83630 matches found
ECHO-D974-573E-7A5B
Bulletin has no description...
EUVD-2026-48294
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Call Home proxy server configuration that allows authenticated attackers to inject arbitrary web script or HTML via the proxy server address parameter to /Archiver/CallHomeSettingsWizard.aspx. The injected paylo...
MINI-245G-VVCV-C924
Bulletin has no description...
MINI-RRJR-77WF-23J9
Bulletin has no description...
MINI-MWH8-24W6-RM59
Bulletin has no description...
MINI-FX8V-P7CR-9W28
Bulletin has no description...
MINI-9H48-V365-3GX8
Bulletin has no description...
DEBIAN-CVE-2026-65904
DOMPurify through 3.3.3 fails to sanitize DOM elements passed via INPLACE mode when the element originates from a different window/realm e.g., an iframe's contentDocument. A cross-realm instanceof check in the private isNode function returns false for foreign-realm nodes, causing DOMPurify to...
DEBIAN-CVE-2026-65901
DOMPurify through 3.4.6 contains a cross-site scripting vulnerability in INPLACE mode that trusts attacker-controlled nodeName on live non-form nodes. Attackers can supply hostile live DOM objects with real script children whose observable nodeName is clobbered to appear as allowed elements,...
DEBIAN-CVE-2026-65902
DOMPurify before 3.4.7 affected versions = 3.4.5 passes direct references to the module-level DEFAULTALLOWEDTAGS and DEFAULTALLOWEDATTR sets to the uponSanitizeElement and uponSanitizeAttribute hooks via data.allowedTags / data.allowedAttributes when sanitize is called without an explicit...
DEBIAN-CVE-2026-65899
DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types policy when clearConfig is called, so a DOMPurify instance reused across trust boundaries stays bound to a previously supplied TRUSTEDTYPESPOLICY. A later caller that requests RETURNTRUSTEDTYPE output receives a TrustedHTML...
MINI-2VQX-HFQ6-3HRF
Bulletin has no description...
MINI-F234-39QH-Q64W
Bulletin has no description...
MINI-J2G3-76PF-G578
Bulletin has no description...
MINI-CC37-V6FG-RWX9
Bulletin has no description...
MINI-FG8F-C8PJ-3VCC
Bulletin has no description...
MINI-RC86-62CC-FH8H
Bulletin has no description...
MINI-JFRG-Q9GX-3XP9
Bulletin has no description...