CVE-2026-95396

CVE-2026-95396 is a cross-site scripting (XSS) vulnerability in the open-source project sfturing/hosp_order , specifically in the file HospitalController.java within the Public Search Handlers component. Manipulating the Search argument leads to XSS. The attack is remotely initiated with low comp...

CVE-2026-95396 sfturing hosp_order Public Search Handlers HospitalController.java cross site scripting

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file HospitalController.java of the component Public Search Handlers. The manipulation of the argument Search leads to cross site scripting. The attack can b...

EUVD-2026-84376

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file HospitalController.java of the component Public Search Handlers. The manipulation of the argument Search leads to cross site scripting. The attack can b...

CVE-2026-95396 sfturing hosp_order Public Search Handlers HospitalController.java cross site scripting

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file HospitalController.java of the component Public Search Handlers. The manipulation of the argument Search leads to cross site scripting. The attack can b...

CVE-2026-25264 Uncontrolled Search Path Element in Qualcomm Software Center

Privilege escalation due to weak configuration during package extraction process...

CVE-2026-25264 Uncontrolled Search Path Element in Qualcomm Software Center

Privilege escalation due to weak configuration during package extraction process...

CVE-2026-25264

Qualcomm Software Center is affected by an uncontrolled search path element vulnerability arising from weak configuration during its package extraction process. A local user with low privileges can exploit this to escalate privileges, with changed scope and high impact on confidentiality, integri...

Day-22--Reflected-Cross-Site-Scripting-XSS-in-HTML-Context

Day 22: Reflected Cross-Site Scripting XSS in HTML Context...

SoK: You Find What You Seek: Rethinking Oracles, Guidance, and Input Generation in Hardware Fuzzing

Hardware fuzzing is an active area in security verification research, yet its industrial adoption remains in its early stages. This SoK examines which lessons from software fuzzing carry over to hardware and where unique approaches are needed. By analyzing 52 fuzzers across RTL/IP, CPU, NoC, and...

PT-2026-96719

Name of the Vulnerable Software and Affected Versions sfturing hosp order versions prior to 627f426331da8086ce8fff2017d65b1ddef384f8 Description A remote cross site scripting issue exists within the Public Search Handlers component, specifically in the HospitalController.java file. The flaw allow...

PT-2026-96327

Name of the Vulnerable Software and Affected Versions Yonyou KSOA version 9.0 Description A weakness in the /cardcase/search list.jsp file allows for remote SQL injection. This occurs when the address argument is manipulated, enabling an attacker to execute unauthorized database queries...

CVE-2026-95396: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file HospitalController.java of the component Public Search Handlers. The manipulation of the argument Search leads to cross site scripting. The attack can b...

PT-2026-96926

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description Three distinct issues allow attacker-controlled queries to access content from forbidden projects or spaces, bypassing the restrictions set by the JIRA PROJECTS FILTER and CONFLUENCE SPACES...

CVE-2026-95665: Improper Neutralization of Input During Web Page Generation

MISP contains a reflected cross-site scripting XSS vulnerability in the event REST search export confirmation form. The view template app/View/Events/ajax/eventRestSearchExportConfirmationForm.ctp renders a URL-supplied event ID list into a single-quoted JavaScript string literal using PHP's...

Agentic-IC3: Enabling Semantic Proof Search in IC3 Model Checking

IC3 is a state-of-the-art algorithm for hardware model checking that proves safety properties by incrementally constructing an inductive invariant consisting of a set of lemmas. Its effectiveness depends on generalization heuristics that identify useful lemmas and guide proof search. However, man...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002719)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002719 advisory. Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qt (UTSA-2025-002300)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002300 advisory. Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local...

The vulnerability of the contact search component of the SOGo software for collaborative work lies in the lack of a password recovery mechanism, allowing attackers to gain unauthorized access to users’ accounts.

The vulnerability of the contact search component in the SOGo software for collaborative work is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to a user’s account through specially craft...

The vulnerabilities of the functions nltk.parse.dependencygraph.dot2img() and nltk.translate.api.AlignedSent._repr_svg_() in the NLTK library for symbolic and statistical processing of natural language allow attackers to execute arbitrary code.

The vulnerabilities of the nltk.parse.dependencygraph.dot2img and nltk.translate.api.AlignedSent.reprsvg functions in the NLTK library for symbolic and statistical processing of natural language are related to the use of an insecure search path. Exploiting these vulnerabilities could allow...

CVE-2026-81469

Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges...