877 matches found
CVE-2021-22053
Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at /hystrix/monitor;user-provided data, the path elements following...
CVE-2021-23197
Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account that runs the Controller Service. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 MR3 ;...
CVE-2021-23197
CVE-2021-23197 describes an unquoted service path vulnerability in the Gallagher Controller Service, affecting Gallagher Command Centre 8.50 (pre-8.50.2048 MR3) . The underlying issue is that the service executable path is unquoted, allowing an unprivileged user to cause the service to execute co...
CVE-2021-0082
Uncontrolled search path in software installer for IntelR PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...
Code injection
An untrusted search path in AMD Radeon settings Installer may lead to a privilege escalation or unauthorized code execution...
GHSA-43G8-79X3-J898 Unrestricted access to predictable file paths in hov/jobfair
An issue was discovered in the jobfair aka Job Fair extension before 1.0.13 and 2.x before 2.0.2 for TYPO3. The extension fails to protect or obfuscate filenames of uploaded files. This allows unauthenticated users to download files with sensitive data by simply guessing the filename of uploaded...
CVE-2021-35230
As a result of an unquoted service path vulnerability present in the Kiwi CatTools Installation Wizard, a local attacker could gain escalated privileges by inserting an executable into the path of the affected service or uninstall entry...
CVE-2020-19959
A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dlsendmail.php page cookie...
CVE-2021-36297
SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting/hijacking, only by a separate administrative action that is not a default part of the SOSInstallerTool.exe installation for executing...
CVE-2021-3805
object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...
object-path 安全漏洞
object-path is an Npm library for individual developers to access variables in data structures via paths. A security vulnerability exists in object-path, which stems from the vulnerability of object paths to uncontrolled modification of object prototype attributes prototype contamination...
in getgrav/grav
✍️ Description Developers often set cookies to be accessible from the root context path "/". Doing so exposes the cookie to all web applications on the domain. Since cookies often carry sensitive information such as session identifiers, sharing cookies across applications can lead a vulnerability...
CVE-2021-20793
CVE-2021-20793 affects the installers for Sony Audio USB Driver (V1.10 and earlier) and HAP Music Transfer (V1.3.0 and earlier), due to a DLL search path issue that can cause loading of Trojan DLLs. This untrusted-search-path flaw may allow arbitrary code execution with the privileges of the user...
CVE-2021-28636
Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Uncontrolled Search Path Element vulnerability. An attacker with access to the victim's C:/ folder could leverage this vulnerability to achieve arbitrary code...
CVE-2021-23407
This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path...
The vulnerability of the module for creating and saving structured information about company departments in the “LOCMAN Reference Guide for Structural Departments” system, which manages engineering data and the product lifecycle of LOCMAN:PLM, arises from the possibility of unlimited loading of dangerous files. This vulnerability allows attackers to execute arbitrary code.
The vulnerability of the module responsible for creating and saving structured information about company departments in the “LOCZMAN Reference Guide for Structural Departments” system, which manages engineering data and the product lifecycle of LOCZMAN:PLM, relates to the unlimited loading of...
Creative Cloud Desktop Application 代码问题漏洞
Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An uncontrolled search path element vulnerability exists in Adobe Creative Cloud Desktop Application 2.4 and earlier versions. An attacker can exploit this vulnerability to...
Arbitrary code execution due to an uncontrolled search path for the git binary
Impact The go language recently addressed a security issue in the way that binaries are found before being executed. Some operating systems like Windows persist to have the current directory being part of the default search path, and having priority over the system-wide path. This means that it's...
CVE-2021-3464
CVE-2021-3464 affects Lenovo PCManager prior to version 3.0.400.3252, describing a DLL search path vulnerability that could enable privilege escalation. The Red Hat/CNVD/CNNVD variants and NVD record the same affected product/version and root cause as a DLL search path issue, with no exploitation...