arzd-7xhw-qqb4
54
vulnerability VCID-at9r-vw7p-6bfv
55
vulnerability VCID-av7r-cpew-xkcn
56
vulnerability VCID-azup-qzq7-sbh6
57
vulnerability VCID-b5ke-cjtq-q3ev
58
vulnerability VCID-b8r6-r39r-3ffm
59
vulnerability VCID-bbef-akjp-a3gp
60
vulnerability VCID-bgjt-nzue-bqc1
61
vulnerability VCID-brg4-rv29-1fgz
62
vulnerability VCID-c8zy-wsn9-63af
63
vulnerability VCID-ckkj-z5nq-akhb
64
vulnerability VCID-cm78-savr-xuf7
65
vulnerability VCID-d6kz-e82q-6kh3
66
vulnerability VCID-dbed-h6a2-fucf
67
vulnerability VCID-den1-257q-euc9
68
vulnerability VCID-dgmf-63vf-gkhp
69
vulnerability VCID-e2td-jqbd-vbaa
70
vulnerability VCID-e3ad-yw1a-nbbu
71
vulnerability VCID-e8np-4nbw-t3b3
72
vulnerability VCID-ea7c-xk4h-13fs
73
vulnerability VCID-eefm-65rj-pyg2
74
vulnerability VCID-eud3-k24q-6ber
75
vulnerability VCID-fkvy-961u-37be
76
vulnerability VCID-fnzm-dxb3-v7hr
77
vulnerability VCID-fpkf-8mcr-6bee
78
vulnerability VCID-fptt-2t1j-8fec
79
vulnerability VCID-fujm-vb7d-vfhe
80
vulnerability VCID-fwb3-kxy8-73hz
81
vulnerability VCID-gma6-b9cy-kqee
82
vulnerability VCID-h3d2-nr9e-nqbk
83
vulnerability VCID-h5xs-ky4t-b7ad
84
vulnerability VCID-h789-pcxv-kbgd
85
vulnerability VCID-h8jw-brz8-hkfn
86
vulnerability VCID-j1bz-4bex-4key
87
vulnerability VCID-jm7q-2w3j-buhh
88
vulnerability VCID-jwkd-wdus-6ygg
89
vulnerability VCID-k1f5-msra-4kam
90
vulnerability VCID-k6ry-6a7f-eqd7
91
vulnerability VCID-k7qb-7hbj-1qc2
92
vulnerability VCID-kjp3-cs2f-t7b4
93
vulnerability VCID-m1j5-3ecf-dffj
94
vulnerability VCID-m1xy-yucr-dqfs
95
vulnerability VCID-m7uw-sa5j-u3bw
96
vulnerability VCID-mbs4-gs37-1fh5
97
vulnerability VCID-mzd9-bu4b-wfar
98
vulnerability VCID-nqg1-1fyx-ruf9
99
vulnerability VCID-nre7-4fpc-9keb
100
vulnerability VCID-nsd6-kt5p-w7fe
101
vulnerability VCID-nwsr-ruca-2kha
102
vulnerability VCID-peaj-crkx-yfgz
103
vulnerability VCID-pm3s-z5ap-qqay
104
vulnerability VCID-pm5t-23j4-6yh6
105
vulnerability VCID-pw9d-1cwb-tyb9
106
vulnerability VCID-pwjk-pzpj-aff6
107
vulnerability VCID-qgzv-a881-9khq
108
vulnerability VCID-qjhk-97j6-2qfm
109
vulnerability VCID-qme5-cvje-1fg4
110
vulnerability VCID-qmx3-kcnd-zuhe
111
vulnerability VCID-qpgu-mg6m-vyef
112
vulnerability VCID-qqvd-cjs3-7kab
113
vulnerability VCID-qwcp-5hh8-z3gp
114
vulnerability VCID-rhq2-r3hq-tqc5
115
vulnerability VCID-ruur-4cvx-cqct
116
vulnerability VCID-rwtk-hep1-xfaw
117
vulnerability VCID-rz65-w7x5-57hu
118
vulnerability VCID-s5j8-5sjt-cfeu
119
vulnerability VCID-sbq7-1cwg-bkhg
120
vulnerability VCID-sc5s-s7vg-dygq
121
vulnerability VCID-sca5-n7rz-rffq
122
vulnerability VCID-sf61-byhw-17gv
123
vulnerability VCID-sfp5-ygxn-nufe
124
vulnerability VCID-sh6q-pur2-gkag
125
vulnerability VCID-sr9a-a6vt-1qgt
126
vulnerability VCID-sz6n-4pbk-d7ay
127
vulnerability VCID-t6w8-cgct-gbgz
128
vulnerability VCID-tq2e-c9ym-a3hj
129
vulnerability VCID-tutk-y8jg-n7dh
130
vulnerability VCID-u2xc-ztge-p3bv
131
vulnerability VCID-ubbe-qu8g-5fa1
132
vulnerability VCID-ujdn-y48t-pbch
133
vulnerability VCID-uzv4-9xtx-ryhr
134
vulnerability VCID-v27j-4pnt-n7h9
135
vulnerability VCID-v3dp-7stt-tygf
136
vulnerability VCID-vjd5-jv5h-yfhw
137
