1434 matches found
CVE-2026-15810: Improper Neutralization of Input During Web Page Generation
A Cross-Site Scripting XSS vulnerability in Google Cloud Looker versions prior to 25.6.103, 25.12.65, 25.18.68, 26.0.66, 26.2.47, 26.4.36, 26.6.28, and 26.8.7 on Looker-hosted and Self-hosted allows an attacker to execute arbitrary JavaScript leading to administrative account takeover using a...
GHSA-VHCC-WFM4-93WW vulnerabilities
Vulnerabilities for packages: linux-gcp...
GHSA-Q4JF-GP35-367G vulnerabilities
Vulnerabilities for packages: linux-gcp...
OPENSUSE-SU-2026:21413-1 Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: - Update golang.org/x/net to v0.57....
SUSE-SU-2026:22848-1 Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: - Update golang.org/x/net to v0.57....
CVE-2026-12715
Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no...
CVE-2026-12715
CVE-2026-12715 describes a missing authorization flaw in Google Cloud Firebase Studio for versions prior to 2026-04-15, enabling an attacker to download other users’ deployed source code and access sensitive data via unauthorized Google Cloud Storage URL signing requests. The issue has a high imp...
EUVD-2026-45187
Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no...
PT-2026-60778
Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no...
CVE-2026-12715: Missing Authorization
Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no...
GHSA-3F6R-V6W8-RW99 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-azure, linux-aws, linux-qemu, linux-gcp, linux-qemu-melange...
GHSA-WVXF-4P9H-5VG9 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-gcp, linux-qemu-melange...
CVE-2026-45945 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-azure, linux-aws, linux-qemu, linux-gcp, linux-qemu-melange...
GHSA-JHVQ-4R2H-7C2Q vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-gcp, linux-qemu-melange...
CVE-2026-53260 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-gcp, linux-qemu-melange...
GHSA-38H5-PJW3-MQXF vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu-melange...
GHSA-X9PC-8G9F-68MF vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-gcp, linux-qemu-melange...
GHSA-3VVP-54WC-F6JR vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-gcp, linux-qemu-melange...