Lucene search
Ubuntu.comUB:CVE-2014-3966HistoryJun 06, 2014 - 12:00 a.m.
CVE-2014-3966
2014-06-0600:00:00
ubuntu.com
ubuntu.com
11
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
69.3%
Cross-site scripting (XSS) vulnerability in Special:PasswordReset in
MediaWiki before 1.19.16, 1.21.x before 1.21.10, and 1.22.x before 1.22.7,
when wgRawHtml is enabled, allows remote attackers to inject arbitrary web
script or HTML via an invalid username.
Bugs
Related
osv
osv
mediawiki - security update
2014-06-12 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2957-1] mediawiki security update
2014-06-14 00:00:00
openvas
openvas
Debian Security Advisory DSA 2957-1 (mediawiki - security update)
2014-06-12 00:00:00
Debian: Security Advisory (DSA-2957-1)
2014-06-11 00:00:00
Mageia: Security Advisory (MGASA-2014-0253)
2022-01-28 00:00:00
nessus
nessus
Debian DSA-2957-1 : mediawiki - security update
2014-06-13 00:00:00
MediaWiki < 1.19.16 / 1.21.10 / 1.22.7 'Special:PasswordReset' XSS
2014-06-19 00:00:00
Mandriva Linux Security Advisory : mediawiki (MDVSA-2014:119)
2014-06-11 00:00:00
debiancve
debiancve
CVE-2014-3966
2014-06-06 14:55:05
mageia
mageia
Updated mediawiki packages fix security vulnerability
2014-06-06 10:08:57
prion
prion
Cross site scripting
2014-06-06 14:55:00
nvd
nvd
CVE-2014-3966
2014-06-06 14:55:05
cve
cve
CVE-2014-3966
2014-06-06 14:55:05
cvelist
cvelist
CVE-2014-3966
2014-06-06 14:00:00
debian
debian
[SECURITY] [DSA 2957-1] mediawiki security update
2014-06-12 17:59:07
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
69.3%
Related for UB:CVE-2014-3966