414 matches found
CVE-2026-128134
The NLTK (Natural Language Toolkit) Python suite versions prior to 3.10.4 are vulnerable to local code execution via an untrusted search path. The nltk.parse.dependencygraph.dot2img function resolves the Graphviz dot executable through the PATH but fails to route the resulting absolute executable...
Cross-site Scripting (XSS)
Overview @highcharts/grid-pro is a Highcharts Grid Pro framework Affected versions of this package are vulnerable to Cross-site Scripting XSS via the createSvgFromDefinition function in ts/Grid/Core/UI/SvgIcons.ts, where SVG path element attributes are set directly from user-supplied Grid icon...
Cross-site Scripting (XSS)
Overview @highcharts/grid-lite is a Highcharts Grid Lite framework Affected versions of this package are vulnerable to Cross-site Scripting XSS via the createSvgFromDefinition function in ts/Grid/Core/UI/SvgIcons.ts, where SVG path element attributes are set directly from user-supplied Grid icon...
CVE-2026-104349
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...
CVE-2026-104349 Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...
EUVD-2026-111117
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...
CVE-2026-104349 Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...
CVE-2026-104349
Adobe Creative Cloud Desktop for Windows is affected by an Uncontrolled Search Path Element vulnerability (CWE-427 ). A low-privileged attacker could exploit this flaw to achieve arbitrary code execution in the context of the current user by tricking a victim into opening a malicious file. Adobe ...
PT-2026-126676
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...
CVE-2026-104349: Uncontrolled Search Path Element
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...
Adobe Creative Cloud < 6.11 Privilege escalation (APSB26-135)
The version of Adobe Creative Cloud installed on the remote Windows host is prior to 6.11. It is, therefore, affected by a vulnerability as referenced in the APSB26-135 advisory. - Uncontrolled Search Path Element CWE-427 potentially leading to Privilege escalation CVE-2026-104349 Note that Nessu...
CVE-2026-71170
Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arbitrary code execution...
CVE-2026-71170
Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arbitrary code execution...
EUVD-2026-104591
Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arbitrary code execution...
CVE-2026-71170
Dell Application Store versions prior to 26.05.0.7 are vulnerable to an Uncontrolled Path Element vulnerability (CWE-427). A low privileged attacker with local access could exploit this flaw to achieve Elevation of Privilege and perform arbitrary code execution . No specific exploitation details ...
CVE-2026-71170
Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arbitrary code execution...
PT-2026-117638
Name of the Vulnerable Software and Affected Versions Dell Application Store versions prior to 26.05.0.7 Description An Uncontrolled Path Element issue exists where a low privileged attacker with local access could potentially exploit the flaw to achieve Elevation of Privilege and execute arbitra...
CVE-2026-71170: Uncontrolled Search Path Element
Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arbitrary code execution...
PT-2026-121190
Уязвимость программного средства загрузки, установки и активации программного обеспечения Siemens Software Center связана с неконтролируемым элементом пути поиска. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код с повышенными привилегиями с помощью специально...
CVE-2026-103845
Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...