vulnerability VCID-w3f8-nrqd-p7gq
138
vulnerability VCID-w51y-hprj-buap
139
vulnerability VCID-weh4-ev3r-jyep
140
vulnerability VCID-wjx4-aawn-23f6
141
vulnerability VCID-wraf-59ce-u3br
142
vulnerability VCID-wzqf-k99e-vbeu
143
vulnerability VCID-xj9q-7kq3-x7b4
144
vulnerability VCID-xjz8-ebps-ckb1
145
vulnerability VCID-xqkp-986n-m7f3
146
vulnerability VCID-xtd9-wbd9-67ew
147
vulnerability VCID-y2nw-1x3v-73em
148
vulnerability VCID-yakw-r8bh-5bde
149
vulnerability VCID-yc9s-xn4z-jbde
150
vulnerability VCID-yr8d-347g-pugg
151
vulnerability VCID-z3qw-4ejj-uffj
152
vulnerability VCID-z7qu-jq6m-7kgp
153
vulnerability VCID-z8qp-v64u-tuh8
154
vulnerability VCID-z9d9-aer5-gfa9
155
vulnerability VCID-zgdf-mxfn-gbea
156
vulnerability VCID-zh21-963v-ekhg
157
vulnerability VCID-zhp6-af71-57gk
158
vulnerability VCID-zj5a-p9u4-ducw
159
vulnerability VCID-zmzk-jv3z-tub4
160
vulnerability VCID-ztxx-cc2c-87at
161
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-0%252Bdeb7u3
1
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2014-7295
risk_score 1.6
exploitability 0.5
weighted_severity 3.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s5j8-5sjt-cfeu
10
url VCID-sbq7-1cwg-bkhg
vulnerability_id VCID-sbq7-1cwg-bkhg
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2931
reference_id
reference_type
scores
0
value 0.00281
scoring_system epss
scoring_elements 0.51365
published_at 2026-04-01T12:55:00Z
1
value 0.00281
scoring_system epss
scoring_elements 0.51416
published_at 2026-04-02T12:55:00Z
2
value 0.00281
scoring_system epss
scoring_elements 0.51443
published_at 2026-04-04T12:55:00Z
3
value 0.00281
scoring_system epss
scoring_elements 0.51402
published_at 2026-04-07T12:55:00Z
4
value 0.00281
scoring_system epss
scoring_elements 0.51455
published_at 2026-04-08T12:55:00Z
5
value 0.00281
scoring_system epss
scoring_elements 0.51453
published_at 2026-04-09T12:55:00Z
6
value 0.00281
scoring_system epss
scoring_elements 0.51496
published_at 2026-04-11T12:55:00Z
7
value 0.00281
scoring_system epss
scoring_elements 0.51475
published_at 2026-04-12T12:55:00Z
8
value 0.00281
scoring_system epss
scoring_elements 0.51462
published_at 2026-04-13T12:55:00Z
9
value 0.00281
scoring_system epss
scoring_elements 0.51505
published_at 2026-04-16T12:55:00Z
10
value 0.00281
scoring_system epss
scoring_elements 0.51513
published_at 2026-04-18T12:55:00Z
11
value 0.00281
scoring_system epss
scoring_elements 0.5149
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2931
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2931
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2931
2
reference_url https://security.gentoo.org/glsa/201510-05
reference_id GLSA-201510-05
reference_type
scores
url https://security.gentoo.org/glsa/201510-05
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2015-2931
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sbq7-1cwg-bkhg
11
url VCID-sfp5-ygxn-nufe
vulnerability_id VCID-sfp5-ygxn-nufe
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2942
reference_id
reference_type
scores
0
value 0.01675
scoring_system epss
scoring_elements 0.82083
published_at 2026-04-01T12:55:00Z
1
value 0.01675
scoring_system epss
scoring_elements 0.82095
published_at 2026-04-02T12:55:00Z
2
value 0.01675
scoring_system epss
scoring_elements 0.82116
published_at 2026-04-04T12:55:00Z
3
value 0.01675
scoring_system epss
scoring_elements 0.82112
published_at 2026-04-07T12:55:00Z
4
value 0.01675
scoring_system epss
scoring_elements 0.82139
published_at 2026-04-08T12:55:00Z
5
value 0.01675
scoring_system epss
scoring_elements 0.82146
published_at 2026-04-09T12:55:00Z
6
value 0.01675
scoring_system epss
scoring_elements 0.82165
published_at 2026-04-11T12:55:00Z
7
value 0.01675
scoring_system epss
scoring_elements 0.82156
published_at 2026-04-12T12:55:00Z
8
value 0.01675
scoring_system epss
scoring_elements 0.82151
published_at 2026-04-13T12:55:00Z
9
value 0.01675
scoring_system epss
scoring_elements 0.82188
published_at 2026-04-16T12:55:00Z
10
value 0.01675
scoring_system epss
scoring_elements 0.82189
published_at 2026-04-18T12:55:00Z
11
value 0.01675
scoring_system epss
scoring_elements 0.82191
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2942
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2942
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2942
2
reference_url https://security.gentoo.org/glsa/201510-05
reference_id GLSA-201510-05
reference_type
scores
url https://security.gentoo.org/glsa/201510-05
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2015-2942
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sfp5-ygxn-nufe
12
url VCID-y2nw-1x3v-73em
vulnerability_id VCID-y2nw-1x3v-73em
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2938
reference_id
reference_type
scores
0
value 0.00281
scoring_system epss
scoring_elements 0.51365
published_at 2026-04-01T12:55:00Z
1
value 0.00281
scoring_system epss
scoring_elements 0.51416
published_at 2026-04-02T12:55:00Z
2
value 0.00281
scoring_system epss
scoring_elements 0.51443
published_at 2026-04-04T12:55:00Z
3
value 0.00281
scoring_system epss
scoring_elements 0.51402
published_at 2026-04-07T12:55:00Z
4
value 0.00281
scoring_system epss
scoring_elements 0.51455
published_at 2026-04-08T12:55:00Z
5
value 0.00281
scoring_system epss
scoring_elements 0.51453
published_at 2026-04-09T12:55:00Z
6
value 0.00281
scoring_system epss
scoring_elements 0.51496
published_at 2026-04-11T12:55:00Z
7
value 0.00281
scoring_system epss
scoring_elements 0.51475
published_at 2026-04-12T12:55:00Z
8
value 0.00281
scoring_system epss
scoring_elements 0.51462
published_at 2026-04-13T12:55:00Z
9
value 0.00281
scoring_system epss
scoring_elements 0.51505
published_at 2026-04-16T12:55:00Z
10
value 0.00281
scoring_system epss
scoring_elements 0.51513
published_at 2026-04-18T12:55:00Z
11
value 0.00281
scoring_system epss
scoring_elements 0.5149
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2938
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2938
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2938
2
reference_url https://security.gentoo.org/glsa/201510-05
reference_id GLSA-201510-05
reference_type
scores
url https://security.gentoo.org/glsa/201510-05
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2015-2938
