Lucene search
K

8 matches found

Hacker One
Hacker One
added 2021/04/26 9:34 p.m.110 views

GitHub Security Lab: Java: JSONP Injection

This bug was reported directly to GitHub Security Lab...

1.2AI score
Exploits0
securityvulns
securityvulns
added 2014/08/26 12:0 a.m.59 views

[SECURITY] [DSA 3011-1] mediawiki security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3011-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 23, 2014 http://www.debian.org/security/faq -...

6.8CVSS1.5AI score0.00368EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2014/08/25 12:0 a.m.29 views

Debian DSA-3011-1 : mediawiki - security update

It was discovered that MediaWiki, a website engine for collaborative work, is vulnerable to JSONP injection in Flash CVE-2014-5241 and clickjacking between OutputPage and ParserOutput CVE-2014-5243 . The vulnerabilities are addressed by upgrading MediaWiki to the new upstream version 1.19.18, whi...

6.8CVSS8.3AI score0.00368EPSS
Exploits2References8
OSV
OSV
added 2014/08/23 12:0 a.m.24 views

DSA-3011-1 mediawiki - security update

Bulletin has no description...

6.8CVSS6.1AI score0.00368EPSS
Exploits2
OpenVAS
OpenVAS
added 2014/08/23 12:0 a.m.26 views

Debian Security Advisory DSA 3011-1 (mediawiki - security update)

It was discovered that MediaWiki, a website engine for collaborative work, is vulnerable to JSONP injection in Flash CVE-2014-5241 and clickjacking between OutputPage and ParserOutput CVE-2014-5243 . The vulnerabilities are addressed by upgrading MediaWiki to the new upstream version 1.19.18, whi...

6.8CVSS0.00368EPSS
Exploits2References1
OpenVAS
OpenVAS
added 2014/08/22 12:0 a.m.25 views

Debian: Security Advisory (DSA-3011-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7AI score0.00368EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2014/08/07 12:0 a.m.14 views

Mandriva Linux Security Advisory : mediawiki (MDVSA-2014:153)

Updated mediawiki packages fix security vulnerabilities : MediaWiki before 1.23.2 is vulnerable to JSONP injection in Flash, XSS in mediawiki.page.image.pagination.js, and clickjacking between OutputPage and ParserOutput. This update provides MediaWiki 1.23.2, fixing these and other issues...

5.5AI score
Exploits0References1
OSV
OSV
added 2014/08/05 8:8 p.m.4 views

MGASA-2014-0309 Updated mediawiki packages fix security vulnerabilities

MediaWiki before 1.23.2 is vulnerable to JSONP injection in Flash CVE-2014-5241, XSS in mediawiki.page.image.pagination.js CVE-2014-5242, and clickjacking between OutputPage and ParserOutput CVE-2014-5243. This update provides MediaWiki 1.23.2, fixing these and other issues...

6.8CVSS5.7AI score0.0042EPSS
Exploits3References4
Rows per page
Query Builder