CVE-2026-101142

A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the component Questionnaire Audio Upload. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been...

EUVD-2026-88463

A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the component Questionnaire Audio Upload. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been...

CVE-2026-101142 Eleveo Quality Management Questionnaire Audio Upload Scorecard.jsp path traversal

A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the component Questionnaire Audio Upload. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been...

CVE-2026-101142 Eleveo Quality Management Questionnaire Audio Upload Scorecard.jsp path traversal

A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the component Questionnaire Audio Upload. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been...

PT-2026-102332

Name of the Vulnerable Software and Affected Versions Eleveo Quality Management version 9.7.0 Description A path traversal issue exists in the Questionnaire Audio Upload component within the Scorecard.jsp file. This flaw allows a remote attacker to manipulate file paths to access unauthorized...

CVE-2026-101142: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the component Questionnaire Audio Upload. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been...

CVE-2026-85409

A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The...

EUVD-2026-70889

A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The...

CVE-2026-85409 Eleveo Quality Management Questionnaire Service QuestionnaireService.runDataExportNow path traversal

A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The...

CVE-2026-85409 Eleveo Quality Management Questionnaire Service QuestionnaireService.runDataExportNow path traversal

A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The...

CVE-2026-85409

Eleveo Quality Management 9.7.0 is affected by a path traversal vulnerability in the QuestionnaireService.runDataExportNow function of the Questionnaire Service component. Manipulating the file_name argument allows a remote attacker with low privileges to read, modify, or delete files outside the...

PT-2026-85398

A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument file name leads to path traversal. The attack may be performed from remote. The...

CVE-2026-85409: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The...

CVE-2026-45086: Missing Authorization

Decidim is a participatory democracy framework. From 0.31.1 before 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, a participant can directly load /admin/demographics/questions/editquestions and reach the demographics questionnaire editor without the required administrator authorization. The...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass in the demographics questionnaire admin editor interface due to missing authorization checks on the /admin/demographics/questions route. An attacker can gain unauthorized access to administrative question-managemen...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass in the demographics questionnaire admin editor interface due to missing authorization checks on the /admin/demographics/questions route. An attacker can gain unauthorized access to administrative question-managemen...

Decidim - Forms admin question editor lacks authorization

Description A participant can load the demographics questionnaire admin editor and make changes. Impact - Low-privilege users can access questionnaire-admin interfaces. - They can read question-management surfaces that should remain limited to questionnaire managers. Credits This issue was...

MINI-PQQ2-86H6-W38J

Bulletin has no description...

CVE-2026-25743 OpenEMR has Stored XSS in Questionnaire answers

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, users with the "Forms administration" role can fill questionnaires "forms" in patient encounters. The answers to the forms are displayed on the encounter page and in th...

PDPL Metric: Validating a Scale to Measure Personal Data Privacy Literacy among University Students

Personal data privacy literacy PDPL refers to a collection of digital literacy skills related to an individuals ability to understand, evaluate, and manage the collection, use, and protection of personal data in online and digital environments. This study introduces and validates a new psychometr...