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y2nw-1x3v-73em
13
url VCID-z7qu-jq6m-7kgp
vulnerability_id VCID-z7qu-jq6m-7kgp
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to cause a Denial of Service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2941
reference_id
reference_type
scores
0
value 0.00281
scoring_system epss
scoring_elements 0.51365
published_at 2026-04-01T12:55:00Z
1
value 0.00281
scoring_system epss
scoring_elements 0.51416
published_at 2026-04-02T12:55:00Z
2
value 0.00281
scoring_system epss
scoring_elements 0.51443
published_at 2026-04-04T12:55:00Z
3
value 0.00281
scoring_system epss
scoring_elements 0.51402
published_at 2026-04-07T12:55:00Z
4
value 0.00281
scoring_system epss
scoring_elements 0.51455
published_at 2026-04-08T12:55:00Z
5
value 0.00281
scoring_system epss
scoring_elements 0.51453
published_at 2026-04-09T12:55:00Z
6
value 0.00281
scoring_system epss
scoring_elements 0.51496
published_at 2026-04-11T12:55:00Z
7
value 0.00281
scoring_system epss
scoring_elements 0.51475
published_at 2026-04-12T12:55:00Z
8
value 0.00281
scoring_system epss
scoring_elements 0.51462
published_at 2026-04-13T12:55:00Z
9
value 0.00281
scoring_system epss
scoring_elements 0.51505
published_at 2026-04-16T12:55:00Z
10
value 0.00281
scoring_system epss
scoring_elements 0.51513
published_at 2026-04-18T12:55:00Z
11
value 0.00281
scoring_system epss
scoring_elements 0.5149
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2941
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2941
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2941
2
reference_url https://security.gentoo.org/glsa/201510-05
reference_id GLSA-201510-05
reference_type
scores
url https://security.gentoo.org/glsa/201510-05
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2015-2941
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z7qu-jq6m-7kgp
14
url VCID-zh21-963v-ekhg
vulnerability_id VCID-zh21-963v-ekhg
summary
Multiple vulnerabilities have been found in MediaWiki, the worst of
    which may allow remote attackers to execute arbitrary code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9475
reference_id
reference_type
scores
0
value 0.00163
scoring_system epss
scoring_elements 0.37215
published_at 2026-04-01T12:55:00Z
1
value 0.00163
scoring_system epss
scoring_elements 0.3738
published_at 2026-04-02T12:55:00Z
2
value 0.00163
scoring_system epss
scoring_elements 0.37406
published_at 2026-04-04T12:55:00Z
3
value 0.00163
scoring_system epss
scoring_elements 0.37234
published_at 2026-04-07T12:55:00Z
4
value 0.00163
scoring_system epss
scoring_elements 0.37285
published_at 2026-04-08T12:55:00Z
5
value 0.00163
scoring_system epss
scoring_elements 0.37297
published_at 2026-04-09T12:55:00Z
6
value 0.00163
scoring_system epss
scoring_elements 0.37308
published_at 2026-04-11T12:55:00Z
7
value 0.00163
scoring_system epss
scoring_elements 0.37275
published_at 2026-04-12T12:55:00Z
8
value 0.00163
scoring_system epss
scoring_elements 0.37247
published_at 2026-04-13T12:55:00Z
9
value 0.00163
scoring_system epss
scoring_elements 0.37293
published_at 2026-04-16T12:55:00Z
10
value 0.00163
scoring_system epss
scoring_elements 0.37276
