CVE-2024-49592

Trial installer for McAfee Total Protection legacy trial installer software 16.0.53 allows local privilege escalation because of an Uncontrolled Search Path Element. The attacker could be "an adversary or knowledgeable user" and the type of attack could be called "DLL-squatting." The issue only...

CVE-2024-35245: Uncontrolled Search Path Element

Uncontrolled search path element in some IntelR PROSet/Wireless WiFi software for Windows before version 23.60 may allow an authenticated user to potentially enable escalation of privilege via local access...

The vulnerability of the Intel Raid Web Console web console involves an uncontrolled search path element, which allows attackers to escalate their privileges.

The vulnerability of the Intel Raid Web Console web console relates to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

Adobe Dimension < 3.4.3 Arbitrary code execution (APSB21-40) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.3. It is, therefore, affected by a vulnerability as referenced in the APSB21-40 advisory. - Adobe Dimension version 3.4 and earlier is affected by an Uncontrolled Search Path Element element. An unauthenticated...

Adobe Dimension < 3.4.3 Arbitrary code execution (APSB21-40)

The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.3. It is, therefore, affected by a vulnerability as referenced in the APSB21-40 advisory. - Adobe Dimension version 3.4 and earlier is affected by an Uncontrolled Search Path Element element. An unauthenticated...

CVE-2024-45710

SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine...

CVE-2024-45710: Uncontrolled Search Path Element

SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine...

Siemens ModelSim和Questa 代码问题漏洞

Questa and ModelSim simulators are used worldwide for simulating, debugging and verifying integrated circuit designs, among other things. An uncontrolled search path element vulnerability exists in Siemens Questa and ModelSim, which can be exploited by an authenticated, local attacker to inject...

Siemens Questa and ModelSim

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2024-45246

CVE-2024-45246 concerns Diebold Nixdorf Vynamic View Console with an Uncontrolled Search Path Element (CWE-427). Public sources indicate affected versions are prior to 5.9.5 (CNNVD) and that the issue could enable arbitrary code execution and privilege escalation. The CNNVD description additional...

CVE-2024-45246 Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element

Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element...

PT-2024-31503 · Diebold Nixdorf · Diebold Nixdorf

Name of the Vulnerable Software and Affected Versions: Diebold Nixdorf affected versions not specified Description: The issue concerns an Uncontrolled Search Path Element, which is a type of security weakness. This weakness can potentially be exploited to execute malicious code or escalate...

CVE-2024-45246: Uncontrolled Search Path Element

Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element...

Intel Raid Web Console 代码问题漏洞

Intel Raid Web Console is a web-based, Intel Corporation USA application that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. Intel Raid Web Console has a code issue vulnerability that stems from the inclusion of an uncontrolled search pa...

The vulnerability of the Dell Peripheral Manager software relates to an uncontrolled search path element, which allows a perpetrator to escalate their privileges or execute arbitrary code.

The vulnerability of the Dell Peripheral Manager software relates to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges or execute arbitrary code...

Microsoft Reactor Workshops reactorworkshops Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Reactor Workshops. Authentication is not required to exploit this vulnerability. The specific flaw exists within the installation of Reactor Workshops. When installed from the official...

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update E)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.0 ATTENTION : Exploitable remotely Vendor : ICONICS, Mitsubishi Electric Equipment : ICONICS Product Suite Vulnerabilities : Allocation of Resources Without Limits or Throttling, Improper Neutralization, Uncontrolled Search Path Element, Improper...

Yokogawa CENTUM

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.7 ATTENTION : Exploitable remotely/Low attack complexity Vendor : Yokogawa Equipment : CENTUM Vulnerability : Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary...

CVE-2024-34116 Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation

Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leading to arbitrary file delete...

CVE-2024-34116 Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation

Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leading to arbitrary file delete...