16 matches found
CVE-2026-13976 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-13976 vulnerabilities
Vulnerabilities for packages: chromium...
Chromium: CVE-2026-13976 Heap buffer overflow in Storage
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2024-13976
A DLL injection vulnerability exists in Commvault for Windows 11.20.0, 11.28.0, 11.32.0, 11.34.0, and 11.36.0. During the installation of maintenance updates, an attacker with local access may exploit uncontrolled search path or DLL loading behavior to execute arbitrary code with elevated...
CVE-2024-13976
A DLL injection vulnerability exists in Commvault for Windows 11.20.0, 11.28.0, 11.32.0, 11.34.0, and 11.36.0. During the installation of maintenance updates, an attacker with local access may exploit uncontrolled search path or DLL loading behavior to execute arbitrary code with elevated...
CVE-2024-13976 Commvault 11.20.0 - 11.36.0 Windows Maintenance Installer DLL Injection
A DLL injection vulnerability exists in Commvault for Windows 11.20.0, 11.28.0, 11.32.0, 11.34.0, and 11.36.0. During the installation of maintenance updates, an attacker with local access may exploit uncontrolled search path or DLL loading behavior to execute arbitrary code with elevated...
CVE-2020-13976
An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters in the host field of the ping command. Exploitation through CSRF might be possible. NOTE: software maintainers consider the report invalid because it...
CVE-2017-13976
Rejected reason: This candidate is unused by its CNA...
CVE-2018-13976
CVE-2018-13976 is rejected/not used; this CVE entry does not represent an active vulnerability.
CVE-2020-13976
An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters in the host field of the ping command. Exploitation through CSRF might be possible. NOTE: software maintainers consider the report invalid because it...
CVE-2020-13976
CVE-2020-13976 affects DD-WRT up to build 16214. The Diagnostic page allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the host field of the ping command; CSRF exploitation might be possible. Public issuances (NVD, Red Hat, PRION, CVE...
CVE-2019-13976
eGain Chat 15.0.3 allows unrestricted file upload...
CVE-2019-13976
CVE-2019-13976 : In eGain Chat 15.0.3, an unrestricted file upload vulnerability is present. The vulnerability affects the product/component as stated, with CVSSv2/3 base scores indicating HIGH to CRITICAL impact (network-based with low attack complexity and no authentication). The available docu...