19 matches found
CVE-2026-13973
An inappropriate implementation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513832989...
Chromium: CVE-2026-13973 Inappropriate implementation in UI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-13973
creationtimestamp| type| source ---|---|--- 2026-07-02 07:47:52+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:20:38+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706...
Linux Distros Unpatched Vulnerability : CVE-2026-13973
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to...
CVE-2025-8074
Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors...
CVE-2025-8074
Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors...
EUVD-2025-201163
Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors...
PT-2025-49048
Name of the Vulnerable Software and Affected Versions Synology BeeDrive for desktop versions prior to 1.4.3-13973 Description A flaw exists in BeeDrive that allows local users to write arbitrary files containing non-sensitive information. The issue is due to an origin validation error...
CVE-2020-13973
creationtimestamp| type| source ---|---|--- 2025-08-18 21:02:42+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwpcbodxoy2b...
CVE-2024-13973
A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 21.0.1 can potentially lead to administrators achieving arbitrary code execution...
CVE-2024-13973
A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 21.0.1 can potentially lead to administrators achieving arbitrary code execution...
CVE-2019-13973
LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the customlogo filename suffix is not restricted, and .php may be used...
com.github.promregator:promregator (>=0.6.3 <=0.8.0-rc2), com.lancethomps:lava (>=1.0.0 <=1.8.0) +153 more potentially affected by CVE-2020-13973 via com.mikesamuel:json-sanitizer (=1.2.0)
com.mikesamuel:json-sanitizer MAVEN version =1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.mikesamuel:json-sanitizer and may be impacted: - com.github.promregator:promregator =0.6.3, =1.0.0, =1.0.0, =1.1.0, =1.1.0, =1.0.0, =1.0.0, =1.0.0,...
CVE-2018-13973
CVE-2018-13973 entry is rejected/not used per Initial Description.
CVE-2020-13973
Technical details about CVE-2020-13973 are not publicly provided in the attached documents. Monitor for updates from vendors and advisories.
CVE-2020-13973
OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as JavaScript, may be able to confuse the HTML parser as to where the SCRIPT element ends, and cause...
CVE-2019-13973
LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the customlogo filename suffix is not restricted, and .php may be used...
CVE-2019-13973
CVE-2019-13973 affects LayerBB 1.1.3, where the admin/general.php arbitrary file upload is possible because the custom_logo filename suffix is not restricted, allowing a ".php" file. The vulnerability stems from insufficient validation of uploaded logo names, enabling potential remote code execut...