# CVEs published 2015-09-01

14 CVEs were published on September 1, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2013-7444](https://cve.now/CVE-2013-7444.md): The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked via the "Change block (no CVSS)
- [CVE-2015-2807](https://cve.now/CVE-2015-2807.md): Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud plugin before 0.1.1 for WordPress allows remote attacke (no CVSS)
- [CVE-2015-6520](https://cve.now/CVE-2015-6520.md): IPPUSBXD before 1.22 listens on all interfaces, which allows remote attackers to obtain access to USB connected printers via a direct reques (no CVSS)
- [CVE-2015-6727](https://cve.now/CVE-2015-6727.md): The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to (no CVSS)
- [CVE-2015-6728](https://cve.now/CVE-2015-6728.md): The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does not perform token co (no CVSS)
- [CVE-2015-6729](https://cve.now/CVE-2015-6729.md): Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows rem (no CVSS)
- [CVE-2015-6730](https://cve.now/CVE-2015-6730.md): Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows rem (no CVSS)
- [CVE-2015-6731](https://cve.now/CVE-2015-6731.md): Multiple cross-site scripting (XSS) vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2015-6732](https://cve.now/CVE-2015-6732.md): Multiple cross-site scripting (XSS) vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2015-6733](https://cve.now/CVE-2015-6733.md): GeSHi, as used in the SyntaxHighlight\_GeSHi extension and MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2, allows r (no CVSS)
- [CVE-2015-6734](https://cve.now/CVE-2015-6734.md): Cross-site scripting (XSS) vulnerability in contrib/cssgen.php in the GeSHi, as used in the SyntaxHighlight\_GeSHi extension and MediaWiki be (no CVSS)
- [CVE-2015-6735](https://cve.now/CVE-2015-6735.md): The reset functionality in the TimedMediaHandler extension for MediaWiki does not create a new transcode, which allows remote attackers to c (no CVSS)
- [CVE-2015-6736](https://cve.now/CVE-2015-6736.md): The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a regular expression. (no CVSS)
- [CVE-2015-6737](https://cve.now/CVE-2015-6737.md): Cross-site scripting (XSS) vulnerability in the Widgets extension for MediaWiki allows remote attackers to inject arbitrary web script or HT (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-09-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.