[SECURITY] [DSA 6378-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6378-1 [email protected] https://www.debian.org/security/ Andres Salomon July 05, 2026 https://www.debian.org/security/faq -...

chromedriver-149.0.7827.200-1.1 on GA media (moderate)

chromedriver-149.0.7827.200-1.1 on GA media Announcement ID: openSUSE-SU-2026:11139-1 Rating: moderate Cross-References: CVE-2026-13281 CVE-2026-13282 CVE-2026-13283 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all...

CVE-2026-13283

creationtimestamp| type| source ---|---|--- 2026-06-25 23:09:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116813263698329595 2026-06-26 09:45:07+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1937 2026-06-26 14:40:21+00:00| seen|...

CVE-2026-13283

Google Chrome on Android (prior to version 149.0.7827.201 ) is vulnerable to a Use after free flaw in the AdFilter component. This issue stems from a resource management reuse issue , which can be exploited by a remote attacker via a crafted HTML page. To trigger the vulnerability, the attacker m...

CVE-2025-13283

creationtimestamp| type| source ---|---|--- 2025-11-17 04:32:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/115563165229460729...

CVE-2024-13283

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Facets allows Cross-Site Scripting XSS.This issue affects Facets: from 0.0.0 before 2.0.9...

CVE-2024-13283 Facets - Critical - Cross Site Scripting - SA-CONTRIB-2024-047

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Facets allows Cross-Site Scripting XSS.This issue affects Facets: from 0.0.0 before 2.0.9...

SUSE: Security Advisory (SUSE-SU-2023:0494-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0480-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:0496-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool bsc1140877...

SUSE-SU-2023:0494-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder bsc1202692. - CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool bsc1140877...

SUSE SLES15: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2023:0480-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0480-1 advisory. - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder bsc1202692. - CVE-2019-13283: Fixed heap-based buffer...

SUSE-SU-2023:0480-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder bsc1202692. - CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool bsc1140877...

CVE-2020-13283

CVE-2020-13283 affects GitLab installations prior to 13.0.12, 13.1.6, and 13.2.3. A cross-site scripting (XSS) vulnerability exists in the issues list via the milestone title, caused by insufficient validation of client-side data in the web application. The issue can permit execution of malicious...

CVE-2019-13283

creationtimestamp| type| source ---|---|--- 2019-07-04 23:00:01+00:00| seen| https://t.me/cveNotify/208...

CVE-2019-13283

CVE-2019-13283 affects Xpdf 4.01.01 and is a heap-based over-read in FoFiType1::parse (FoFiType1.cc) triggered by crafted PDFs; the source string length isn’t validated before a fixed-length strncpy copy, enabling potential Denial of Service or information leakage via crafted PDFs (pdftotext). Re...

CVE-2018-13283

CVE-2018-13283 affects the Synology SSL VPN Client before 1.2.5-0226. A vulnerability in client.cgi allows remote attackers to perform man-in-the-middle attacks using manipulated command, hostname, or port parameters. Impact per NVD is high (CVSS v3.0: 7.4) with high confidentiality and integrity...

CVE-2017-13283

CVE-2017-13283 affects Android devices via a flaw in the Bluetooth stack: in avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out-of-bounds write on the stack due to a missing bounds check. This could enable remote code execution with no privileges or user interaction requir...