CVE-2026-16356

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16383

Mitigation bypass in the DOM: Networking component. This vulnerability...

CVE-2026-14013 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-14013 vulnerabilities

Vulnerabilities for packages: chromium...

Chromium: CVE-2026-14013 Inappropriate implementation in SVG

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-14013

creationtimestamp| type| source ---|---|--- 2026-07-01 21:15:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgrvqvtc2u 2026-07-02 07:49:20+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:21:55+00:00| seen|...

CVE-2025-14013 JIZHICMS Comment addcomment.html cross site scripting

A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. Th...

CVE-2019-14013

While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...

CVE-2021-34853

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-34853

CVE-2021-34853 affects Foxit PDF Reader 11.0.0.49893. The flaw lies in the handling of Annotation objects, specifically the lack of validating the existence of an object before performing operations, enabling remote code execution in the context of the current process. Exploitation requires user ...

CVE-2019-14013

creationtimestamp| type| source ---|---|--- 2020-01-21 13:38:36+00:00| seen| https://t.me/cveNotify/368...

CVE-2019-14013

While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...

CVE-2019-14013

While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...

CVE-2019-14013

CVE-2019-14013 affects Snapdragon SoCs (listed family) and is triggered by parsing of an invalid super index table, potentially causing invalid data to be read into the table. The NVD entry rates it as CRITICAL (CVSS 3.1: 9.8) with NETWORK attack vector, no user interaction, and high impact on co...

CVE-2018-14013

Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 is vulnerable to cross-site scripting (XSS) in the AJAX and HTML web clients. The underlying issue allows an attacker to inject arbitrary script code into a user’s browser, potentially enabling session hijacking, defacement, or theft ...

CVE-2018-14013

creationtimestamp| type| source ---|---|--- 2019-02-04 15:52:25+00:00| seen| MISP/5c585f5b-e984-49a7-96d3-34f20a021402...

CVE-2017-14013

The CVE-2017-14013 issue is confirmed in ProMinent MultiFLEX M10a Controller web interface, where the logout function removes the user’s session only on the client side (Client-Side Enforcement of Server-Side Security). This allows potential bypass of protection mechanisms and identity impersonat...

ProMinent MultiFLEX M10a Controller

CVSS v3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: ProMinent Equipment: MultiFLEX M10a Controller Vulnerabilities: Client-Side Enforcement of Server-Side Security, Insufficient Session Expiration, Cross-Site Request Forgery, Information Exposure, and Unverified Passwo...