Lucene search
+L

26 matches found

OpenVAS
OpenVAS
added 2022/03/31 12:00 a.m.38 views

MediaWiki <= 1.39.4 Multiple Vulnerabilities - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...

9.8CVSS9.5AI score0.01462EPSS
SaveExploits2References3
ATTACKERKB
ATTACKERKB
added 2022/03/30 7:15 a.m.6 views

CVE-2022-28206

An issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the FileImporter extension mishandles the check for edit rights...

9.8CVSS5.9AI score0.01462EPSS
SaveExploits1References4
CVE
CVE
added 2022/03/30 12:00 a.m.90 views

CVE-2022-28206

CVE-2022-28206 affects MediaWiki up to 1.37.1 via ImportPlanValidator.php in the FileImporter extension, which mishandles the edit-rights check. The provided documents do not include exploitation details or a confirmed patch/version, and no remediation is specified.

9.8CVSS9.3AI score0.01462EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2021/04/06 5:02 a.m.85 views

CVE-2021-28206

ASUS BMC firmware Web management page vulnerability in the Record video file function allows path traversal due to improper parameter filtering. A remote attacker with administrator privileges could access system files. The CVE entry notes this results in high confidentiality impact, but there is...

6.8CVSS5.1AI score0.01903EPSS
SaveExploits0References3Affected Software1
Circl
Circl
added 2020/12/02 10:55 p.m.16 views

CVE-2020-28206

creationtimestamp| type| source ---|---|--- 2020-12-02 22:55:15+00:00| seen| https://t.me/cibsecurity/17057...

6.5CVSS6.4AI score0.0114EPSS
SaveExploits1References1
CVE
CVE
added 2020/12/02 6:34 p.m.96 views

CVE-2020-28206

The CVE-2020-28206 entry describes a vulnerability in Bitrix24 Bitrix Framework (1c site management) version 20.0 where a flaw in the admin login form allows user enumeration of administrator-group accounts and enables brute-force attempts on passwords for users not in the administrator group. Th...

6.5CVSS6.4AI score0.0114EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder