The vulnerability of the ApexOne Security Agent for antivirus software from Trend Micro, Apex One and Apex One as a Service, allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the ApexOne Security Agent in antivirus software programs Trend Micro Apex One and Apex One as a Service is related to the use of an insecure search path. Exploiting this vulnerability allows a attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the Node.js software platform, related to the use of an insecure search path, allows attackers to escalate their privileges.

The vulnerability of the Node.js software platform is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application lies in the use of an insecure search path, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Creative Cloud Desktop Application lies in the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of LiteSpeed and OpenLiteSpeed web application server software lies in the use of an insecure search path, which allows attackers to escalate their privileges.

The vulnerability of LiteSpeed and OpenLiteSpeed web application server software lies in the use of an insecure search path. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the dbghelp.dll library in the Redis database management system allows a perpetrator to execute arbitrary code.

The vulnerability of the dbghelp.dll library in the Redis database management system is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Intel(R) Datacenter Group Event software lies in the use of an insecure search path, allowing attackers to escalate their privileges.

The vulnerability of the IntelR Datacenter Group Event software is related to the use of an insecure search path. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the executable files instup.exe and wsc_proxy.exe of the antivirus protection software Avast Premium Security allows a perpetrator to execute arbitrary code or cause service failure.

The vulnerability of the installed files instup.exe and wscproxy.exe of the antivirus protection software Avast Premium Security is related to the use of an insecure search path. Exploiting this vulnerability can allow a hacker to execute arbitrary code or cause service failures...

The vulnerability of the VMware Tools utility set for Windows operating systems arises from the use of an insecure search path, allowing a malicious actor to execute arbitrary code with system privileges.

The vulnerability of the VMware Tools utility set for Windows operating systems is related to the use of an insecure lookup path. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with system privileges...

CVE-2022-26488

In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabl...

The vulnerability of Adobe Dreamweaver HTML editor, related to the use of an insecure search path, allows attackers to access confidential information.

The vulnerability of the Adobe Dreamweaver HTML editor is related to the use of an insecure search path. Exploiting this vulnerability can allow an attacker to access confidential information...

Vulnerability concealed in FortiClient

A vulnerability has been fixed in FortiClient and FortiClient EMS. An insecure search path could allow an attacker to launch a DLL-Hijack attack. Through the exploitation of this vulnerability, an attacker can obtain elevated privileges on the vulnerable system. Fortinet has released updates to f...

Intel RealSense D400 Series 代码问题漏洞

The Intel RealSense D400 Series is a series of cameras from Intel Corporation USA that deliver real-sense technology. This series of cameras is the preferred solution for applications such as robot navigation and object recognition. A code issue vulnerability exists in the Intel RealSense D400...

The vulnerability of theEncode.pm module in the Perl programming language allows attackers to inject arbitrary code and gain elevated privileges.

The vulnerability of theEncode.pm module in the Perl programming language is related to incorrect handling of the search path. Exploiting this vulnerability allows a remote attacker to inject arbitrary code and gain increased privileges...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat 2019, Adobe Acrobat Reader 2019, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to the use of an insecure search path, allowing attackers to exploit their privileges.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat 2019, Adobe Acrobat Reader 2019, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to the use of an insecure search path. Exploiting these vulnerabilities can...

PostgreSQL 命令注入漏洞

PostgreSQL is a free object-relational database management system organized by Postgresql. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, etc. A remote code execution vulnerability exists in the pg partman extension in...

Intel Optane(TM) DC Security Vulnerability

Intel OptaneTM DC is a software application from Intel Corporation USA. It provides a new storage technology. A security vulnerability exists in Intel OptaneTM DC Persistent Memory installer for Windows, which arises from an uncontrolled search path in the installer that could allow an...

qt: files placed by attacker can influence the working directory and lead to malicious code execution

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access...

The vulnerability of the Microsoft 365 Apps for Enterprise package lies in the use of an insecure search path, allowing a hacker to execute arbitrary code.

The vulnerability of the Microsoft 365 Apps for Enterprise package is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created document...

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat allow attackers to enhance their privileges.

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud are related to the use of an insecure search path. Exploiting these vulnerabilities can allow a malicious actor, operating locally, to increase...

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat allow attackers to enhance their privileges.

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud are related to the use of an insecure search path. Exploiting these vulnerabilities can allow a malicious actor, operating locally, to increase...