Lucene search
K

69 matches found

Positive Technologies
Positive Technologies
added 2021/10/06 12:0 a.m.2 views

PT-2021-23484 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions through 1.36.2 Description: An issue was discovered in SecurePoll in the Growth extension, where simple polls allow users to create alerts by changing their User-Agent HTTP header and submitting a vote. Recommendations: For...

8.8CVSS6AI score0.01215EPSS
Exploits5References44
CNVD
CNVD
added 2020/12/25 12:0 a.m.10 views

MediaWiki suffers from an unspecified vulnerability (CNVD-2021-38679)

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.35.1 and earlier...

5.3CVSS6.6AI score0.00172EPSS
Exploits0References1
NVD
NVD
added 2020/12/21 11:15 p.m.8 views

CVE-2020-35624

An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a full vote timestamp, which may provide unintended clues about how a voting process unfolded...

5.3CVSS5.3AI score0.00172EPSS
Exploits0References2
OSV
OSV
added 2020/12/21 11:15 p.m.16 views

CVE-2020-35624

An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a full vote timestamp, which may provide unintended clues about how a voting process unfolded...

5.3CVSS6.8AI score
Exploits0References2
Prion
Prion
added 2020/12/21 11:15 p.m.12 views

Design/Logic Flaw

An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a full vote timestamp, which may provide unintended clues about how a voting process unfolded...

5CVSS5.3AI score0.00172EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2020/12/21 10:36 p.m.51 views

CVE-2020-35624

CVE-2020-35624 affects the SecurePoll extension for MediaWiki up to version 1.35.1. The non-admin vote list includes a full vote timestamp, which may reveal unintended clues about how a voting process unfolded. The provided description does not specify an exploitation method, affected products be...

5.3CVSS5.2AI score0.00172EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/12/21 10:36 p.m.15 views

CVE-2020-35624

An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a full vote timestamp, which may provide unintended clues about how a voting process unfolded...

5.2AI score0.00172EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2020/12/21 12:0 a.m.6 views

PT-2020-17371 · Mediawiki +1 · Mediawiki Securepoll Extension +1

Name of the Vulnerable Software and Affected Versions: MediaWiki SecurePoll extension versions through 1.35.1 Description: An issue in the SecurePoll extension for MediaWiki may provide unintended clues about how a voting process unfolded due to the non-admin vote list containing a full vote...

9.8CVSS6.1AI score0.034EPSS
Exploits18References76
CNNVD
CNNVD
added 2020/12/21 12:0 a.m.2 views

MediaWiki 安全漏洞

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.35.1 and earlier...

5.3CVSS6AI score0.00172EPSS
Exploits0References3
Rows per page
Query Builder