21 matches found
CVE-2026-13964
An insufficient policy enforcement flaw was found in the WebView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513735096...
Chromium: CVE-2026-13964 Insufficient policy enforcement in WebView
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-13964 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-13964
creationtimestamp| type| source ---|---|--- 2026-07-02 07:47:32+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...
Linux Distros Unpatched Vulnerability : CVE-2026-13964
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a...
DEBIAN-CVE-2026-13964
Insufficient policy enforcement in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-13964
Insufficient policy enforcement in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-13964
creationtimestamp| type| source ---|---|--- 2026-01-06 12:48:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbqyfahjwi2c...
CVE-2025-13964
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the catchlpajax function in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to modify course contents b...
WordPress LearnPress – WordPress LMS Plugin plugin <= 4.3.2 - Missing Authentication to Unauthenticated Course Modification vulnerability
Missing Authentication to Unauthenticated Course Modification vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin LearnPress versions = 4.3.2...
CVE-2024-13964
creationtimestamp| type| source ---|---|--- 2025-05-09 16:12:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114478753232862764 2025-05-17 21:07:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfh7bf5yz2t...
CVE-2017-13964
Rejected reason: This candidate is unused by its CNA...
MSC-2023-13964
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
CVE-2018-13964
CVE-2018-13964 is rejected/not used and does not represent an active vulnerability entry.
PT-2021-8798
Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE candidate number, CVE-2018-13964, with no...
[SECURITY] [DSA 4700-1] roundcube security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4700-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 11, 2020 https://www.debian.org/security/faq -...
DEBIAN-CVE-2020-13964
An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include/rcmailoutputhtml.php allows XSS via the username template object...
CVE-2020-13964
CVE-2020-13964 affects Roundcube Webmail prior to 1.3.12 and prior to 1.4.5 for 1.4.x; the issue is an HTML/XSS risk in include/rcmail_output_html.php via the username template object. Patches are released: Roundcube 1.3.12 and 1.4.5 (and 1.4.6 in some advisories). Remediation is to upgrade to th...
Roundcube Webmail < 1.3.12, 1.4.x < 1.4.5 Multiple Vulnerabilities
Roundcube Webmail is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:roundcube:webmail"; if...
