17 matches found
CVE-2026-13897 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-13897 vulnerabilities
Vulnerabilities for packages: chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-13897
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HT...
CVE-2020-13897
HESK before 3.1.10 allows reflected XSS...
CVE-2018-13897
Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9640,...
CVE-2024-13897
The Moving Media Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the generatejsonpage function in all versions up to, and including, 1.22. This makes it possible for authenticated attackers, with Administrator-level access and abov...
CVE-2024-13897 Moving Media Library <= 1.22 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Deletion
The Moving Media Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the generatejsonpage function in all versions up to, and including, 1.22. This makes it possible for authenticated attackers, with Administrator-level access and abov...
CVE-2024-13897
Summary: CVE-2024-13897 affects the WordPress plugin Moving Media Library. The vulnerability is an authenticated (Administrator+) directory traversal that enables arbitrary file deletion via the generate_json_page function in all versions <= 1.22. Deleting arbitrary files (e.g., wp-config.php)...
CVE-2017-13897
Rejected reason: This candidate is unused by its CNA...
CVE-2020-13897
HESK before 3.1.10 allows reflected XSS...
CVE-2020-13897
CVE-2020-13897 affects HESK (Klemen Stirn HESK) prior to version 3.1.10. The vulnerability is a reflected XSS condition due to insufficient validation of client-side data in the WEB application, enabling an attacker to inject and execute script in a victim’s browser when the vulnerable page is lo...
CVE-2018-13897
creationtimestamp| type| source ---|---|--- 2019-07-25 20:31:33+00:00| seen| https://t.me/cibsecurity/5715...
CVE-2018-13897
Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9640,...
CVE-2018-13897
CVE-2018-13897 affects Snapdragon devices running dnsmasq, where a hostname is added to the device’s DNS records, causing information exposure (confidentiality impact). Affected families include Snapdragon Auto, Connectivity, Consumer IOT, Industrial IOT, IoT, Mobile, Wearables across numerous SD...
CVE-2018-13897
Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9640,...
Fedora Update for slim FEDORA-2010-13897
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...