26181 matches found
MediaWiki ReportIncident Extension 安全漏洞
The MediaWiki ReportIncident Extension is an open-source extension for reporting wiki incidents in MediaWiki. Versions 1.43.7, 1.44.4, and 1.45.2 of the MediaWiki ReportIncident Extension contain security vulnerabilities. These vulnerabilities stem from unlimited resource allocation, which may le...
PT-2026-30847
A native messaging host vulnerability in Pega Browser Extension PBE affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension. A bad actor could create a website that contains malicious code that targets PBE. The vulnerability could occur if a user navigat...
PT-2026-30846
An arbitrary file-write vulnerability in Pega Browser Extension PBE affects Pega Robotic Automation version 22.1 or R25 users who are running automations that work with Google Chrome or Microsoft Edge. A bad actor could create a website that includes malicious code. The vulnerability could occur ...
PT-2026-31011
Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in WikiWorks Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: before 3.8.7...
MediaWiki - Cargo Extension 安全漏洞
MediaWiki - Cargo Extension is an open-source plugin for querying and storing data in MediaWiki. Versions of MediaWiki - Cargo Extension prior to 3.8.7 contained security vulnerabilities, which were caused by improper handling of script-related HTML tags. These vulnerabilities could lead to...
MediaWiki GlobalWatchlist Extension 安全漏洞
The MediaWiki GlobalWatchlist Extension is an open-source global monitoring extension for MediaWiki. The MediaWiki GlobalWatchlist Extension has a security vulnerability, which stems from improper input during page generation, potentially leading to cross-site scripting attacks...
PT-2026-30974
Improper neutralization of alternate XSS syntax vulnerability in The Wikimedia Foundation Mediawiki - Wikilove Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - Wikilove Extension: 1.43.7, 1.44.4, 1.45.2...
MediaWiki Score Extension 安全漏洞
The MediaWiki Score Extension is an open-source extension component for rendering musical scores in MediaWiki. The MediaWiki Score Extension has a security vulnerability, which stems from improper input during page generation, potentially leading to cross-site scripting attacks...
MediaWiki - WikiLove Extension 安全漏洞
MediaWiki – WikiLove Extension is an extension to MediaWiki that promotes the spirit of love and care in wikis. Versions 1.43.7, 1.44.4, and 1.45.2 of MediaWiki – WikiLove Extension contain security vulnerabilities. These vulnerabilities stem from improper neutralization of alternative XSS syntax...
Security Advisory 0135
Security Advisory 0135 PDF Date: April 7, 2026 Revision | Date | Changes ---|---|--- 1.0 | April 7th, 2026 | Initial release 1.1 | April 28th, 2026 | Correction to fixed releases fixed in 4.32.10, not 4.32.9 The CVE-ID tracking this issue: CVE-2025-31133 CVSSv3.1 Base Score: 7.8/10...
PT-2026-31035
Name of the Vulnerable Software and Affected Versions OpenSSL FIPS Module version 3.6 Description Applications utilizing AES-CFB128 encryption or decryption on systems equipped with AVX-512 and VAES support may experience an out-of-bounds read of up to 15 bytes when handling partial cipher blocks...
PT-2026-31042
Name of the Vulnerable Software and Affected Versions The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension affected versions not specified Description A cross-site scripting XSS issue exists in The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension. This allows for XSS attacks...
MediaWiki - Cargo Extension 安全漏洞
MediaWiki - Cargo Extension is an open-source plugin for querying and storing data in MediaWiki. Versions of MediaWiki - Cargo Extension prior to 3.8.7 contained security vulnerabilities, which were caused by improper handling of script-related HTML tags. These vulnerabilities could lead to...
MediaWiki CampaignEvents Extension 安全漏洞
The MediaWiki CampaignEvents Extension is an open-source extension for managing wiki events in MediaWiki. Versions 1.43.7, 1.44.4, and 1.45.2 of the MediaWiki CampaignEvents Extension contain security vulnerabilities. These vulnerabilities stem from improper handling of inputs during page...
PT-2026-31045
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in The Wikimedia Foundation Mediawiki - Score Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - Score Extension...
PT-2026-30992
Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: before 3.8.7...
Pegasystems Pega Robotic Automation 安全漏洞
Pegasystems Pega Robotic Automation is a robotic process automation software developed by Pegasystems, Inc. In versions 22.1 and R25 of Pegasystems Pega Robotic Automation, there are security vulnerabilities. These vulnerabilities stem from a arbitrary file writing vulnerability in the Pega Brows...
MediaWiki - CentralAuth Extension 安全漏洞
MediaWiki - CentralAuth Extension is an authentication plugin developed under open source by MediaWiki. The MediaWiki - CentralAuth Extension has a security vulnerability; this vulnerability arises from the improper removal of sensitive information during storage or transmission, which may lead t...
MediaWiki - ProofreadPage Extension 安全漏洞
MediaWiki - ProofreadPage Extension is an open-source documentation comparison plugin for MediaWiki. The MediaWiki - ProofreadPage Extension has a security vulnerability, which stems from improper input during page generation. This vulnerability may lead to cross-site scripting attacks targeting...
Pegasystems Pega Robotic Automation 安全漏洞
Pegasystems Pega Robotic Automation is a robotic process automation software developed by Pegasystems Inc. in the United States. There is a security vulnerability in Pegasystems Pega Robotic Automation. This vulnerability stems from a vulnerability in the native messaging host of the Pega Browser...