27 matches found
CVE-2026-13029 vulnerabilities
Vulnerabilities for packages: chromium...
Chromium: CVE-2026-13029 Use after free in Web Authentication
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Fedora 44 : chromium (2026-504709cab7)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-504709cab7 advisory. chromium-149.0.7827.196 security release CVE-2026-13028: Use after free in WebGL CVE-2026-13032: Use after free in WebGL CVE-2026-13033: Out of boun...
Debian dsa-6364 : chromium - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6364 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6364-1 [email protected] https://www.debian.org/securit...
CVE-2026-13029
Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...
DEBIAN-CVE-2026-13029
Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...
CVE-2026-13029
A use after free vulnerability exists in the Web Authentication component of the Google Chrome browser (and potentially Microsoft Edge ) prior to version 149.0.7827.197 . This flaw allows an attacker who successfully convinces a user to install a malicious extension to exploit heap corruption via...
CVE-2025-13029
creationtimestamp| type| source ---|---|--- 2025-12-31 06:37:22+00:00| seen| https://bsky.app/profile/potato.software/post/3mbbaupnewh24 2026-01-02 15:22:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbh75gxx7u2p 2026-01-02 18:50:33+00:00| seen|...
CVE-2025-13029
The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attackers to delete arbitrary users...
CVE-2024-13029
A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/book of the component Edit Book Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack...
CVE-2019-13029
Multiple stored Cross-site scripting XSS issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser...
CVE-2019-13029
creationtimestamp| type| source ---|---|--- 2025-03-19 20:18:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8145...
Linux Distros Unpatched Vulnerability : CVE-2017-13029
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:printccpconfigoptions. CVE-2017-13029 Note that Nessus relies on the presence of th...
CVE-2024-13029
A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/book of the component Edit Book Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack...
CVE-2024-13029
creationtimestamp| type| source ---|---|--- 2024-12-29 23:36:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113738738400003723 2024-12-30 01:45:02+00:00| seen| https://t.me/cvedetector/13909...
CVE-2024-13029
CVE-2024-13029 affects Antabot White-Jotter up to 0.2.2. The issue occurs in the Edit Book Handler’s /admin/content/book path, where an unknown function allows server-side request forgery (SSRF) and can be triggered remotely. Public exploit information exists. Connected sources confirm the vulner...
CVE-2024-13029 Antabot White-Jotter Edit Book book server-side request forgery
A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/book of the component Edit Book Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack...
CVE-2024-13029 Antabot White-Jotter Edit Book book server-side request forgery
A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/book of the component Edit Book Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack...