CVE-2026-13971

An uninitialized use flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513780208...

Chromium: CVE-2026-13971 Uninitialized Use in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-13971

creationtimestamp| type| source ---|---|--- 2026-07-02 07:47:48+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:20:33+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706...

CVE-2024-13971

creationtimestamp| type| source ---|---|--- 2026-04-30 16:36:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq2bwcdzl2c...

CVE-2024-13971

Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobsterpro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services...

CVE-2019-13971

OTCMS 3.81 allows XSS via the mode parameter in an apiRun.php?mudi=autoRun request...

CVE-2018-13971

CVE-2018-13971 entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-13971

...

CVE-2019-13971

OTCMS 3.81 contains a cross-site scripting (XSS) vulnerability in the web app: an XSS flaw via the mode parameter in apiRun.php?mudi=autoRun. Root cause is insufficient validation of client-side data, leading to possible execution of injected script. Affected component: OTCMS Web application; aff...

CVE-2017-13971

This CVE entry is rejected and not used; it does not represent an active vulnerability.