CVE-2026-97500: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead...

CVE-2026-78312: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

Linux Distros Unpatched Vulnerability : CVE-2026-75432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent, and Scanner::PushIndentTo...

CVE-2026-75432

A flaw was found in yaml-cpp. A remote attacker could exploit this vulnerability by manipulating the scanner component's handling of indentation, leading to the disclosure of sensitive information...

SUSE CVE-2026-75432

An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent, and Scanner::PushIndentTo components...

CVE-2026-95957

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file studentsignup.php of the component Self-Registration. Performing a manipulation of the argument fullname results in cross site scripting. Remote...

EUVD-2026-85012

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file studentsignup.php of the component Self-Registration. Performing a manipulation of the argument fullname results in cross site scripting. Remote...

CVE-2026-95957 SourceCodester Smart Attendance System with QR Code Scanner Self-Registration student_signup.php prepend cross site scripting

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file studentsignup.php of the component Self-Registration. Performing a manipulation of the argument fullname results in cross site scripting. Remote...

CVE-2026-95957

A cross-site scripting (XSS) vulnerability exists in the SourceCodester Smart Attendance System with QR Code Scanner 1.0 within the Self-Registration component. The flaw is located in the prepend function of the student_signup.php file. By manipulating the full_name argument, an attacker can achi...

CVE-2026-95957 SourceCodester Smart Attendance System with QR Code Scanner Self-Registration student_signup.php prepend cross site scripting

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file studentsignup.php of the component Self-Registration. Performing a manipulation of the argument fullname results in cross site scripting. Remote...

PT-2026-97672

This module lets a frontend scanner post CSS-usage measurements to the site so admin reports can show real-page statistics. This module doesn't sufficiently protect the /css-usage-analyzer/save endpoint against forged or repeated submissions...

PT-2026-97149

Name of the Vulnerable Software and Affected Versions SourceCodester Smart Attendance System with QR Code Scanner version 1.0 Description An issue exists in the Self-Registration component within the student signup.php file. Manipulating the full name argument in the prepend function allows for...

CVE-2026-15358: Unquoted Search Path or Element

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

CVE-2026-94671: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in The Post Grid = 7.9.5 versions...

CVE-2026-70125: Heap-based Buffer Overflow

Microsoft Office Outlook Remote Code Execution Vulnerability...

CVE-2026-76978: Improper Neutralization of Special Elements used in an OS Command

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection vulnerability in the Diagnose Settings feature...

CVE-2026-76980: Improper Input Validation

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Firewall Analyzer syslog collector...

CVE-2026-77112: Server-Side Request Forgery (SSRF)

Server-Side request forgery SSRF vulnerability in Global IT Informatics Technology Services Inc. Weoll allows Server Side Request Forgery. This issue affects Weoll: before 3.2.45.44...

CVE-2026-94079: Missing Authorization

Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...

CVE-2026-68490: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts...