Lucene search
K

40 matches found

Tenable Nessus
Tenable Nessus
added 2025/10/27 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2025-62656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking...

5.8CVSS5.9AI score0.00039EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/10/21 8:29 p.m.6 views

CVE-2025-62656

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44...

5.8CVSS6AI score0.00039EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/20 9:30 p.m.1 views

EUVD-2025-35105

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44...

5.8CVSS5.6AI score0.00039EPSS
Exploits0References2
NVD
NVD
added 2025/10/20 9:15 p.m.2 views

CVE-2025-62656

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44...

5.8CVSS0.00039EPSS
Exploits0References1
OSV
OSV
added 2025/10/20 9:15 p.m.0 views

UBUNTU-CVE-2025-62656

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44...

5.8CVSS5.8AI score0.00039EPSS
Exploits0References3
CVE
CVE
added 2025/10/20 8:15 p.m.7 views

CVE-2025-62656

CVE-2025-62656 concerns a stored XSS in the Wikimedia Foundation MediaWiki GlobalBlocking extension. The connected sources confirm the vulnerability arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Affected versions are MediaWiki Globa...

5.8CVSS5.7AI score0.00039EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/20 8:15 p.m.2 views

CVE-2025-62656 GlobalBlocking Special:GlobalBlockList vulnerable to message key stored XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44...

5.8CVSS5.7AI score0.00039EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/20 8:15 p.m.6 views

CVE-2025-62656 GlobalBlocking Special:GlobalBlockList vulnerable to message key stored XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44...

5.8CVSS0.00039EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-2987

Malware in sbrugna...

9.8CVSS9AI score0.00321EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2012-4323

Malware in sbrugna...

7.5CVSS7.4AI score0.00552EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-3105

Malicious code in bioql PyPI...

3.5CVSS6.6AI score0.00145EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 12:0 p.m.2 views

CVE-2025-23073

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension...

3.5CVSS6.8AI score0.00145EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:42 a.m.4 views

CVE-2024-23179

An issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special:GlobalBlock?uselang=x-xss URI, i18n-based XSS can occur via the parentheses message. This affects subtitle links in buildSubtitleLinks...

6.1CVSS5.9AI score0.00359EPSS
Exploits1References1
NVD
NVD
added 2025/01/14 7:15 p.m.9 views

CVE-2025-23073

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension...

3.5CVSS0.00145EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/14 6:45 p.m.10 views

CVE-2025-23073 API list=globalblocks can reveal IP of autoblock if username and IP are included in the bgtargets parameter

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension...

0.00145EPSS
Exploits0References2
CVE
CVE
added 2025/01/14 6:45 p.m.77 views

CVE-2025-23073

CVE-2025-23073 affects the MediaWiki GlobalBlocking Extension. The vulnerability can lead to exposure of embedded sensitive data via the API (globalblocks list potentially revealing the autoblock IP when username/IP are included in the bgtargets parameter); it briefly impacted the master branch. ...

3.5CVSS6.5AI score0.00145EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.1 views

Mediawiki GlobalBlocking Extension 信息泄露漏洞

Mediawiki GlobalBlocking Extension is an extension of the Wikimedia Foundation USA. An information disclosure vulnerability exists in Mediawiki GlobalBlocking Extension, which arises from the exposure of sensitive information and allows unauthorized visitors to access embedded sensitive data...

3.5CVSS6.1AI score0.00145EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.1 views

PT-2025-4806 · Mediawiki · Mediawiki Globalblocking Extension

Name of the Vulnerable Software and Affected Versions: MediaWiki GlobalBlocking Extension affected versions not specified Description: The issue concerns an Exposure of Sensitive Information to an Unauthorized Actor, allowing the retrieval of embedded sensitive data. It briefly impacted the maste...

3.5CVSS6.8AI score0.00145EPSS
Exploits0References5
OSV
OSV
added 2024/03/06 11:14 a.m.12 views

BIT-MEDIAWIKI-2020-10534

In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges. This is related to the case in which an IP address is contained in two ranges, one of which is locally disabled...

9.8CVSS9.5AI score0.00321EPSS
Exploits0References3
OSV
OSV
added 2024/03/06 10:55 a.m.13 views

BIT-MEDIAWIKI-2024-23179

An issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special:GlobalBlock?uselang=x-xss URI, i18n-based XSS can occur via the parentheses message. This affects subtitle links in buildSubtitleLinks...

6.1CVSS5.9AI score0.00359EPSS
Exploits1References3
Rows per page
Query Builder