EulerOS 2.0 SP15 : qemu (EulerOS-SA-2026-4013)

According to the versions of the qemu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command...

CVE-2026-104073 NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...

DEBIAN-CVE-2026-75820

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This leads to heap...

AZL-105966 CVE-2026-75820 affecting package aspell 0.60.8.1-1

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This leads to heap...

CVE-2026-75820

The GNU Aspell spelling program contains an integer truncation vulnerability in the WritableDict::add() function located in modules/speller/default/writable.cpp. The flaw occurs because word lengths are stored as a single byte when loading a personal wordlist; consequently, words with lengths tha...

CVE-2026-75820 Integer Truncation Leading to Heap Corruption in GNU Aspell

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This leads to heap...

CVE-2026-75820 Integer Truncation Leading to Heap Corruption in GNU Aspell

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This leads to heap...

CVE-2026-75820 Integer Truncation Leading to Heap Corruption in GNU Aspell

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This leads to heap...

CVE-2026-94675

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

CVE-2026-98199

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/core increase number of phases and add new mask Increase the number of phases to 16 as a new upcoming device supports such a number. While at it, add a new mask for controlling the source of the output voltage. Note...

CVE-2026-94675 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

CVE-2026-94675 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

CVE-2026-94675

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to an unauthenticated Cross-Site Scripting (XSS) vulnerability in versions

EUVD-2026-93065

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

CVE-2026-75820: Integer Overflow or Wraparound

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This leads to heap...

PT-2026-106489

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

PT-2026-106319

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0 Description A security flaw allows remote attackers to perform cross site scripting XSS, a technique where malicious scripts are injected into trusted websites, via an unknown function with...

CVE-2026-94675: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

PT-2026-106689

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the RDMA/rxe component. The rxe get mcg function publishes a newly allocated multicast group in rxe-mcg tree before the backing Ethernet multicast...

CVE-2026-104073: Exposure of Resource to Wrong Sphere

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...