Linux Distros Unpatched Vulnerability : CVE-2026-13026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corruption via a...

Chromium: CVE-2026-13026 Use after free in Digital Credentials

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-13026

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:49+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c...

Debian dsa-6364 : chromium - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6364 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6364-1 [email protected] https://www.debian.org/securit...

CVE-2025-13026

Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox 145 and Thunderbird 145...

CVE-2025-13026

Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox 145 and Thunderbird 145...

CVE-2025-13026

Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox 145 and Thunderbird 145...

CVE-2025-13026

Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

CVE-2019-13026

OXID eShop 6.0.x before 6.0.5 and 6.1.x before 6.1.4 allows SQL Injection via a crafted URL, leading to full access by an attacker. This includes all shopping cart options, customer data, and the database. No interaction between the attacker and the victim is necessary...

Linux Distros Unpatched Vulnerability : CVE-2017-13026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions. CVE-2017-13026 Note that Nessus relies on the presenc...

CVE-2024-13026

creationtimestamp| type| source ---|---|--- 2025-01-17 20:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxmdq5yhp2n 2025-01-17 20:44:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfxnxfthnx2e 2025-01-17 21:48:57+00:00| seen|...

CVE-2024-13026 Inadequate Encryption Strength Vulnerability in Roche Algo Edge

A vulnerability exists in Algo Edge up to 2.1.1 - a previously used legacy component of navify® Algorithm Suite. The vulnerability impacts the authentication mechanism of this component and could allow an attacker with adjacent access to the laboratory network and the Algo Edge system to craft...

CVE-2024-13026

CVE-2024-13026 affects Roche Algo Edge up to version 2.1.1, a legacy component of the navify Algorithm Suite. The flaw resides in the authentication mechanism of Algo Edge, enabling an attacker with adjacent access to craft valid authentication tokens and access the component; other navify compon...

CVE-2024-13026 Inadequate Encryption Strength Vulnerability in Roche Algo Edge

A vulnerability exists in Algo Edge up to 2.1.1 - a previously used legacy component of navify® Algorithm Suite. The vulnerability impacts the authentication mechanism of this component and could allow an attacker with adjacent access to the laboratory network and the Algo Edge system to craft...

CVE-2020-13026

...

CVE-2020-13026

CVE-2020-13026 entry is rejected/not used and does not represent an active vulnerability.

CVE-2019-13026

OXID eShop 6.0.x before 6.0.5 and 6.1.x before 6.1.4 allows SQL Injection via a crafted URL, leading to full access by an attacker. This includes all shopping cart options, customer data, and the database. No interaction between the attacker and the victim is necessary...

CVE-2019-13026

OXID eShop vulnerable versions: 6.0.x before 6.0.5 and 6.1.x before 6.1.4. A SQL injection flaw can be exploited via a crafted URL (no user interaction) to gain full access, including the administration panel, shopping cart options, customer data, and database. The issue is demonstrated as an una...

CVE-2018-13026

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFType...

CVE-2018-13026

CVE-2018-13026 affects gpmf-parser version 1.1.2. The vulnerability is a heap-based buffer over-read in the function GPMF_Type within GPMF_parser.c. CNVD/CNVD-2019-34685 explicitly states the issue is a heap buffer overflow in GPMF_Type and notes an attacker can exploit this to cause a heap buffe...