26170 matches found
CVE-2025-53490
CVE-2025-53490 concerns the Wikimedia Foundation MediaWiki CampaignEvents Extension (versions 1.43.X up to 1.43.1) where an improper neutralization of input during web page generation enables Cross-Site Scripting (XSS). The entry states vulnerable component as the CampaignEvents Extension and fix...
DEBIAN-CVE-2025-38169
In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP On system with SME, a thread's kernel FPSIMD state may be erroneously clobbered during a context switch immediately after that state is restored. Systems without SME...
PT-2025-27809 · Mediawiki +1 · Mediawiki +1
Name of the Vulnerable Software and Affected Versions: Mediawiki - Scribunto Extension versions 1.39.0 through 1.39.11 Mediawiki - Scribunto Extension versions 1.42.0 through 1.42.6 Mediawiki - Scribunto Extension versions 1.43.0 through 1.43.1 Description: The issue is related to an Improper...
PT-2025-27831 · Mediawiki +1 · Mediawiki Citizen Skin +1
Name of the Vulnerable Software and Affected Versions: Citizen MediaWiki skin versions 1.9.4 through 3.4.0 Description: The Citizen MediaWiki skin has an issue where short descriptions set via the ShortDescription extension are inserted as raw HTML, allowing any user to insert arbitrary HTML into...
Wikimedia Mediawiki CentralAuth Extension 安全漏洞
The Wikimedia Mediawiki CentralAuth Extension is a Wikimedia Foundation extension for integration and unified login between wiki projects. A security vulnerability exists in Wikimedia Mediawiki CentralAuth Extension versions prior to 1.39.13, prior to 1.42.7, and prior to 1.43.2, which stems from...
PT-2025-27807 · Mediawiki +1 · Mediawiki +1
Name of the Vulnerable Software and Affected Versions: Mediawiki - GoogleDocs4MW Extension versions 1.42.X through 1.42.6 Mediawiki - GoogleDocs4MW Extension versions 1.43.X through 1.43.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known...
Wikimedia Mediawiki Scribunto Extension 安全漏洞
Wikimedia Mediawiki Scribunto Extension is a Wikimedia Foundation extension for wiki projects. A security vulnerability exists in Wikimedia Mediawiki Scribunto Extension that stems from improper access control and could lead to unauthorized feature access. The following versions are affected:...
PT-2025-27813 · Unknown +1 · Masseditregex Extension +1
Name of the Vulnerable Software and Affected Versions: Mediawiki - MassEditRegex Extension versions 1.39.X through 1.39.11 Mediawiki - MassEditRegex Extension versions 1.42.X through 1.42.6 Mediawiki - MassEditRegex Extension versions 1.43.X through 1.43.1 Description: The issue is related to...
Wikimedia Mediawiki GoogleDocs4MW Extension 安全漏洞
The Wikimedia Mediawiki GoogleDocs4MW Extension is a Wikimedia Foundation extension for wiki projects. A security vulnerability in Wikimedia Mediawiki GoogleDocs4MW Extension version 1.42.7 prior to 1.42.x and 1.43.2 prior to 1.43.x, which stems from improper input neutralization, could lead to a...
Wikimedia Mediawiki CampaignEvents Extension 安全漏洞
Wikimedia Mediawiki CampaignEvents Extension is a Wikimedia Foundation extension for wiki projects. A security vulnerability exists in Wikimedia Mediawiki CampaignEvents Extension 1.43.2 prior to version 1.43.x. The vulnerability stems from improper input neutralization and could lead to cross-si...
Wikimedia Mediawiki FeaturedFeeds Extension 安全漏洞
The Wikimedia Mediawiki FeaturedFeeds Extension is a Wikimedia Foundation extension for wiki projects. A security vulnerability exists in Wikimedia Mediawiki FeaturedFeeds Extension versions 1.39.x, 1.42.x, and 1.43.x, which stems from insufficient input validation and could lead to cross-site...
PT-2025-27810 · Mediawiki · Mediawiki +1
Name of the Vulnerable Software and Affected Versions: Mediawiki - FeaturedFeeds Extension versions 1.39.X through 1.43.X Description: The issue is related to an Improper Input Validation vulnerability that allows Cross-Site Scripting XSS in the Mediawiki - FeaturedFeeds Extension. Recommendation...
Updated rootcerts, nss & firefox packages fix security vulnerabilities
CVE-2025-6424: A use-after-free in FontFaceSet resulted in a potentially exploitable crash. CVE-2025-6425: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private...
xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors
A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash...
xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension
A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks...
xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate...
xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Data Leak in XFIXES Extension's XFixesSetClientDisconnectMode
A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests...
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: CVE-2025-49176: Fixed the integer overflow in Big Requests Extension bsc1244084. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...