https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T14:26:53.328031+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-07531 cnvd-2015-07531 2026-10-27T14:26:53.346065+00:00 cnvd-2015-07531 https://cve.radiocsirt.org/vuln/euvd-2026-95422 EUVD-2026-95422 2026-10-27T14:26:53.346115+00:00 EUVD-2026-95422 https://cve.radiocsirt.org/vuln/fkie_cve-2015-8005 fkie_cve-2015-8005 2026-10-27T14:26:53.346131+00:00

MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail ImageMagick command line argument, which allows remote attackers to obtain the installation path by reading the metadata of a PNG thumbnail file.

 https://cve.radiocsirt.org/vuln/ghsa-2vj4-mfcc-xffc GHSA-2vj4-mfcc-xffc 2026-10-27T14:26:53.346163+00:00

MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail ImageMagick command line argument, which allows remote attackers to obtain the installation path by reading the metadata of a PNG thumbnail file.

 https://cve.radiocsirt.org/vuln/gsd-2015-8005 gsd-2015-8005 2026-10-27T14:26:53.346180+00:00 gsd-2015-8005 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-8005 Withdrawn: UBUNTU-CVE-2015-8005 2026-10-27T14:26:53.346192+00:00

Withdrawn by the publisher.

Affected: Ubuntu:18.04:LTS: mediawiki

MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail ImageMagick command line argument, which allows remote attackers to obtain the installation path by reading the metadata of a PNG thumbnail file.