published_at 2026-04-18T12:55:00Z
11
value 0.00163
scoring_system epss
scoring_elements 0.37223
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9475
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9475
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9475
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773654
reference_id 773654
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773654
3
reference_url https://security.gentoo.org/glsa/201502-04
reference_id GLSA-201502-04
reference_type
scores
url https://security.gentoo.org/glsa/201502-04
fixed_packages
0
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-0%2Bdeb7u3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-0%2Bdeb7u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1bkk-tvsa-ukb1
4
vulnerability VCID-1f7s-dk69-mqg2
5
vulnerability VCID-1fr2-q23d-ekdf
6
vulnerability VCID-1hwd-avxk-fqbs
7
vulnerability VCID-1na8-nyq1-yfcy
8
vulnerability VCID-22yj-98wv-skc9
9
vulnerability VCID-29fv-52ge-mbft
10
vulnerability VCID-2abz-k2yv-zkbp
11
vulnerability VCID-2fva-bc2j-dban
12
vulnerability VCID-2wcb-hty6-uyez
13
vulnerability VCID-2xja-2whv-fqe4
14
vulnerability VCID-32f4-khen-3yez
15
vulnerability VCID-3s9f-prpy-hbcx
16
vulnerability VCID-3yt6-jnfb-9fcw
17
vulnerability VCID-3zue-5ccg-23hs
18
vulnerability VCID-424y-cjxg-c7az
19
vulnerability VCID-4dfp-3qk9-j7fg
20
vulnerability VCID-4hp5-bdkg-fufh
21
vulnerability VCID-4keq-jcfa-13hc
22
vulnerability VCID-4yhr-jjt9-afaq
23
vulnerability VCID-542a-pavw-b7ax
24
vulnerability VCID-5fsv-cduw-ybb8
25
vulnerability VCID-5muy-wgqw-dffa
26
vulnerability VCID-5myd-ngfx-5qhb
27
vulnerability VCID-674z-nf4t-b7ez
28
vulnerability VCID-6ads-gs3n-dubh
29
vulnerability VCID-6gjh-cn8c-3yfp
30
vulnerability VCID-6jq2-8mv5-pqaa
31
vulnerability VCID-73p6-esc6-tydd
32
vulnerability VCID-74ej-8sna-jyek
33
vulnerability VCID-7ar6-14bb-yfc5
34
vulnerability VCID-7eba-7gsc-hbfg
35
vulnerability VCID-7j54-uz1w-y3dn
36
vulnerability VCID-7m3q-wuh7-k7fn
37
vulnerability VCID-7wh4-say2-pqap
38
vulnerability VCID-812q-n5hg-u7dx
39
vulnerability VCID-8sqw-6aae-13f5
40
vulnerability VCID-8svz-zhz1-vyh6
41
vulnerability VCID-8uw8-ja3w-r3da
42
vulnerability VCID-92hf-r3sb-jbhy
43
vulnerability VCID-9346-9aaj-fkfw
44
vulnerability VCID-95d1-mkm6-r3cq
45
vulnerability VCID-9e5y-vgvx-73d6
46
vulnerability VCID-9exs-x5s1-4bhg
47
vulnerability VCID-9g1g-z7d8-c7ah
48
vulnerability VCID-9nnu-4mda-7qg9
49
vulnerability VCID-9xyz-wzr8-wqhz
50
vulnerability VCID-a8nh-mvhd-bka7
51
vulnerability VCID-ad34-frk5-kqds
52
vulnerability VCID-aeju-gazv-abfz
53
vulnerability VCID-arzd-7xhw-qqb4
54
vulnerability VCID-at9r-vw7p-6bfv
55
vulnerability VCID-av7r-cpew-xkcn
56
vulnerability VCID-azup-qzq7-sbh6
57
vulnerability VCID-b5ke-cjtq-q3ev
58
vulnerability VCID-b8r6-r39r-3ffm
59
vulnerability VCID-bbef-akjp-a3gp
60
vulnerability VCID-bgjt-nzue-bqc1
61
vulnerability VCID-brg4-rv29-1fgz
62
vulnerability VCID-c8zy-wsn9-63af
63
vulnerability VCID-ckkj-z5nq-akhb
64
vulnerability VCID-cm78-savr-xuf7
65
vulnerability VCID-d6kz-e82q-6kh3
66
vulnerability VCID-dbed-h6a2-fucf
67
vulnerability VCID-den1-257q-euc9
68
vulnerability VCID-dgmf-63vf-gkhp
69
vulnerability VCID-e2td-jqbd-vbaa
70
vulnerability VCID-e3ad-yw1a-nbbu
71
vulnerability VCID-e8np-4nbw-t3b3
72
vulnerability VCID-ea7c-xk4h-13fs
73
vulnerability VCID-eefm-65rj-pyg2
74
vulnerability VCID-eud3-k24q-6ber
75
vulnerability VCID-fkvy-961u-37be
76
vulnerability VCID-fnzm-dxb3-v7hr
77
vulnerability VCID-fpkf-8mcr-6bee
78
vulnerability VCID-fptt-2t1j-8fec
79
vulnerability VCID-fujm-vb7d-vfhe
80
vulnerability VCID-fwb3-kxy8-73hz
81
vulnerability VCID-gma6-b9cy-kqee
82
vulnerability VCID-h3d2-nr9e-nqbk
83
vulnerability VCID-h5xs-ky4t-b7ad
84
vulnerability VCID-h789-pcxv-kbgd
85
vulnerability VCID-h8jw-brz8-hkfn
86
vulnerability VCID-j1bz-4bex-4key
87
vulnerability VCID-jm7q-2w3j-buhh
88
vulnerability VCID-jwkd-wdus-6ygg
89
vulnerability VCID-k1f5-msra-4kam
90
vulnerability VCID-k6ry-6a7f-eqd7
91
vulnerability VCID-k7qb-7hbj-1qc2
92
vulnerability VCID-kjp3-cs2f-t7b4
93
vulnerability VCID-m1j5-3ecf-dffj
94
vulnerability VCID-m1xy-yucr-dqfs
95
vulnerability VCID-m7uw-sa5j-u3bw
96
vulnerability VCID-mbs4-gs37-1fh5
97
vulnerability VCID-mzd9-bu4b-wfar
98
vulnerability VCID-nqg1-1fyx-ruf9
99
vulnerability VCID-nre7-4fpc-9keb
100
vulnerability VCID-nsd6-kt5p-w7fe
101
vulnerability VCID-nwsr-ruca-2kha
102
vulnerability VCID-peaj-crkx-yfgz
103
vulnerability VCID-pm3s-z5ap-qqay
104
vulnerability VCID-pm5t-23j4-6yh6
105
vulnerability VCID-pw9d-1cwb-tyb9
106
vulnerability VCID-pwjk-pzpj-aff6
107
vulnerability VCID-qgzv-a881-9khq
108
vulnerability VCID-qjhk-97j6-2qfm
109
vulnerability VCID-qme5-cvje-1fg4
110
vulnerability VCID-qmx3-kcnd-zuhe
111
vulnerability VCID-qpgu-mg6m-vyef
112
vulnerability VCID-qqvd-cjs3-7kab
113
vulnerability VCID-qwcp-5hh8-z3gp
114
vulnerability VCID-rhq2-r3hq-tqc5
115
vulnerability VCID-ruur-4cvx-cqct
116
vulnerability VCID-rwtk-hep1-xfaw
117
vulnerability VCID-rz65-w7x5-57hu
118
vulnerability VCID-s5j8-5sjt-cfeu
119
vulnerability VCID-sbq7-1cwg-bkhg
120
vulnerability VCID-sc5s-s7vg-dygq
121
vulnerability VCID-sca5-n7rz-rffq
122
vulnerability VCID-sf61-byhw-17gv
123
vulnerability VCID-sfp5-ygxn-nufe
124
vulnerability VCID-sh6q-pur2-gkag
125
vulnerability VCID-sr9a-a6vt-1qgt
126
vulnerability VCID-sz6n-4pbk-d7ay
127
vulnerability VCID-t6w8-cgct-gbgz
128
vulnerability VCID-tq2e-c9ym-a3hj
129
vulnerability VCID-tutk-y8jg-n7dh
130
vulnerability VCID-u2xc-ztge-p3bv
131
vulnerability VCID-ubbe-qu8g-5fa1
132
vulnerability VCID-ujdn-y48t-pbch
133
vulnerability VCID-uzv4-9xtx-ryhr
134
vulnerability VCID-v27j-4pnt-n7h9
135
vulnerability VCID-v3dp-7stt-tygf
136
vulnerability VCID-vjd5-jv5h-yfhw
137
vulnerability VCID-w3f8-nrqd-p7gq
138
vulnerability VCID-w51y-hprj-buap
139
vulnerability VCID-weh4-ev3r-jyep
140
vulnerability VCID-wjx4-aawn-23f6
141
vulnerability VCID-wraf-59ce-u3br
142
vulnerability VCID-wzqf-k99e-vbeu
143
vulnerability VCID-xj9q-7kq3-x7b4
144
vulnerability VCID-xjz8-ebps-ckb1
145
vulnerability VCID-xqkp-986n-m7f3
146
vulnerability VCID-xtd9-wbd9-67ew
147
vulnerability VCID-y2nw-1x3v-73em
148
vulnerability VCID-yakw-r8bh-5bde
149
vulnerability VCID-yc9s-xn4z-jbde
150
vulnerability VCID-yr8d-347g-pugg
151
vulnerability VCID-z3qw-4ejj-uffj
152
vulnerability VCID-z7qu-jq6m-7kgp
153
vulnerability VCID-z8qp-v64u-tuh8
154
vulnerability VCID-z9d9-aer5-gfa9
155
vulnerability VCID-zgdf-mxfn-gbea
156
vulnerability VCID-zh21-963v-ekhg
157
vulnerability VCID-zhp6-af71-57gk
158
vulnerability VCID-zj5a-p9u4-ducw
159
vulnerability VCID-zmzk-jv3z-tub4
160
vulnerability VCID-ztxx-cc2c-87at
161
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-0%252Bdeb7u3
1
url pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
purl pkg:deb/debian/mediawiki@1:1.19.20%2Bdfsg-2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1697-p35n-fber
1
vulnerability VCID-1866-gt2g-1qfv
2
vulnerability VCID-1993-aw6b-4kg7
3
vulnerability VCID-1f7s-dk69-mqg2
4
vulnerability VCID-1fr2-q23d-ekdf
5
vulnerability VCID-1hwd-avxk-fqbs
6
vulnerability VCID-1na8-nyq1-yfcy
7
vulnerability VCID-22yj-98wv-skc9
8
vulnerability VCID-29fv-52ge-mbft
9
vulnerability VCID-2abz-k2yv-zkbp
10
vulnerability VCID-2fva-bc2j-dban
11
vulnerability VCID-2wcb-hty6-uyez
12
vulnerability VCID-2xja-2whv-fqe4
13
vulnerability VCID-32f4-khen-3yez
14
vulnerability VCID-3s9f-prpy-hbcx
15
vulnerability VCID-3yt6-jnfb-9fcw
16
vulnerability VCID-3zue-5ccg-23hs
17
vulnerability VCID-424y-cjxg-c7az
18
vulnerability VCID-4dfp-3qk9-j7fg
19
vulnerability VCID-4keq-jcfa-13hc
20
vulnerability VCID-4yhr-jjt9-afaq
21
vulnerability VCID-5fsv-cduw-ybb8
22
vulnerability VCID-5muy-wgqw-dffa
23
vulnerability VCID-5myd-ngfx-5qhb
24
vulnerability VCID-674z-nf4t-b7ez
25
vulnerability VCID-6ads-gs3n-dubh
26
vulnerability VCID-6jq2-8mv5-pqaa
27
vulnerability VCID-73p6-esc6-tydd
28
vulnerability VCID-74ej-8sna-jyek
29
vulnerability VCID-7ar6-14bb-yfc5
30
vulnerability VCID-7eba-7gsc-hbfg
31
vulnerability VCID-7j54-uz1w-y3dn
32
vulnerability VCID-7m3q-wuh7-k7fn
33
vulnerability VCID-7wh4-say2-pqap
34
vulnerability VCID-812q-n5hg-u7dx
35
vulnerability VCID-8sqw-6aae-13f5
36
vulnerability VCID-8svz-zhz1-vyh6
37
vulnerability VCID-8uw8-ja3w-r3da
38
vulnerability VCID-92hf-r3sb-jbhy
39
vulnerability VCID-9346-9aaj-fkfw
40
vulnerability VCID-95d1-mkm6-r3cq
41
vulnerability VCID-9e5y-vgvx-73d6
42
vulnerability VCID-9exs-x5s1-4bhg
43
vulnerability VCID-9g1g-z7d8-c7ah
44
vulnerability VCID-9nnu-4mda-7qg9
45
vulnerability VCID-9xyz-wzr8-wqhz
46
vulnerability VCID-a8nh-mvhd-bka7
47
vulnerability VCID-ad34-frk5-kqds
48
vulnerability VCID-arzd-7xhw-qqb4
49
vulnerability VCID-at9r-vw7p-6bfv
50
vulnerability VCID-av7r-cpew-xkcn
51
vulnerability VCID-azup-qzq7-sbh6
52
vulnerability VCID-b5ke-cjtq-q3ev
53
vulnerability VCID-b8r6-r39r-3ffm
54
vulnerability VCID-bbef-akjp-a3gp
55
vulnerability VCID-bgjt-nzue-bqc1
56
vulnerability VCID-brg4-rv29-1fgz
57
vulnerability VCID-c8zy-wsn9-63af
58
vulnerability VCID-ckkj-z5nq-akhb
59
vulnerability VCID-cm78-savr-xuf7
60
vulnerability VCID-d6kz-e82q-6kh3
61
vulnerability VCID-dbed-h6a2-fucf
62
vulnerability VCID-den1-257q-euc9
63
vulnerability VCID-e2td-jqbd-vbaa
64
vulnerability VCID-e3ad-yw1a-nbbu
65
vulnerability VCID-e8np-4nbw-t3b3
66
vulnerability VCID-ea7c-xk4h-13fs
67
vulnerability VCID-eefm-65rj-pyg2
68
vulnerability VCID-eud3-k24q-6ber
69
vulnerability VCID-fnzm-dxb3-v7hr
