Fluid Attacks Database

Ecosystem DebianComponent mediawiki

FLAT-UJZ76 (CVE-2026-58037)

Server side cross-site scripting In mediawiki

7.9

High

Ecosystem: Debian

Component: mediawiki

FLAT-TZBM7 (CVE-2026-58030)

Reflected cross-site scripting (XSS) In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-LQM0Z (CVE-2026-58033)

Unauthorized access to files In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-KGCFA (CVE-2026-58028)

Server side cross-site scripting In mediawiki

9.0

Critical

Ecosystem: Debian

Component: mediawiki

FLAT-FYCU2 (CVE-2026-58032)

Reflected cross-site scripting (XSS) In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-B23S3 (CVE-2026-58029)

Improper authorization control for web services In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-C0P4F (CVE-2026-58024)

Unauthorized access to files In mediawiki

1.2

Low

Ecosystem: Debian

Component: mediawiki

FLAT-5K5O7 (CVE-2026-58026)

Unauthorized access to files In mediawiki

5.7

Medium

Ecosystem: Debian

Component: mediawiki

FLAT-23E67 (CVE-2026-58025)

Insecure deserialization In mediawiki

2.2

Low

Ecosystem: Debian

Component: mediawiki

FLAT-9JAL6 (CVE-2026-58027)

Unauthorized access to files In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-RC7GB (CVE-2026-5266)

Unauthorized access to files In mediawiki

0.6

Low

Ecosystem: Debian

Component: mediawiki

FLAT-U6S5I (CVE-2026-34094)

Lack of data validation In mediawiki

0.4

Low

Ecosystem: Debian

Component: mediawiki

FLAT-03NMS (CVE-2026-34095)

Lack of data validation In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-7BZW5 (CVE-2026-34093)

Unauthorized access to files In mediawiki

1.1

Low

Ecosystem: Debian

Component: mediawiki

FLAT-HXNNN (CVE-2026-34087)

Improper authorization control for web services In mediawiki

1.2

Low

Ecosystem: Debian

Component: mediawiki

FLAT-DQ74G (CVE-2026-34091)

Unauthorized access to files In mediawiki

2.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-7GVVZ (CVE-2026-34092)

Unauthorized access to files In mediawiki

0.5

Low

Ecosystem: Debian

Component: mediawiki

FLAT-1K4D0 (CVE-2026-34088)

Unauthorized access to files In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-PHX5J (CVE-2026-34086)

Security controls bypass or absence In mediawiki

0.5

Low

Ecosystem: Debian

Component: mediawiki

FLAT-CMFTC (DLA-4428-1)

Insecure HTTP methods enabled In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-BFUZE (DSA-6085-1)

Insecure HTTP methods enabled In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-I7TF2 (CVE-2025-11261)

Reflected cross-site scripting (XSS) In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-VW1QI (DLA-4355-1)

Insecure HTTP methods enabled In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-YP72D (CVE-2025-61657)

Reflected cross-site scripting (XSS) In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-AZPFY (CVE-2025-61655)

OS Command Injection In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-5IY3B (CVE-2025-61656)

Reflected cross-site scripting (XSS) In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-SQ0MF (CVE-2025-61654)

Asymmetric denial of service In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-6V8JI (CVE-2025-11173)

Lack of data validation In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-OG4TW (CVE-2025-61652)

Improper authorization control for web services In mediawiki

2.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-1LQ1C (CVE-2025-61653)

Server-side request forgery (SSRF) In mediawiki

2.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-10PQ7 (CVE-2025-61635)

Lack of protection against brute force attacks In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-DZHH5 (CVE-2025-11175)

Improper authorization control for web services In mediawiki

6.7

Medium

Ecosystem: Debian

Component: mediawiki

FLAT-2OS8K (CVE-2025-61646)

Business information leak In mediawiki

1.2

Low

Ecosystem: Debian

Component: mediawiki

FLAT-314PC (CVE-2025-61643)

Improper authorization control for web services In mediawiki

2.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-0O03X (CVE-2025-61641)

Asymmetric denial of service In mediawiki

1.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-P49XU (CVE-2025-61640)

Reflected cross-site scripting (XSS) In mediawiki

0.2

Low

Ecosystem: Debian

Component: mediawiki

FLAT-IA0SZ (CVE-2025-61638)

Reflected cross-site scripting (XSS) In mediawiki

0.5

Low

Ecosystem: Debian

Component: mediawiki

FLAT-VAMMO (CVE-2025-61642)

Reflected cross-site scripting (XSS) In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-0GLT2 (CVE-2025-61639)

Improper authorization control for web services In mediawiki

1.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-2DLZN (CVE-2025-61634)

Cached form fields In mediawiki

2.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-CC9L6 (CVE-2025-61637)

Debugging enabled in production In mediawiki

1.2

Low

Ecosystem: Debian

Component: mediawiki

FLAT-BYV2T (CVE-2025-61636)

Reflected cross-site scripting (XSS) In mediawiki

2.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-9ER36 (CVE-2025-6927)

Business information leak In mediawiki

0.6

Low

Ecosystem: Debian

Component: mediawiki

FLAT-0X0AH (CVE-2025-6594)

Reflected cross-site scripting (XSS) In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-88YKC (CVE-2025-6589)

Business information leak In mediawiki

0.5

Low

Ecosystem: Debian

Component: mediawiki

FLAT-HD9EF (CVE-2025-6592)

Business information leak In mediawiki

0.5

Low

Ecosystem: Debian

Component: mediawiki

FLAT-248GI (CVE-2025-6595)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-MNOIB (CVE-2025-6597)

Authentication mechanism absence or evasion In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-U1L1X (CVE-2025-6591)

Reflected cross-site scripting (XSS) In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-AYMQW (CVE-2025-6596)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-J7QNN (CVE-2025-6590)

Server side cross-site scripting In mediawiki

1.0

Low

Ecosystem: Debian

Component: mediawiki

FLAT-ZOEPZ (CVE-2025-6593)

Business information leak In mediawiki

0.5

Low

Ecosystem: Debian

Component: mediawiki

FLAT-A048L (DLA-4249-1)

Insecure HTTP methods enabled In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-RRWSM (CVE-2025-6926)

Improper authorization control for web services In mediawiki

2.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-4U3YF (DSA-5957-1)

Insecure HTTP methods enabled In mediawiki

5.1

Medium

Ecosystem: Debian

Component: mediawiki

FLAT-UOKHK (DSA-5901-1)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-09I0L (CVE-2025-32072)

Server side cross-site scripting In mediawiki

2.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-CCKP8 (CVE-2025-3469)

Server side cross-site scripting In mediawiki

1.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-WHDQ3 (CVE-2025-32700)

Business information leak In mediawiki

0.6

Low

Ecosystem: Debian

Component: mediawiki

FLAT-MXFKG (CVE-2025-32696)

Improper authorization control for web services In mediawiki

0.5

Low

Ecosystem: Debian

Component: mediawiki

FLAT-S0E0H (CVE-2025-32699)

Lack of data validation - Path Traversal In mediawiki

0.5

Low

Ecosystem: Debian

Component: mediawiki

FLAT-8LWMW (CVE-2025-32697)

Improper authorization control for web services In mediawiki

1.2

Low

Ecosystem: Debian

Component: mediawiki

FLAT-TEZJI (CVE-2025-32698)

Business information leak In mediawiki

0.5

Low

Ecosystem: Debian

Component: mediawiki

FLAT-M12GA (CVE-2023-45359)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-QWFCC (CVE-2023-45361)

Lack of data validation In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-0BECV (DSA-5785-1)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-EULFI (DLA-3896-1)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-GDNZV (CVE-2024-34506)

Asymmetric denial of service In mediawiki

6.6

Medium

Ecosystem: Debian

Component: mediawiki

FLAT-WQSRL (CVE-2024-34507)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-5W08F (DLA-3796-1)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-FFZS4 (DSA-5651-1)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-WMW4K (CVE-2023-51704)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-T7BX6 (DLA-3671-1)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-AI2AU (CVE-2023-45362)

Business information leak In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-4MWAL (CVE-2023-45360)

Server side cross-site scripting In mediawiki

1.2

Low

Ecosystem: Debian

Component: mediawiki

FLAT-83GW1 (DSA-5520-1)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-CFSW3 (CVE-2023-45364)

Improper authorization control for web services In mediawiki

2.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-AQ9VA (CVE-2023-3550)

Lack of data validation In mediawiki

4.1

Medium

Ecosystem: Debian

Component: mediawiki

FLAT-PD2LL (DLA-3540-1)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-Z4SMA (CVE-2023-36674)

Lack of data validation In mediawiki

2.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-HHTWT (DLA-3489-1)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-YJ42N (DSA-5447-1)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-I85Z2 (CVE-2023-36675)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-1ZOVQ (CVE-2022-47927)

Excessive privileges In mediawiki

4.3

Medium

Ecosystem: Debian

Component: mediawiki

FLAT-OHKPZ (CVE-2020-36649)

Asymmetric denial of service - ReDoS In mediawiki

6.6

Medium

Ecosystem: Debian

Component: mediawiki

FLAT-O9U6L (CVE-2022-41765)

User enumeration In mediawiki

2.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-FPUNZ (CVE-2022-41767)

Anonymous connection In mediawiki

2.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-WZCWH (CVE-2021-44856)

Lack of data validation In mediawiki

2.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-BIU08 (CVE-2021-44855)

Server side cross-site scripting In mediawiki

1.2

Low

Ecosystem: Debian

Component: mediawiki

FLAT-QN7WJ (CVE-2021-44854)

Improper authorization control for web services In mediawiki

2.7

Low

Ecosystem: Debian

Component: mediawiki

FLAT-74V49 (DLA-3148-1)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-TIRQA (DSA-5246-1)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-G9YJM (DLA-3117-1)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-GL988 (CVE-2022-28203)

Asymmetric denial of service In mediawiki

6.6

Medium

Ecosystem: Debian

Component: mediawiki

FLAT-WNM4C (CVE-2022-28201)

Improper resource allocation In mediawiki

4.0

Medium

Ecosystem: Debian

Component: mediawiki

FLAT-8A2TI (CVE-2022-34911)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-JTCJP (CVE-2022-34912)

Server side cross-site scripting In mediawiki

1.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-JLJ6N (CVE-2022-31091)

Sensitive information sent insecurely In mediawiki

2.3

Low

Ecosystem: Debian

Component: mediawiki

FLAT-WJB4N (CVE-2022-29248)

Insecurely generated cookies In mediawiki

4.9

Medium

Ecosystem: Debian

Component: mediawiki

FLAT-P5LCG (CVE-2017-0371)

Enabled default configuration In mediawiki

6.6

Medium

Ecosystem: Debian

Component: mediawiki