PT-2025-38580

Уязвимость средства автоматизированной диагностики информационных систем Alpha.Diagnostics связана с неконтролируемым элементом пути поиска. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

Intel Video Processing Library 代码问题漏洞

Intel Video Processing Library Intel VPL is a video processing library from Intel Corporation USA. A code issue vulnerability exists in Intel Video Processing Library versions prior to 2023.4.0 that stems from an unrestricted path search that results in elevated local privileges...

PT-2024-6793 · Microsoft · 365 Apps For Enterprise +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to the use of an unreliable path search in Microsoft Office and Microsoft 365 Apps for...

PT-2024-4284

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description The issue is relate...

PT-2024-2828

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to the use of an unreliable path search in the Windows kernel, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to...

CVE-2023-47039 Perl: perl for windows binary hijacking vulnerability

A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell cmd.exe. When running an executable that uses the Windows Perl interpreter, Perl attempts to find and execute cmd.exe within the operating system...

CVE-2023-47039

A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell "cmd.exe". When running an executable that uses the Windows Perl interpreter, Perl attempts to find and execute "cmd.exe" within the operating...

CVE-2023-47039 Perl: perl for windows binary hijacking vulnerability

A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell cmd.exe. When running an executable that uses the Windows Perl interpreter, Perl attempts to find and execute cmd.exe within the operating system...

SUSE CVE-2023-47039

A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell cmd.exe. When running an executable that uses the Windows Perl interpreter, Perl attempts to find and execute cmd.exe within the operating system...

Perl Security Vulnerabilities

Perl is a general-purpose, interpreted, dynamic, cross-platform programming language from the PERL community. A security vulnerability exists in Perl, which can be exploited to execute arbitrary code when running an executable that uses the Windows Perl interpreter, due to a path search order iss...

CVE-2023-34391

Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulating Configuration File Search Paths. See Instruction Manual Appendix A Cybersecurity tag dated 20230522 for more details. This issue affects...

PT-2023-2927

Name of the Vulnerable Software and Affected Versions Microsoft .NET affected versions not specified Description The issue is related to incorrect handling of the path search for DLL libraries in the Microsoft .NET platform. This can allow an attacker to execute arbitrary code. Recommendations At...

PT-2023-1742 · Onlyoffice · Onlyoffice Docs

Name of the Vulnerable Software and Affected Versions: ONLYOFFICE Docs versions prior to 7.3 Description: The issue is related to the use of an insecure path search in the ONLYOFFICE Docs online text document editor. Exploitation of this issue may allow an attacker to execute arbitrary code by...

Slackware: Security Advisory (SSA:2022-320-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Duplicate Advisory: Kerberos for NodeJS allows DLL Injection

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-m2mx-rfpw-jghv. This link is maintained to preserve external references. Original Description The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection ...

Cheetah Path Search Order Hijacking

Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/...

GHSA-VXF2-7RC3-PXMX Cheetah Path Search Order Hijacking

Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/...

The vulnerability of Adobe Illustrator CC 2019’s graphic editor lies in its insecure method of searching for paths to DLL libraries. This allows attackers to exploit their privileges.

The vulnerability of Adobe Illustrator CC 2019 is related to a unsafe procedure for searching paths to DLL libraries. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2021-3522

Name of the Vulnerable Software and Affected Versions OpenVPN versions prior to 2.5.3 Description The issue is related to errors in the path search mechanism of the OpenSSL library in OpenVPN software. Exploitation of this issue may allow an attacker to execute arbitrary code. Local users can loa...

MGASA-2021-0123 Updated glib2.0 packages fix security vulnerabilities

Fix various instances within GLib where gmemdup was vulnerable to a silent integer truncation and heap overflow problem discovered by Kevin Backhouse, work by Philip Withnall 2319 Fix some issues with handling over-long invalid input when parsing for GDate !1824 Don't load GIO modules or parse...