70
vulnerability VCID-fpkf-8mcr-6bee
71
vulnerability VCID-fptt-2t1j-8fec
72
vulnerability VCID-fujm-vb7d-vfhe
73
vulnerability VCID-fwb3-kxy8-73hz
74
vulnerability VCID-gma6-b9cy-kqee
75
vulnerability VCID-h3d2-nr9e-nqbk
76
vulnerability VCID-h5xs-ky4t-b7ad
77
vulnerability VCID-h789-pcxv-kbgd
78
vulnerability VCID-h8jw-brz8-hkfn
79
vulnerability VCID-j1bz-4bex-4key
80
vulnerability VCID-jm7q-2w3j-buhh
81
vulnerability VCID-jwkd-wdus-6ygg
82
vulnerability VCID-k1f5-msra-4kam
83
vulnerability VCID-k6ry-6a7f-eqd7
84
vulnerability VCID-k7qb-7hbj-1qc2
85
vulnerability VCID-kjp3-cs2f-t7b4
86
vulnerability VCID-m1j5-3ecf-dffj
87
vulnerability VCID-m1xy-yucr-dqfs
88
vulnerability VCID-m7uw-sa5j-u3bw
89
vulnerability VCID-mbs4-gs37-1fh5
90
vulnerability VCID-mzd9-bu4b-wfar
91
vulnerability VCID-nqg1-1fyx-ruf9
92
vulnerability VCID-nre7-4fpc-9keb
93
vulnerability VCID-nsd6-kt5p-w7fe
94
vulnerability VCID-nwsr-ruca-2kha
95
vulnerability VCID-pm3s-z5ap-qqay
96
vulnerability VCID-pm5t-23j4-6yh6
97
vulnerability VCID-pw9d-1cwb-tyb9
98
vulnerability VCID-pwjk-pzpj-aff6
99
vulnerability VCID-qjhk-97j6-2qfm
100
vulnerability VCID-qme5-cvje-1fg4
101
vulnerability VCID-qmx3-kcnd-zuhe
102
vulnerability VCID-qpgu-mg6m-vyef
103
vulnerability VCID-qqvd-cjs3-7kab
104
vulnerability VCID-qwcp-5hh8-z3gp
105
vulnerability VCID-rhq2-r3hq-tqc5
106
vulnerability VCID-ruur-4cvx-cqct
107
vulnerability VCID-rwtk-hep1-xfaw
108
vulnerability VCID-rz65-w7x5-57hu
109
vulnerability VCID-sc5s-s7vg-dygq
110
vulnerability VCID-sca5-n7rz-rffq
111
vulnerability VCID-sf61-byhw-17gv
112
vulnerability VCID-sh6q-pur2-gkag
113
vulnerability VCID-sr9a-a6vt-1qgt
114
vulnerability VCID-sz6n-4pbk-d7ay
115
vulnerability VCID-t6w8-cgct-gbgz
116
vulnerability VCID-tq2e-c9ym-a3hj
117
vulnerability VCID-tutk-y8jg-n7dh
118
vulnerability VCID-u2xc-ztge-p3bv
119
vulnerability VCID-ubbe-qu8g-5fa1
120
vulnerability VCID-ujdn-y48t-pbch
121
vulnerability VCID-uzv4-9xtx-ryhr
122
vulnerability VCID-v27j-4pnt-n7h9
123
vulnerability VCID-v3dp-7stt-tygf
124
vulnerability VCID-vjd5-jv5h-yfhw
125
vulnerability VCID-w3f8-nrqd-p7gq
126
vulnerability VCID-w51y-hprj-buap
127
vulnerability VCID-weh4-ev3r-jyep
128
vulnerability VCID-wjx4-aawn-23f6
129
vulnerability VCID-wraf-59ce-u3br
130
vulnerability VCID-wzqf-k99e-vbeu
131
vulnerability VCID-xj9q-7kq3-x7b4
132
vulnerability VCID-xjz8-ebps-ckb1
133
vulnerability VCID-xqkp-986n-m7f3
134
vulnerability VCID-xtd9-wbd9-67ew
135
vulnerability VCID-yakw-r8bh-5bde
136
vulnerability VCID-yc9s-xn4z-jbde
137
vulnerability VCID-yr8d-347g-pugg
138
vulnerability VCID-z3qw-4ejj-uffj
139
vulnerability VCID-z8qp-v64u-tuh8
140
vulnerability VCID-z9d9-aer5-gfa9
141
vulnerability VCID-zgdf-mxfn-gbea
142
vulnerability VCID-zhp6-af71-57gk
143
vulnerability VCID-zj5a-p9u4-ducw
144
vulnerability VCID-zmzk-jv3z-tub4
145
vulnerability VCID-ztxx-cc2c-87at
146
vulnerability VCID-zz68-pwk2-abew
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3
aliases CVE-2014-9475
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zh21-963v-ekhg
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/mediawiki@1:1.19.20%252Bdfsg-2.3