Lucene search
K

34 matches found

Tenable Nessus
Tenable Nessus
added 2025/10/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-62697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in The Wikimedia Foundation Mediawiki -...

8.8CVSS5.9AI score0.00056EPSS
Exploits0References2
CNVD
CNVD
added 2025/10/23 12:0 a.m.2 views

Mediawiki - LanguageSelector Extension Code Injection Vulnerability

Mediawiki - LanguageSelector Extension is an extension for MediaWiki to provide multi-language support, allowing users to select and configure the interface language. A code injection vulnerability exists in Mediawiki - LanguageSelector Extension, which stems from improper neutralization of speci...

8.8CVSS7.6AI score0.00056EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/20 7:27 p.m.5 views

CVE-2025-62697 Improperly sanitized style parameter in LanguageSelector

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - LanguageSelector Extension: from master before 1.39...

8.8CVSS0.00056EPSS
Exploits0References2
CVE
CVE
added 2025/10/20 7:27 p.m.9 views

CVE-2025-62697

Summary (CVE-2025-62697) : A code injection vulnerability exists in the Wikimedia Foundation’s MediaWiki LanguageSelector Extension due to improper neutralization of special elements in output used by downstream components. Affected: LanguageSelector Extension for MediaWiki, specifically versions...

8.8CVSS6.7AI score0.00056EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/20 7:27 p.m.1 views

CVE-2025-62697 Improperly sanitized style parameter in LanguageSelector

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - LanguageSelector Extension: from master before 1.39...

8.8CVSS6.7AI score0.00056EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2011-0742

Malware in sbrugna...

7.2CVSS6.1AI score0.00051EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2013-1106

Malware in sbrugna...

4.6CVSS6.2AI score0.00062EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2011-1840

Malware in sbrugna...

7.2CVSS6.3AI score0.00051EPSS
Exploits1References10
OSV
OSV
added 2024/06/25 12:48 p.m.5 views

MAL-2024-2593 Malicious code in language-selector-content (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:48 p.m.2 views

Malicious code in language-selector-content (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
Microsoft KB
Microsoft KB
added 2018/06/12 7:0 a.m.161 views

June 12, 2018—KB4284835 (OS Build 17134.112)

June 12, 2018—KB4284835 OS Build 17134.112 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Provides protections from an additional subclass of speculative execution side channel...

9.3CVSS7.3AI score0.79916EPSS
Exploits10
NVD
NVD
added 2013/10/03 9:55 p.m.23 views

CVE-2013-1066

language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

4.6CVSS6.1AI score0.00062EPSS
Exploits0References6
Prion
Prion
added 2013/10/03 9:55 p.m.20 views

Race condition

language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

4.6CVSS6.2AI score0.00062EPSS
Exploits0References6Affected Software2
CVE
CVE
added 2013/10/03 9:0 p.m.60 views

CVE-2013-1066

The CVE-2013-1066 entry affects language-selector in multiple Ubuntu-derived streams (0.110.x before 0.110.1, 0.90.x before 0.90.1, 0.79.x before 0.79.4). The root cause is improper use of D-Bus for communication with Polkit, enabling a PolkitUnixProcess PolkitSubject race condition that local us...

4.6CVSS6.2AI score0.00062EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2013/10/03 9:0 p.m.32 views

CVE-2013-1066

language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

6.4AI score0.00062EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2013/09/24 12:0 a.m.15 views

Ubuntu Update for language-selector USN-1958-1

Check for the Version of language-selector OpenVAS Vulnerability Test $Id: gbubuntuUSN19581.nasl 8466 2018-01-19 06:58:30Z teissa $ Ubuntu Update for language-selector USN-1958-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This...

4.6CVSS6.6AI score0.00062EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/09/24 12:0 a.m.27 views

Ubuntu: Security Advisory (USN-1958-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.6CVSS6.7AI score0.00062EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2013/09/19 12:0 a.m.21 views

Ubuntu 12.04 LTS / 12.10 / 13.04 : language-selector vulnerability (USN-1958-1)

It was discovered that language-selector was using polkit in an unsafe manner. A local attacker could possibly use this issue to bypass intended polkit authorizations. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory...

4.6CVSS5.5AI score0.00062EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2013/09/18 1:58 p.m.46 views

USN-1958-1: language-selector vulnerability

It was discovered that language-selector was using polkit in an unsafe manner. A local attacker could possibly use this issue to bypass intended polkit authorizations...

4.6CVSS5.4AI score0.00062EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2013/09/18 12:0 a.m.27 views

CVE-2013-1066

language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

4.6CVSS5.9AI score0.00062EPSS
Exploits0References2
Rows per page
Query Builder