Search for packages
| purl | pkg:deb/debian/mediawiki@1:1.15.4-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-v7k4-r4nw-rud8 | Cross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets (CSS) strings that are processed as script by Internet Explorer. |
CVE-2010-1647
|
| VCID-z1we-4qg8-bbcr | Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to hijack the authentication of users for requests that (1) create accounts or (2) reset passwords, related to the Special:Userlogin form. |
CVE-2010-1648
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T10:04:24.615838+00:00 | Debian Importer | Fixing | VCID-z1we-4qg8-bbcr | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T08:37:51.310053+00:00 | Debian Importer | Fixing | VCID-v7k4-r4nw-rud8 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-12T18:14:21.934055+00:00 | Debian Importer | Fixing | VCID-z1we-4qg8-bbcr | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-11T17:48:15.691380+00:00 | Debian Importer | Fixing | VCID-v7k4-r4nw-rud8 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:45:41.387868+00:00 | Debian Importer | Fixing | VCID-z1we-4qg8-bbcr | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:45:41.331604+00:00 | Debian Importer | Fixing | VCID-v7k4-r4nw-rud8 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |