https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-12T04:53:07.152262+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-566 CERTFR-2015-AVI-566 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Mediawiki</span>. Certaines d'entre elles perme… 2026-10-12T04:53:07.189193+00:00 CERTFR-2015-AVI-566 https://vulnerability.circl.lu/vuln/cnvd-2016-00108 cnvd-2016-00108 2026-10-12T04:53:07.189279+00:00 cnvd-2016-00108 https://vulnerability.circl.lu/vuln/fkie_cve-2015-8628 fkie_cve-2015-8628 2026-10-12T04:53:07.189313+00:00

The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted links combined with page view statistics.

 https://vulnerability.circl.lu/vuln/ghsa-p4wx-g6w3-77pq GHSA-p4wx-g6w3-77pq 2026-10-12T04:53:07.189374+00:00

The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted links combined with page view statistics.

 https://vulnerability.circl.lu/vuln/gsd-2015-8628 gsd-2015-8628 2026-10-12T04:53:07.189404+00:00 gsd-2015-8628 https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-8628 Withdrawn: UBUNTU-CVE-2015-8628 2026-10-12T04:53:07.189424+00:00

Withdrawn by the publisher.

Affected: Ubuntu:18.04:LTS: mediawiki

The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted links combined with page view statistics.