xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension

A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks...

xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors

A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash...

xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate...

xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension

A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check...

xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension

A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks...

xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension

A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check...

xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors

A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash...

xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate...

PT-2025-28181 · Mediawiki · Mediawiki Quiz Extension

Name of the Vulnerable Software and Affected Versions: Mediawiki - Quiz Extension versions 1.39.X through 1.39.12 Mediawiki - Quiz Extension versions 1.42.X through 1.42.6 Mediawiki - Quiz Extension versions 1.43.X through 1.43.1 Description: The issue is related to Improper Neutralization of Inp...

Wikimedia Mediawiki - ApprovedRevs Extension 安全漏洞

Wikimedia Mediawiki - ApprovedRevs Extension is a page versioning extension from the Wikimedia Foundation. A security vulnerability exists in Wikimedia Mediawiki - ApprovedRevs Extension versions prior to 1.39.13, prior to 1.42.7, and prior to 1.43.2, which stems from a system message that is not...

PT-2025-28214 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: Mediawiki - RelatedArticles Extension versions 1.43.X through 1.43.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

PT-2025-28243 · Mediawiki · Mediawiki

Name of the Vulnerable Software and Affected Versions: Mediawiki - CheckUser extension versions 1.39.0 through 1.39.12 Mediawiki - CheckUser extension versions 1.42.0 through 1.42.6 Mediawiki - CheckUser extension versions 1.43.0 through 1.43.1 Description: The CheckUser extension’s...

Wikimedia Mediawiki - AbuseFilter Extension 安全漏洞

Wikimedia Mediawiki - AbuseFilter Extension is an abuse filter from the Wikimedia Foundation. A security vulnerability exists in Wikimedia Mediawiki - AbuseFilter Extension versions prior to 1.39.13, prior to 1.42.7, and prior to 1.43.2, which stems from a lack of authorization and could lead to...

TencentOS Server 3: tigervnc (TSSA-2025:0518)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0518 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

RHEL 7 : xorg-x11-server (RHSA-2025:10360)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10360 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical us...

Wikimedia Mediawiki - CheckUser Extension 安全漏洞

Wikimedia Mediawiki - CheckUser Extension is a Wikimedia Foundation extension for checking IP addresses. A security vulnerability exists in Wikimedia Mediawiki - CheckUser Extension versions prior to 1.39.13, prior to 1.42.7, and prior to 1.43.2, which stems from improperly escaping messages in t...

Wikimedia Mediawiki - FlaggedRevs Extension 安全漏洞

Wikimedia Mediawiki - FlaggedRevs Extension is a Wikimedia Foundation extension for flagging and reviewing revisions. A security vulnerability exists in Wikimedia Mediawiki - FlaggedRevs Extension versions prior to 1.43.2, which stems from improper input neutralization and could lead to a...

Wikimedia Mediawiki - WikiCategoryTagCloud Extension 安全漏洞

Wikimedia Mediawiki - WikiCategoryTagCloud Extension is an extension for Wiki by the Wikimedia Foundation. A security vulnerability exists in Wikimedia Mediawiki - WikiCategoryTagCloud Extension versions prior to 1.39.13, prior to 1.42.7, and prior to 1.43.2, which stems from the linkstyle...

LlamaIndex 安全漏洞

LlamaIndex is a data framework for LLM applications from the LlamaIndex open source. A security vulnerability exists in LlamaIndex version 0.12.21, which stems from an XML entity extension vulnerability in the sitemap parser that could lead to a denial of service attack...

Wikimedia Mediawiki - AbuseFilter Extension 安全漏洞

Wikimedia Mediawiki - AbuseFilter Extension is an abuse filter from the Wikimedia Foundation. A security vulnerability exists in Wikimedia Mediawiki - AbuseFilter Extension versions prior to 1.39.13, prior to 1.42.7, and prior to 1.43.2, which stems from insufficient logging and could lead to a...