58189 matches found
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper handling of the id parameter in the Bazar widget handler. An attacker can execute arbitrary JavaScript in the victim's browser by crafting a malicious URL that injects attacker-controlled attributes...
GHSA-V4HW-Q98X-8JMM vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu, linux-azure, linux-qemu-melange...
GHSA-8QP8-73PF-8G22 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-F2VR-9QRM-HV28 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-P24M-96HG-M8M8 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-C53H-XMGP-J2HJ vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-J4R2-33QC-JRRJ vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-14146 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-3X3P-QX4R-HMGH vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-499R-FH8Q-QCFC vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-XM69-PMF3-JR84 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-14146 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-0275
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privileges. This issue only affects Prisma® Browser on macOS...
MINI-MQ74-3F7P-F76C
Bulletin has no description...
MINI-6C4F-WC6W-8GVW
Bulletin has no description...
MINI-RC7M-46C7-6RGJ
Bulletin has no description...
MINI-MM8Q-23P3-R3JR
Bulletin has no description...
MINI-9442-FH9C-PPG4
Bulletin has no description...
MINI-PJQW-G76M-MGQ4
Bulletin has no description...
CVE-2026-0279
Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal aka Captive Portal service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payloa...