CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service DoS condition on VM-Series firewalls or execute arbitrary co...

EUVD-2026-75253

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service DoS condition on VM-Series firewalls or execute arbitrary co...

CVE-2026-0310

CVE-2026-0310 is a buffer overflow in the XML processing functionality of Palo Alto Networks PAN-OS , rated CVSS 4.0 9.2 (Critical) . An unauthenticated attacker with network access to the management web or dataplane interface can cause a denial of service on VM-Series firewalls or achieve arbitr...

PAN-OS: Buffer Overflow Vulnerability via XML Processing

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service DoS condition on VM-Series firewalls or execute arbitrary co...

CVE-2026-87636

Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x / 12.2.x Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, 12.1.x, or 12.2.x. It is, therefore, affected by a vulnerability. A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS software enable...

CVE-2026-19614

The API is prone to XML external entity XXE injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3...

CVE-2026-86142

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation...

EUVD-2026-71831

In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...

CVE-2025-71407

Nokogiri before 1.18.3, when using bundled libxml2, is affected by the libxml2 flaws CVE-2025-24928 and CVE-2024-56171...

The vulnerability of the Element.setAttribute() method in the XML Document Access and Management Module XMLDOM allows a attacker to perform cross-site scripting (XSS) attacks.

The vulnerability of the Element.setAttribute method in the XML document access and manipulation module XMLDOM is related to errors in processing XML requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the reg() function in the lib/grammar.js module, a module for defining methods to access and manage XML documents, allows attackers to bypass existing security mechanisms.

The vulnerability of the reg function in the lib/grammar.js module, which is used for accessing and managing XML documents, is related to errors in processing XML requests. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the reg() function in the lib/grammar.js module, a module for defining methods to access and manage XML documents, allows attackers to bypass existing security mechanisms.

The vulnerability of the reg function in the lib/grammar.js module, which is used for accessing and managing XML documents, is related to errors in processing XML requests. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the Document.createProcessingInstruction() method in the lib/dom.js module, a module for defining methods for accessing and manipulating XML documents in the XMLDOM framework, allows an attacker to compromise the integrity of the protected information.

The vulnerability of the Document.createProcessingInstruction method in the lib/dom.js module, which is part of the XML document access and manipulation mechanism implemented by XMLDOM, is related to errors in processing XML requests. Exploiting this vulnerability could allow an attacker to...

Improper Validation of Syntactic Correctness of Input

Overview @xmldom/xmldom is a javascript ponyfill to provide the following APIs that are present in modern browsers to other runtimes. Since version 0.7.0 this package is published to npm as @xmldom/xmldom and no longer as xmldom Affected versions of this package are vulnerable to Improper...

The vulnerability of the libxml-parser-perl library for processing XML files lies in the possibility of an out-of-buffer exception being raised, allowing an attacker to cause a service failure.

The vulnerability of the libxml-parser-perl library for processing XML files is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2021-47996

A flaw was found in Nokogiri, specifically within its bundled libxml2 library. A remote attacker could exploit multiple vulnerabilities, including memory leaks, buffer over-reads, heap-based buffer overflows, and out-of-bounds reads, by processing specially crafted XML documents. This could lead ...

CVE-2026-79772

A flaw was found in Nokogiri. This vulnerability occurs because the canonicalize method fails to properly check the return value from an internal XML processing function, returning an empty string on failure instead of an error. A remote attacker could exploit this by providing specially crafted...

CVE-2021-47996

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2021-47996

Nokogiri before 1.11.4 CRuby implementation only, when the packaged/vendored libxml2 is used bundles libxml2 2.9.10, which is affected by multiple vulnerabilities addressed in libxml2 2.9.12, including a memory leak in xmlSchemaValidateStream CVE-2019-20388, a global buffer over-read in...