<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 12 Oct 2026 04:53:06 +0000</lastBuildDate>
    <item>
      <title>CERTFR-2015-AVI-566 — De multiples vulnérabilités ont été corrigées dans &lt;span
class="textit"&gt;Mediawiki&lt;/span&gt;. Certaines d'entre elles perme…</title>
      <link>https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-566</link>
      <description>CERTFR-2015-AVI-566</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-566</guid>
    </item>
    <item>
      <title>cnvd-2016-00108</title>
      <link>https://vulnerability.circl.lu/vuln/cnvd-2016-00108</link>
      <description>cnvd-2016-00108</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cnvd-2016-00108</guid>
    </item>
    <item>
      <title>fkie_cve-2015-8628</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2015-8628</link>
      <description>&lt;p&gt;The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted links combined with page view statistics.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted links combined with page view statistics.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2015-8628</guid>
    </item>
    <item>
      <title>GHSA-p4wx-g6w3-77pq</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-p4wx-g6w3-77pq</link>
      <description>&lt;p&gt;The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted links combined with page view statistics.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted links combined with page view statistics.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-p4wx-g6w3-77pq</guid>
    </item>
    <item>
      <title>gsd-2015-8628</title>
      <link>https://vulnerability.circl.lu/vuln/gsd-2015-8628</link>
      <description>gsd-2015-8628</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/gsd-2015-8628</guid>
    </item>
    <item>
      <title>Withdrawn: UBUNTU-CVE-2015-8628</title>
      <link>https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-8628</link>
      <description>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:18.04:LTS: mediawiki&lt;/p&gt;
&lt;p&gt;The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted links combined with page view statistics.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:18.04:LTS: mediawiki&lt;/p&gt;
&lt;p&gt;The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted links combined with page view statistics.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-8628</guid>
    </item>
  </channel>
</rss>
