Archive
1 September 2015
Vulnerabilities first published on this day (UTC), newest first.
14 results · Feed
-
Unscored —
The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a reg…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers…
-
Unscored —
GeSHi, as used in the SyntaxHighlight_GeSHi extension and MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x be…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers…
-
Unscored —
The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allow…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Widgets extension for MediaWiki allows remote attackers to inject arbit…
-
Unscored —
The reset functionality in the TimedMediaHandler extension for MediaWiki does not create a new transcode, which allows …
-
Unscored —
Cross-site scripting (XSS) vulnerability in contrib/cssgen.php in the GeSHi, as used in the SyntaxHighlight_GeSHi exten…
-
Unscored —
IPPUSBXD before 1.22 listens on all interfaces, which allows remote attackers to obtain access to USB connected printer…
-
Unscored —
Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x bef…
-
Unscored —
Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x bef…
-
Unscored —
The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does…
-
Unscored —CVE-2015-2807 Scanner template
Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud plugin before 0.1.1 for WordPress …
-
Unscored —
The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked …