https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 04:53:39 +0000 https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-566 CERTFR-2015-AVI-566 https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-566 https://vulnerability.circl.lu/vuln/cnvd-2016-00109 cnvd-2016-00109 https://vulnerability.circl.lu/vuln/cnvd-2016-00109 https://vulnerability.circl.lu/vuln/fkie_cve-2015-8626 <p>The User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 generates passwords smaller than $wgMinimalPasswordLength, which makes it easier for remote attackers to obtain access via a brute-force attack.</p> <p>The User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 generates passwords smaller than $wgMinimalPasswordLength, which makes it easier for remote attackers to obtain access via a brute-force attack.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2015-8626 https://vulnerability.circl.lu/vuln/ghsa-2vh8-pg5g-9p42 <p>The User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 generates passwords smaller than $wgMinimalPasswordLength, which makes it easier for remote attackers to obtain access via a brute-force attack.</p> <p>The User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 generates passwords smaller than $wgMinimalPasswordLength, which makes it easier for remote attackers to obtain access via a brute-force attack.</p> https://vulnerability.circl.lu/vuln/ghsa-2vh8-pg5g-9p42 https://vulnerability.circl.lu/vuln/gsd-2015-8626 gsd-2015-8626 https://vulnerability.circl.lu/vuln/gsd-2015-8626 https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-8626 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mediawiki</p> <p>The User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 generates passwords smaller than $wgMinimalPasswordLength, which makes it easier for remote attackers to obtain access via a brute-force attack.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mediawiki</p> <p>The User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 generates passwords smaller than $wgMinimalPasswordLength, which makes it easier for remote attackers to obtain access via a brute-force attack.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-8626