Lucene search
K

24 matches found

Circl
Circl
added 15 hours ago4 views

CVE-2026-13034

creationtimestamp| type| source ---|---|--- 2026-06-25 05:46:08+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c...

4.7CVSS5.8AI score
Exploits0References2
CVE
CVE
added yesterday15 views

CVE-2026-13034

Vulnerability summary (CVE-2026-13034). In Google Chrome, an inappropriate implementation in the Passwords component before version 149.0.7827.197 allows a remote attacker who has compromised the renderer process to bypass site isolation via a crafted HTML page. The issue is tied to Chromium’s se...

4.7CVSS5.8AI score
Exploits0References2Affected Software1
OSV
OSV
added 2026/03/30 12:20 p.m.4 views

ROOT-OS-DEBIAN-13-CVE-2025-13034 CVE-2025-13034 in rootio-curl - Patched by Root

Root has patched CVE-2025-13034 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...

5.9CVSS5.8AI score0.00227EPSS
Exploits0
OSV
OSV
added 2026/01/08 10:15 a.m.1 views

DEBIAN-CVE-2025-13034

When using CURLOPTPINNEDPUBLICKEY option with libcurl or --pinnedpubkey with the curl tool,curl should check the public key of the server certificate to verify the peer. This check was skipped in a certain condition that would then make curl allow the connection without performing the proper chec...

5.9CVSS6.4AI score0.00227EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2026/01/08 10:0 a.m.4 views

CVE-2025-13034

When using CURLOPTPINNEDPUBLICKEY option with libcurl or --pinnedpubkey with the curl tool,curl should check the public key of the server certificate to verify the peer. This check was skipped in a certain condition that would then make curl allow the connection without performing the proper chec...

5.9CVSS6.4AI score0.00227EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2026/01/08 12:32 a.m.3 views

SUSE CVE-2025-13034

When using CURLOPTPINNEDPUBLICKEY option with libcurl or --pinnedpubkey with the curl tool,curl should check the public key of the server certificate to verify the peer. This check was skipped in a certain condition that would then make curl allow the connection without performing the proper chec...

5.9CVSS6.5AI score0.00227EPSS
Exploits0References3
OSV
OSV
added 2026/01/07 8:0 a.m.3 views

CURL-CVE-2025-13034 No QUIC certificate pinning with GnuTLS

When using CURLOPTPINNEDPUBLICKEY option with libcurl or --pinnedpubkey with the curl tool, curl should check the public key of the server certificate to verify the peer. This check was skipped in a certain condition that would then make curl allow the connection without performing the proper...

5.9CVSS6.7AI score0.00227EPSS
Exploits0
Circl
Circl
added 2026/01/07 6:11 a.m.3 views

CVE-2025-13034

creationtimestamp| type| source ---|---|--- 2026-01-07 06:11:00+00:00| seen| https://seclists.org/oss-sec/2026/q1/31 2026-01-07 07:28:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mbswxxngrn23 2026-01-07 14:50:07+00:00| seen|...

5.9CVSS6AI score0.00227EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2017-13034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint. CVE-2017-13034 Note that Nessus relies on the presence of the package as...

9.8CVSS7AI score0.03241EPSS
Exploits0References2
Circl
Circl
added 2024/12/30 4:15 a.m.2 views

CVE-2024-13034

creationtimestamp| type| source ---|---|--- 2024-12-30 04:15:26+00:00| seen| https://t.me/cvedetector/13913...

7.6CVSS4.4AI score0.0045EPSS
Exploits0References1
OSV
OSV
added 2024/12/30 2:15 a.m.2 views

CVE-2024-13034

A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. This affects an unknown part of the file /admin/updateuser.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has be...

7.6CVSS4AI score
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/12/30 2:0 a.m.11 views

CVE-2024-13034 code-projects Chat System update_user.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. This affects an unknown part of the file /admin/updateuser.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has be...

5.3CVSS5.9AI score0.0045EPSS
Exploits0References4
CVE
CVE
added 2024/12/30 2:0 a.m.57 views

CVE-2024-13034

The CVE-2024-13034 entry describes a cross-site scripting vulnerability in code-projects Chat System 1.0, affecting an unknown portion of /admin/update_user.php. The issue arises from improper handling of the name argument, enabling remote exploitation and with an exploit publicly disclosed. Conn...

7.6CVSS3.7AI score0.0045EPSS
Exploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 4:40 a.m.3 views

SUSE CVE-2017-13034

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...

5.3CVSS7.5AI score0.03241EPSS
Exploits0References8
Cvelist
Cvelist
added 2022/01/14 4:24 p.m.13 views

CVE-2020-13034

...

Exploits0
CVE
CVE
added 2022/01/14 4:24 p.m.32 views

CVE-2020-13034

This CVE entry is rejected/not used per the initial description.

6.7AI score
Exploits0
NVD
NVD
added 2018/07/09 6:29 p.m.15 views

CVE-2018-13034

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...

5.3CVSS5.5AI score0.01797EPSS
Exploits0References1
OSV
OSV
added 2018/07/09 6:29 p.m.14 views

CVE-2018-13034

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...

5.3CVSS7.1AI score
Exploits0References1
Cvelist
Cvelist
added 2018/07/09 6:0 p.m.19 views

CVE-2018-13034

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...

5.5AI score0.01797EPSS
Exploits0References1
CVE
CVE
added 2018/07/09 6:0 p.m.35 views

CVE-2018-13034

CVE-2018-13034: A directory traversal vulnerability in the Jester web framework (version 0.2.0) enables remote attackers to fetch files in arbitrary locations by crafting requests with "..%f" sequences. The vulnerability primarily impacts confidentiality (C) with partial impact, as indicated by C...

5.3CVSS5.4AI score0.01797EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder