Lucene search
+L

88 matches found

Redos
Redos
added 2025/07/24 12:00 a.m.15 views

ROS-20250724-07

A vulnerability in the Microsoft .NET software platform and Microsoft's software development tool Visual Studio is related to the use of an insecure search path. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

7.5CVSS7.7AI score0.00978EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/07/22 12:00 a.m.16 views

The vulnerability of the Yandex.Messenger for macOS, related to the use of an insecure search path, allows a hacker to elevate their privileges and gain access to the device’s hardware resources.

The vulnerability of the Yandex.Messenger for macOS relates to the use of an insecure search path. Exploiting this vulnerability can allow a hacker to gain increased privileges and access to the device’s hardware resources...

8.8CVSS5.5AI score0.0017EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/09 12:00 a.m.15 views

The vulnerability of the Apache Tomcat software lies in the use of an insecure search path, allowing attackers to execute arbitrary code.

The vulnerability of the Apache Tomcat software is related to the use of an insecure path search mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.4CVSS7.5AI score0.00373EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/20 12:00 a.m.13 views

The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development environment is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

7.6CVSS7.2AI score0.00978EPSS
SaveExploits0References5Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/06/18 12:00 a.m.11 views

The vulnerability of Contour.Talk video conferencing software for macOS, related to the use of an insecure search path, allows attackers to escalate their privileges and gain unauthorized access to the system.

The vulnerability of Contour.Talk software for macOS-related video conferencing systems is related to the use of an insecure search path. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to the system...

6.8CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/11 12:00 a.m.12 views

The vulnerability of programs for managing and monitoring IT services such as Microsoft System Center Operations Manager, System Center Service Manager, System Center Orchestrator, System Center Data Protection Manager, and System Center Virtual Machine Manager lies in the use of an insecure search path, which allows an attacker to escalate their privileges.

The vulnerabilities of programs for managing and monitoring IT services such as Microsoft System Center Operations Manager, System Center Service Manager, System Center Orchestrator, System Center Data Protection Manager, and System Center Virtual Machine Manager are related to the use of an...

7.8CVSS7.6AI score0.00883EPSS
SaveExploits0References2Affected Software5
CNNVD
CNNVD
added 2025/04/09 12:00 a.m.11 views

NI LabVIEW(National Instruments LabVIEW) 安全漏洞

NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW National Instruments LabVIEW version 2025 Q1 and earlier, which stems from an uncontrolled search path that could lead to the execution o...

7.8CVSS6.8AI score0.00194EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:00 a.m.13 views

The vulnerability of the Adobe Illustrator graphic editor lies in the use of an insecure search path, allowing attackers to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created malicious file...

7.8CVSS5.9AI score0.00228EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:00 a.m.16 views

The vulnerability of the profapi.dll file, a software component used for creating, testing, documenting, publishing, and maintaining the API of an application’s software interface, allows a perpetrator to execute arbitrary code.

The vulnerability of the profapi.dll file, which is used in software for creating, testing, documenting, publishing, and maintaining the API of an application, is related to the use of an insecure path for searching. Exploiting this vulnerability allows an attacker to execute arbitrary code...

4.5CVSS5.8AI score0.00165EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:00 a.m.13 views

The vulnerability of Fortinet FortiClient Windows security devices, related to the use of an insecure search path, allows attackers to execute arbitrary code.

The vulnerability of Fortinet FortiClient Windows protection devices is related to the use of an insecure lookup path. Exploiting this vulnerability allows attackers to execute arbitrary code...

7.8CVSS5.8AI score0.00281EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:00 a.m.21 views

The vulnerability of the Microsoft.SqlServer.XEvent.Configuration.dll file in the Microsoft SQL Server relational database management system allows a attacker to execute arbitrary code.

The vulnerability of the Microsoft.SqlServer.XEvent.Configuration.dll file in the Microsoft SQL Server database management system is related to the use of an insecure search path. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created DLL...

7.8CVSS6.1AI score0.00615EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:00 a.m.11 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the use of an insecure search path, allowing a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00935EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/24 12:00 a.m.13 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the use of an insecure search path, allowing a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.00774EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:00 a.m.11 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to the use of an unreliable search path, allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the desktop publishing system Adobe Framemaker is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user...

7.8CVSS6AI score0.00352EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/10/14 12:00 a.m.26 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the use of an insecure search path, allowing a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.00493EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/08 12:00 a.m.7 views

PT-2024-7214 · Microsoft · 365 Apps For Enterprise +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to the use of an insecure search path in Microsoft Office and Microsoft 365 Apps for Enterpri...

7.8CVSS7.2AI score0.00774EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:00 a.m.22 views

The vulnerability of Windows operating systems, related to the use of an insecure search path, allows attackers to escalate their privileges.

The vulnerability of Windows operating systems is related to the use of an insecure search path. Exploiting this vulnerability can allow an attacker to increase their privileges...

6.8CVSS5.5AI score0.0108EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/09/05 12:00 a.m.14 views

The vulnerability of the Yandex Browser is related to the use of an insecure search path, which allows a hacker to execute arbitrary code.

The vulnerability of the Yandex Browser is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code by loading a specially crafted DLL file...

8.8CVSS8.1AI score0.0071EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/06/24 12:00 a.m.17 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the use of an insecure search path, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created files...

7.8CVSS6AI score0.01182EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/06/17 12:00 a.m.16 views

The vulnerability in the WiX Toolset for creating installation packages on Windows operating systems arises from the use of an insecure search path, which allows a malicious actor to escalate their privileges.

The vulnerability in the WiX Toolset for creating installation packages on Windows operating systems relates to the use of an insecure search path. Exploiting this vulnerability can allow an attacker to increase their privileges through the by.termp folder...

8.2CVSS7.2AI score0.00235EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder