Skip to content
OpenAdvisories

Archive

1 September 2015

Vulnerabilities first published on this day (UTC), newest first.

14 results · Feed

  • Unscored —

    The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a reg…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers…

  • Unscored —

    GeSHi, as used in the SyntaxHighlight_GeSHi extension and MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x be…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers…

  • Unscored —

    The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allow…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Widgets extension for MediaWiki allows remote attackers to inject arbit…

  • Unscored —

    The reset functionality in the TimedMediaHandler extension for MediaWiki does not create a new transcode, which allows …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in contrib/cssgen.php in the GeSHi, as used in the SyntaxHighlight_GeSHi exten…

  • Unscored —

    IPPUSBXD before 1.22 listens on all interfaces, which allows remote attackers to obtain access to USB connected printer…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x bef…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x bef…

  • Unscored —

    The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does…

  • Unscored —
    CVE-2015-2807 Scanner template

    Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud plugin before 0.1.1 for WordPress …

  • Unscored —

    The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked …