115838 matches found
CVE-2026-48446 CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...
CVE-2026-48446 CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...
CVE-2025-0041
CVE-2025-0041 describes uncontrolled search paths in the Vitis Embedded Single File Download (SFD) installer for Windows. The issue could allow a low-privilege local user to achieve arbitrary code execution by abusing the DLL/loader search order and loading a malicious library or executable. The ...
EUVD-2025-210694
Uncontrolled search paths in the Vitis™ Embedded Single File Download SFD for local Windows installation could allow a low-privileged user to create arbitrary code execution...
CVE-2025-0041
Uncontrolled search paths in the Vitis™ Embedded Single File Download SFD for local Windows installation could allow a low-privileged user to create arbitrary code execution...
CVE-2025-0041
Uncontrolled search paths in the Vitis™ Embedded Single File Download SFD for local Windows installation could allow a low-privileged user to create arbitrary code execution...
CVE-2026-68410
A flaw was found in the Linux kernel's Libertas Wi-Fi driver. The helperfirmwarecb function neglects to free a single-stage firmware image after a successful asynchronous load. This leads to a memory leak in the USB firmware-download path. This issue could potentially lead to system instability o...
Security Bulletin: IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability (CVE-2026-14976, CVE-2026-15280)
Summary IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability with the collectiveController-1.0 enabled. Vulnerability Details CVEID:CVE-2026-15280 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ...
CVE-2026-34175
Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of...
EUVD-2026-56531
Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of...
CVE-2026-34175
Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of...
CVE-2026-34175
Affected software: Hardware-Aware-Automated-MachineLearning NA (pre-45cd723) within Ring 3: User Applications. Vulnerability: Uncontrolled search path leading to local privilege escalation. Root cause: improper handling of search paths; enables escalation of privilege when a privileged user and u...
CVE-2026-32791
Intel PCM before version tag 202604 is affected by an untrusted search path vulnerability that could allow local privilege escalation for Ring 3 user applications. An unprivileged, authenticated user with high attack complexity and passive user interaction could exploit this to impact confidentia...
CVE-2026-32791
Untrusted search path for some IntelR Performance Counter Monitor IntelR PCM before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...
EUVD-2026-56530
Untrusted search path for some IntelR Performance Counter Monitor IntelR PCM before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...
CVE-2026-32791
Untrusted search path for some IntelR Performance Counter Monitor IntelR PCM before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...
CVE-2026-32788
Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit 484c949 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of...
CVE-2026-32788
Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit 484c949 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of...
CVE-2026-32788
CVE-2026-32788 concerns an uncontrolled search path in the Approximate Bayesian Inference Framework prior to a version on commit #484c949, affecting Ring 3: User Applications. The vulnerability could allow local escalation of privilege when a low-complexity attack is combined with an unprivileged...
EUVD-2026-56529
Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit 484c949 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of...