Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-13638 State: PUBLISHED Published: 2019-07-26T12:22:43 Last Updated: 2024-08-04T23:57:39.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2019-13638 - https://git.savannah.gnu.org/cgit/patch.git/commit/?id=3fcd042d26d70856e826a42b5f93dc4854d80bf0 - https://ww
019-13638 - https://git.savannah.gnu.org/cgit/patch.git/commit/?id=3fcd042d26d70856e826a42b5f93dc4854d80bf0 - https://www.debian.org/security/2019/dsa-4489 - https://seclists.org/bugtraq/2019/Jul/54 - https://seclists.org/bugtraq/2019/Aug/29 - http://packetstormsecurity.com/files/154124/GNU-patch-Command-Injection-Directory-Traversal.html - https://security.gentoo.org/glsa/201908-22 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVWWGISFWACROJJPVJJL4UBLVZ7LPOLT/ - https://security.netapp.com/advisory/ntap-20190828-0001/ - https://github.com/irsl/gnu-patch-vulnerabilities - https://access.redhat.com/errata/RHSA-2019:2798 - https://access.red
https://github.com/irsl/gnu-patch-vulnerabilities - https://access.redhat.com/errata/RHSA-2019:2798 - https://access.redhat.com/errata/RHSA-2019:2964 - https://access.redhat.com/errata/RHSA-2019:3757 - https://access.redhat.com/errata/RHSA-2019:3758 - https://access.redhat.com/errata/RHSA-2019:4061
CVE ID: CVE-2019-13640 State: PUBLISHED Published: 2019-07-17T21:07:47 Last Updated: 2024-10-31T01:29:55.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: In qBittorrent before 4.1.7, the function Application::runExternalProgram() located in app/application.cpp allows command injection via shell metacharacters in the torrent name parameter or current tracker parameter, as demonstrated by remote command execution via a crafted name within an RSS feed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qbittorrent/qBittorrent/issues/10925 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00080.html - http://lists.opensuse.org/opens
ues/10925 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00080.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00085.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH3WYCKODG4OKMC4S6PWHLHAWWU6ORNC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5T4XAX2VUI4WMAS5AI4OE3OEQSQCDCF5/ - https://www.debian.org/security/2020/dsa-4650
CVE ID: CVE-2019-13643 State: PUBLISHED Published: 2019-07-18T02:17:12 Last Updated: 2024-08-04T23:57:39.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS in EspoCRM before 5.6.4 allows remote attackers to execute malicious JavaScript and inject arbitrary source code into the target pages. The attack begins by storing a new stream message containing an XSS payload. The stored payload can then be triggered by clicking a malicious link on the Notifications page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espocrm/espocrm/issues/1349 - https://github.com/espocrm/espocrm/milestone/64?closed=1
CVE ID: CVE-2019-13644 State: PUBLISHED Published: 2019-07-18T02:17:24 Last Updated: 2024-08-04T23:57:39.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefly III before 4.7.17.1 is vulnerable to stored XSS due to lack of filtration of user-supplied data in a budget name. The JavaScript code is contained in a transaction, and is executed on the tags/show/$tag_number$ tag summary page. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/firefly-iii/firefly-iii/issues/2335 - https://github.
ichment: - CVE Program Container: References: - https://github.com/firefly-iii/firefly-iii/issues/2335 - https://github.com/firefly-iii/firefly-iii/compare/76aa8ac...45b8c36
CVE ID: CVE-2019-13645 State: PUBLISHED Published: 2019-07-18T02:17:33 Last Updated: 2024-08-04T23:57:39.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file names. The JavaScript code is executed during attachments/edit/$file_id$ attachment editing. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://github.com/firefly-iii/firefly-iii/issues/2337 - https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482
ps://github.com/firefly-iii/firefly-iii/issues/2337 - https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa
CVE ID: CVE-2019-13646 State: PUBLISHED Published: 2019-07-18T02:17:40 Last Updated: 2024-08-04T23:57:39.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa - https://github.com/firefly-iii/firefly-iii/issues/2339
CVE ID: CVE-2019-13647 State: PUBLISHED Published: 2019-07-18T02:17:49 Last Updated: 2024-08-04T23:57:39.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file content. The JavaScript code is executed during attachments/view/$file_id$ attachment viewing. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa - https://github.com/firefly-iii/firefly-iii/issues/
ttps://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa - https://github.com/firefly-iii/firefly-iii/issues/2338
CVE ID: CVE-2019-13648 State: PUBLISHED Published: 2019-07-19T12:53:01 Last Updated: 2024-08-04T23:57:39.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c. Additional Analyst Notes: - CVE Program Container: References: - https://patchwork.ozlabs.org/patch/1133904/ - http://www.openwall.com/lists/oss-security/2019/07/30/1 - https://git.kernel.org/
/patchwork.ozlabs.org/patch/1133904/ - http://www.openwall.com/lists/oss-security/2019/07/30/1 - https://git.kernel.org/torvalds/c/f16d80b75a096c52354c6e0a574993f3b0dfbdfe - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GRK2MW223KQZ76DKEF2BZFN6TCXLZLDS/ - https://security.netapp.com/advisory/ntap-20190806-0001/ - https://www.debian.org/security/2019/dsa-4495 - https://seclists.org/bugtraq/2019/Aug/13 - https://seclists.org/bugtraq/2019/Aug/18 - https://www.debian.org/security/2019/dsa-4497 - https://seclists.org/bugtraq/2019/Aug/26 - https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html - http://packetstormsecurity.com/files/154
9/Aug/26 - https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html - http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html - https://usn.ubuntu.com/4114-1/ - https://usn.ubuntu.com/4115-1/ - https://usn.ubuntu.com/4116-1/
CVE ID: CVE-2019-13649 State: PUBLISHED Published: 2019-10-24T14:54:24 Last Updated: 2024-08-04T23:57:39.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow externalPort OS Command Injection (issue 1 of 5). Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/yAxBFe05
CVE ID: CVE-2019-13650 State: PUBLISHED Published: 2019-10-24T14:55:55 Last Updated: 2024-08-04T23:57:39.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow internalPort OS Command Injection (issue 2 of 5). Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/yAxBFe05
CVE ID: CVE-2019-13651 State: PUBLISHED Published: 2019-10-24T14:56:49 Last Updated: 2024-08-04T23:57:39.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Injection (issue 3 of 5). Additional Analyst Notes: - CVE Program Container: References: - https://www.tp-link.com - https://pastebin.com/yAxBFe05
CVE ID: CVE-2019-13652 State: PUBLISHED Published: 2019-10-24T14:58:05 Last Updated: 2024-08-04T23:57:39.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection (issue 4 of 5). Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/yAxBFe05
CVE ID: CVE-2019-13653 State: PUBLISHED Published: 2019-10-24T14:58:55 Last Updated: 2024-08-04T23:57:39.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection (issue 5 of 5). Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/yAxBFe05
CVE ID: CVE-2019-13655 State: PUBLISHED Published: 2019-07-29T18:43:24 Last Updated: 2024-08-04T23:57:39.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Imgix through 2019-06-19 allows remote attackers to cause a denial of service (resource consumption) by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled during an attempt to load the 'whole image' into memory. Additional Analyst Notes: - CVE Program Container: References: - https://obsidianterminal.blogspot.com/2019/07/dos-in-imgix-cdns-image-processing.html
CVE ID: CVE-2019-13656 State: PUBLISHED Published: 2019-09-06T14:44:42 Last Updated: 2024-08-04T23:57:39.499Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CA Technologies Products: Client Automation, Workload Automation AE Problem Types: CWE-284 Description: An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://casupport.broadcom.com/us/product-content/recommended-reading/security-notices/CA20190904-01--security-notice-for-ca-common-services-distributed-
/product-content/recommended-reading/security-notices/CA20190904-01--security-notice-for-ca-common-services-distributed-intelligence-architecture-dia.html - http://packetstormsecurity.com/files/154418/CA-Common-Services-Distributed-Intelligence-Architecture-DIA-Code-Execution.html - http://seclists.org/fulldisclosure/2019/Sep/15 - https://seclists.org/bugtraq/2019/Sep/14
CVE ID: CVE-2019-13657 State: PUBLISHED Published: 2019-10-17T18:45:16.512931Z Last Updated: 2024-09-17T02:31:44.581Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CA Technologies, A Broadcom Company Products: CA Performance Management Problem Types: CWE-798 Description: CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Oct/26 - http://packetstormsecurity.com/files/154904/CA-Performance-Management-A
es: - https://seclists.org/bugtraq/2019/Oct/26 - http://packetstormsecurity.com/files/154904/CA-Performance-Management-Arbitary-Command-Execution.html - https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/ca-20191015-01-security-notice-for-ca-performance-management.html - http://packetstormsecurity.com/files/154904/CA-Performance-Management-Arbitrary-Command-Execution.html - http://seclists.org/fulldisclosure/2019/Oct/37
CVE ID: CVE-2019-13658 State: PUBLISHED Published: 2019-10-02T16:14:53.392727Z Last Updated: 2024-09-17T01:50:58.714Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CA Technologies, a Broadcom Company Products: CA Network Flow Analysis Problem Types: CWE-798 Description: CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security. Additional Analyst Notes: - CVE Program Container: References: - https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/new-security-notice-ca-20190930-01-security-notice-for-ca-network
s/product-content/recommended-reading/security-notices/new-security-notice-ca-20190930-01-security-notice-for-ca-network-flow-analysis.html - http://seclists.org/fulldisclosure/2019/Oct/6 - https://seclists.org/bugtraq/2019/Oct/4 - http://packetstormsecurity.com/files/154739/CA-Network-Flow-Analysis-9.x-10.0.x-Remote-Command-Execution.html
CVE ID: CVE-2019-13659 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.603Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/868846 - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html
CVE ID: CVE-2019-13660 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.568Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/882363
CVE ID: CVE-2019-13661 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.531Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/882812
CVE ID: CVE-2019-13662 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.475Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in navigations in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass content security policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/967780
CVE ID: CVE-2019-13663 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.472Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/863661
CVE ID: CVE-2019-13664 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.523Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass content security policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/915538
CVE ID: CVE-2019-13665 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.528Z Vendors: Google Products: Chrome Problem Types: Policy bypass Description: Insufficient filtering in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass multiple file download protection via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/959640
CVE ID: CVE-2019-13666 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.519Z Vendors: Google Products: Chrome Problem Types: Side-channel information leakage Description: Information leak in storage in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/960305
CVE ID: CVE-2019-13667 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.534Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/973056
CVE ID: CVE-2019-13668 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.502Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/986393
CVE ID: CVE-2019-13669 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.529Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect data validation in navigation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/968451
CVE ID: CVE-2019-13670 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.540Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/980891
CVE ID: CVE-2019-13671 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.578Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: UI spoofing in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof security UI via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/696454
CVE ID: CVE-2019-13672 State: PUBLISHED Published: 2019-12-10T20:45:20 Last Updated: 2024-08-04T23:57:39.577Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page on iOS. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/965067
CVE ID: CVE-2019-13673 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.498Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/997925
CVE ID: CVE-2019-13674 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.606Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/896533
CVE ID: CVE-2019-13675 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.600Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in extensions in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to disable extensions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/929578
CVE ID: CVE-2019-13676 State: PUBLISHED Published: 2019-11-25T14:22:53 Last Updated: 2024-08-04T23:57:39.567Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Insufficient policy enforcement in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html - https://crbug.com/875178