CVE-2026-13980 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-13980

creationtimestamp| type| source ---|---|--- 2026-07-02 07:48:08+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 16:52:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoikvhusa2y 2026-07-03 06:29:15+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-13980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTM...

CVE-2025-13980

CVE-2025-13980 is an authentication bypass in Drupal CKEditor 5 Premium Features. Affected versions include CKEditor 5 Premium Features before 1.2.10, 1.3.0 before 1.3.6, 1.4.0 before 1.4.3, 1.5.0 before 1.5.1, and 1.6.0 before 1.6.4. The root cause is an authentication bypass via an alternate pa...

CVE-2024-13980

creationtimestamp| type| source ---|---|--- 2025-08-29 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxf7bvmg2j...

CVE-2024-13980

H3C Intelligent Management Center IMC versions up to and including E0632H07 contains a remote command execution vulnerability in the /byod/index.xhtml endpoint. Improper handling of JSF ViewState allows unauthenticated attackers to craft POST requests with forged javax.faces.ViewState parameters,...

CVE-2020-13980

OpenCart 3.0.3.3 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section because of a lack of entity encoding. NOTE: this issue exists because of an incomplete fix for CVE-2020-10596. The vendor states "this is not a massive issue as you...

CVE-2019-13980

In Directus 7 API through 2.3.0, uploading of PHP files is blocked only when the Apache HTTP Server is used, leading to uploads//originals remote code execution with nginx...

VulnCheck KEV: CVE-2024-13980

H3C Intelligent Management Center IMC versions up to and including E0632H07 contains a remote command execution vulnerability in the /byod/index.xhtml endpoint. Improper handling of JSF ViewState allows unauthenticated attackers to craft POST requests with forged javax.faces.ViewState...

CVE-2020-13980

creationtimestamp| type| source ---|---|--- 2024-04-23 19:23:31+00:00| seen| https://t.me/arpsyndicate/4768...

CVE-2017-13980

Rejected reason: This candidate is unused by its CNA...

CVE-2020-13980

OpenCart 3.0.3.3 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section because of a lack of entity encoding. NOTE: this issue exists because of an incomplete fix for CVE-2020-10596. The vendor states "this is not a massive issue as you...

CVE-2020-13980

OpenCart 3.0.3.3 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section because of a lack of entity encoding. NOTE: this issue exists because of an incomplete fix for CVE-2020-10596. The vendor states "this is not a massive issue as you...

CVE-2020-13980

OpenCart 3.0.3.3 is vulnerable to a cross-site scripting (XSS) issue triggered by a crafted filename in the users’ image upload section. The root cause is a lack of proper entity encoding in filenames, and this issue is noted as a follow-up to an incomplete fix for CVE-2020-10596. The vulnerabili...

CVE-2019-13980

In Directus 7 API through 2.3.0, uploading of PHP files is blocked only when the Apache HTTP Server is used, leading to uploads//originals remote code execution with nginx...

CVE-2019-13980

In Directus 7 API through 2.3.0, uploading of PHP files is blocked only when the Apache HTTP Server is used, leading to uploads//originals remote code execution with nginx...

CVE-2019-13980

Directus 7 API (up to version 2.3.0) permits PHP uploads only when using Apache; with nginx, uploads/_/originals can lead to remote code execution. No exploitation details are provided in the given documents beyond this risk description. Remediation/patch details are not included in the connected...

CVE-2018-13980

CVE-2018-13980 affects Zeta Producer Desktop CMS <14.2.1. The vulnerability is Local File Inclusion via the filebrowser plugin, exploiting assets/php/filebrowser/filebrowser.main.php?file=../ directory traversal. Resulting impact is unauthenticated local file disclosure on websites built with ...

CVE-2018-1000208

MODX Revolution version =2.6.4 contains a Directory Traversal vulnerability in /core/model/modx/modmanagerrequest.class.php that can result in remove files. This attack appear to be exploitable via web request via security/login processor. This vulnerability appears to have been fixed in pull 139...

Directory traversal

MODX Revolution version =2.6.4 contains a Directory Traversal vulnerability in /core/model/modx/modmanagerrequest.class.php that can result in remove files. This attack appear to be exploitable via web request via security/login processor. This vulnerability appears to have been fixed in pull 139...