debian/moin vulnerabilities

Latest debian/moin CVEs

Newest publication first · page 1 of 2

1. DLA-2446-1 moin - security update

   Published 2020-11-10

   Unknown

2. DSA-4787-1 moin - security update

   Published 2020-11-09

   Unknown

3. DSA-4318-1 moin - security update

   Published 2018-10-15

   Unknown

4. DLA-1546-1 moin - security update

   Published 2018-10-15

   Unknown

5. DLA-717-1 moin - security update

   Published 2016-11-22

   Unknown

6. DSA-3715-1 moin - security update

   Published 2016-11-15

   Unknown

7. DSA-2593-1 moin - several

   Published 2012-12-29

   Unknown

8. DSA-2538-1 moin - privilege escalation

   Published 2012-09-05

   Unknown

9. DSA-2321-1 moin - cross-site scripting

   Published 2011-10-10

   Unknown

10. CVE-2010-2970 MoinMoin cross-site scripting (XSS) vulnerability

    Published 2010-08-04

    Medium·CVSS 4.3 EPSS 2.5%

    Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/SlideShow.py, (2) action/anywikidraw.py, and (3) action/language_setup.py, a similar issue t...

11. DSA-2083-1 moin - cross-site scripting

    Published 2010-08-02

    Unknown

12. CVE-2010-1238 MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer fields to have empty values.

    Published 2010-04-05

    Medium·CVSS 5.0 EPSS 2.0%

    MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer fields to have empty values.

13. CVE-2010-0828 MoinMoin Cross-site Scripting (XSS) vulnerability

    Published 2010-04-05

    Low·CVSS 3.5 EPSS 2.3%

    Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creating a page with a crafted URI.

14. DSA-2024-1 moin - cross-site scripting

    Published 2010-03-31

    Unknown

15. CVE-2009-4762 MoinMoin Improper Access Control vulnerability

    Published 2010-03-29

    High·CVSS 7.5 EPSS 3.1%

    MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008...

16. DSA-2014-1 moin - several vulnerabilities

    Published 2010-03-12

    Unknown

17. DSA-1791-1 moin - cross-site scripting

    Published 2009-05-06

    Unknown

18. CVE-2009-1482 MoinMoin Cross-site Scripting (XSS) vulnerability

    Published 2009-04-29

    Medium·CVSS 4.3 EPSS 2.5%

    Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an AttachFile sub-action in the error_msg function or (2) multiple vectors related to package file error...

19. CVE-2008-6603 MoinMoin Access Restrictions Bypassed due to improper ACL enforcement

    Published 2009-04-03

    Medium·CVSS 6.8 EPSS 1.7%

    MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937.

20. CVE-2008-6549 MoinMoin Denial of Service vulnerability via password_checker function

    Published 2009-03-30

    Medium·CVSS 5.0 EPSS 1.5%

    The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service (segmentation fault and crash) via unknown vectors.

21. CVE-2008-6548 MoinMoin improper access control on the included page for the rst parser

    Published 2009-03-30

    Medium·CVSS 5.0 EPSS 1.0%

    The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.

22. DSA-1715-1 moin - insufficient input sanitising

    Published 2009-01-29

    Unknown

23. CVE-2009-0312 MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature

    Published 2009-01-28

    Medium·CVSS 4.3 EPSS 2.4%

    Cross-site scripting (XSS) vulnerability in the antispam feature (security/antispam.py) in MoinMoin 1.7 and 1.8.1 allows remote attackers to inject arbitrary web script or HTML via crafted, disallowed content.

24. DTSA-187-1 moin - insufficient input sanitising

    Published 2009-01-28

    Unknown

25. CVE-2009-0260 MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

    Published 2009-01-23

    Medium·CVSS 4.3 EPSS 5.5%

    Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component with (1) the rename parameter or (2) the drawing parameter (aka...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.