26193 matches found
CVE-2025-62700: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - MultiBoilerplate Extensionmaste allows Stored XSS.This issue affects Mediawiki - MultiBoilerplate Extensionmaste: from master before 1.39...
PT-2025-42802
Name of the Vulnerable Software and Affected Versions Mediawiki - MultiBoilerplate Extensionmaste versions prior to 1.39 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that...
CVE-2025-62671
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: master...
CVE-2025-62670
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - FlexDiagrams Extension allows Stored XSS.This issue affects Mediawiki - FlexDiagrams Extension: master...
EUVD-2025-34940
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki PollNY extension allows Stored XSS.This issue affects MediaWiki PollNY extension: 1.39, 1.43, 1.44...
Mediawiki - GrowthExperiments Extension 安全漏洞
Mediawiki - GrowthExperiments Extension is an extension to MediaWiki designed to increase new user engagement and the quality of content contributions through a task system, a recommendation mechanism and a mentor feature. A cross-site scripting vulnerability exists in Mediawiki - GrowthExperimen...
CVE-2025-62665: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - Skin:BlueSky allows Stored XSS.This issue affects Mediawiki - Skin:BlueSky: from master before 1.39...
CVE-2025-62664: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - ImageRating Extension allows Stored XSS.This issue affects Mediawiki - ImageRating Extension: from master before 1.39...
CVE-2025-62662: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - AdvancedSearch Extension allows Stored XSS.This issue affects Mediawiki - AdvancedSearch Extension: from master before 1.39...
CVE-2025-62663: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - UploadWizard Extension allows Stored XSS.This issue affects Mediawiki - UploadWizard Extension: from master before 1.39...
PT-2025-42685
Name of the Vulnerable Software and Affected Versions Mediawiki - FlexDiagrams Extension versions prior to master. Description The Wikimedia Foundation Mediawiki - FlexDiagrams Extension contains a flaw related to improper input handling during web page generation, potentially leading to Stored...
PT-2025-42679
Name of the Vulnerable Software and Affected Versions Mediawiki - ImageRating Extension versions prior to 1.39 Description The Mediawiki - ImageRating Extension contains a flaw related to improper input handling during web page generation, potentially leading to Stored Cross-site Scripting XSS...
PT-2025-43839
Name of the Vulnerable Software and Affected Versions DirectoryPress versions prior to 3.6.26 Description Insufficient input sanitization and output escaping allow for DOM-Based and Stored Cross-Site Scripting XSS. This issue enables authenticated attackers with contributor-level access and above...
EUVD-2025-34878
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jason C. Memberlite Shortcodes memberlite-shortcodes allows Stored XSS.This issue affects Memberlite Shortcodes: from n/a through 1.4.1...
Security update for grub2
This update for grub2 fixes the following issues: Fix error: /boot/grub2/x8664-efi/bli.mod not found bsc1231591 Fix OOM error in loading loopback file bsc1230840 bsc1249140 Update the patch to fix "SRK not matched" errors when unsealing the key bsc1232411 bsc1247242 Security fixes for 2024: Bump...
Arbitrary File Read
xml2rfc is vulnerable to Arbitrary file read. The vulnerability is due to improper input sanitization when generating PDF files, which allows an attacker to inject a malicious link element into the prepped RFCXML and read arbitrary files from the filesystem...
PT-2025-42667
Name of the Vulnerable Software and Affected Versions MediaWiki QuizGame extension versions 1.39, 1.43, and 1.44 Description A flaw exists in the MediaWiki QuizGame extension related to improper input handling during web page generation, leading to a Stored Cross-site Scripting XSS condition. Thi...
MalCVE: Malware Detection and CVE Association Using Large Language Models
Malicious software attacks are having an increasingly significant economic impact. Commercial malware detection software can be costly, and tools that attribute malware to the specific software vulnerabilities it exploits are largely lacking. Understanding the connection between malware and the...
Juniper Junos Space < 24.1R4 Multiple Vulnerabilities (JSA103140)
According to its self-reported version number, the remote Junos Space version is prior to 24.1R4. It is, therefore, affected by multiple vulnerabilities, including the following: - An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper...
