Lucene search
K

41 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2021-16086

Malware in sbrugna...

9.4CVSS7.5AI score0.00441EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-12404

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00296EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-12408

Malicious code in bioql PyPI...

4.6CVSS6.5AI score0.00096EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-22470

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.0029EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/04/26 9:7 p.m.9 views

CVE-2025-43861

ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 2f177dc, ManageWiki is vulnerable to reflected or stored XSS in the review dialog. A logged-in attacker must change a form field to include a malicious payload. If that same user then opens the "Review Changes"...

5.4CVSS5.7AI score0.00296EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 12:5 a.m.2 views

CVE-2025-32964

ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 00bebea, when enabling a conflicting extension, a restricted extension would be automatically disabled even if the user did not hold the ManageWiki-restricted right. This issue has been patched in commit 00bebea. ...

4.6CVSS6.7AI score0.00096EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 5:18 p.m.3 views

CVE-2025-32956

ManageWiki is a MediaWiki extension allowing users to manage wikis. Versions before commit f504ed8, are vulnerable to SQL injection when renaming a namespace in Special:ManageWiki/namespaces when using a page prefix namespace name, which is the current namespace you are renaming with an injection...

8CVSS7.7AI score0.00154EPSS
Exploits1References1
NVD
NVD
added 2025/04/24 9:15 p.m.14 views

CVE-2025-43861

ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 2f177dc, ManageWiki is vulnerable to reflected or stored XSS in the review dialog. A logged-in attacker must change a form field to include a malicious payload. If that same user then opens the "Review Changes"...

5.4CVSS0.00296EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/04/24 8:49 p.m.16 views

CVE-2025-43861 ManageWiki Vulnerable to Self-XSS in review dialog via unsanitized field reflection

ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 2f177dc, ManageWiki is vulnerable to reflected or stored XSS in the review dialog. A logged-in attacker must change a form field to include a malicious payload. If that same user then opens the "Review Changes"...

4.4CVSS0.00296EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/04/24 8:49 p.m.6 views

CVE-2025-43861 ManageWiki Vulnerable to Self-XSS in review dialog via unsanitized field reflection

ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 2f177dc, ManageWiki is vulnerable to reflected or stored XSS in the review dialog. A logged-in attacker must change a form field to include a malicious payload. If that same user then opens the "Review Changes"...

4.4CVSS5.8AI score0.00296EPSS
Exploits1References2
CVE
CVE
added 2025/04/24 8:49 p.m.58 views

CVE-2025-43861

ManageWiki (a MediaWiki extension) is affected by a self‑XSS vulnerability in the review changes dialog. Before commit 2f177dc, an authenticated user can alter a form field to inject a payload, which is then executed when the user opens the Review Changes dialog. The issue has been patched in com...

5.4CVSS4.4AI score0.00296EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2025/04/24 8:49 p.m.4 views

CVE-2025-43861 ManageWiki Vulnerable to Self-XSS in review dialog via unsanitized field reflection

ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 2f177dc, ManageWiki is vulnerable to reflected or stored XSS in the review dialog. A logged-in attacker must change a form field to include a malicious payload. If that same user then opens the "Review Changes"...

4.4CVSS6AI score0.00296EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/04/24 12:0 a.m.1 views

ManageWiki 跨站脚本漏洞

ManageWiki is an extension to the Miraheze open source. A cross-site scripting vulnerability exists in ManageWiki that stems from improper input neutralization and could lead to a reflected or stored cross-site scripting attack...

5.4CVSS5.8AI score0.00296EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/04/24 12:0 a.m.3 views

PT-2025-17856 · Mediawiki · Managewiki

Name of the Vulnerable Software and Affected Versions: ManageWiki versions prior to commit 2f177dc Description: The issue concerns a reflected or stored XSS vulnerability in the review dialog of ManageWiki, a MediaWiki extension. An attacker with a logged-in session can exploit this by modifying ...

4.4CVSS5.5AI score0.00296EPSS
Exploits1References7
NVD
NVD
added 2025/04/22 6:16 p.m.8 views

CVE-2025-32964

ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 00bebea, when enabling a conflicting extension, a restricted extension would be automatically disabled even if the user did not hold the ManageWiki-restricted right. This issue has been patched in commit 00bebea. ...

4.6CVSS0.00096EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/04/22 5:15 p.m.13 views

CVE-2025-32964 ManageWiki vulnerable to permission bypass when disabling extensions requiring certain permissions in Special:ManageWiki/extensions

ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 00bebea, when enabling a conflicting extension, a restricted extension would be automatically disabled even if the user did not hold the ManageWiki-restricted right. This issue has been patched in commit 00bebea. ...

4.6CVSS0.00096EPSS
Exploits0References2
CVE
CVE
added 2025/04/22 5:15 p.m.52 views

CVE-2025-32964

CVE-2025-32964 affects the ManageWiki MediaWiki extension. The root cause: before commit 00bebea, enabling a conflicting extension could cause a restricted extension to be auto-disabled even if the user lacked the ManageWiki-restricted right. The issue has been patched in commit 00bebea. Practica...

4.6CVSS4.6AI score0.00096EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/22 5:15 p.m.4 views

CVE-2025-32964 ManageWiki vulnerable to permission bypass when disabling extensions requiring certain permissions in Special:ManageWiki/extensions

ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 00bebea, when enabling a conflicting extension, a restricted extension would be automatically disabled even if the user did not hold the ManageWiki-restricted right. This issue has been patched in commit 00bebea. ...

4.6CVSS6.9AI score0.00096EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/04/22 12:0 a.m.2 views

PT-2025-17560 · Mediawiki · Managewiki

Name of the Vulnerable Software and Affected Versions: ManageWiki affected versions not specified Description: The issue concerns the ManageWiki MediaWiki extension, which allows users to manage wikis. Prior to a specific commit 00bebea, when a conflicting extension was enabled, a restricted...

4.6CVSS5.9AI score0.00096EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/04/22 12:0 a.m.1 views

ManageWiki 授权问题漏洞

ManageWiki is an open source extension for Miraheze. A license issue vulnerability exists in ManageWiki, which stems from improper extension management and could result in restricted extensions being automatically disabled...

4.6CVSS6.6AI score0.00096EPSS
Exploits0References2
Rows per page
Query Builder