873 matches found
CVE-2021-36297
SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting/hijacking, only by a separate administrative action that is not a default part of the SOSInstallerTool.exe installation for executing...
-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0x0.icu.anima (=0.1.0) +5583 more potentially affected by CVE-2021-3805 via object-path (>=0.0.1 <=0.11.7)
object-path NPM version =0.0.1, =1.0.1, =8.4.2, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =0.0.1, =0.0.22 - @0soft/zero-material-ui =0.0.23-alpha.3 and more Source cves: CVE-2021-3805 Source advisory: OSV:GHSA-8V63-CQQC-6R2C...
CVE-2021-3805
object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...
object-path 安全漏洞
object-path is an Npm library for individual developers to access variables in data structures via paths. A security vulnerability exists in object-path, which stems from the vulnerability of object paths to uncontrolled modification of object prototype attributes prototype contamination...
in getgrav/grav
✍️ Description Developers often set cookies to be accessible from the root context path "/". Doing so exposes the cookie to all web applications on the domain. Since cookies often carry sensitive information such as session identifiers, sharing cookies across applications can lead a vulnerability...
CVE-2021-20793
CVE-2021-20793 affects the installers for Sony Audio USB Driver (V1.10 and earlier) and HAP Music Transfer (V1.3.0 and earlier), due to a DLL search path issue that can cause loading of Trojan DLLs. This untrusted-search-path flaw may allow arbitrary code execution with the privileges of the user...
CVE-2021-28636
Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Uncontrolled Search Path Element vulnerability. An attacker with access to the victim's C:/ folder could leverage this vulnerability to achieve arbitrary code...
CVE-2021-23407
This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path...
The vulnerability of the module for creating and saving structured information about company departments in the “LOCMAN Reference Guide for Structural Departments” system, which manages engineering data and the product lifecycle of LOCMAN:PLM, arises from the possibility of unlimited loading of dangerous files. This vulnerability allows attackers to execute arbitrary code.
The vulnerability of the module responsible for creating and saving structured information about company departments in the “LOCZMAN Reference Guide for Structural Departments” system, which manages engineering data and the product lifecycle of LOCZMAN:PLM, relates to the unlimited loading of...
Creative Cloud Desktop Application 代码问题漏洞
Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An uncontrolled search path element vulnerability exists in Adobe Creative Cloud Desktop Application 2.4 and earlier versions. An attacker can exploit this vulnerability to...
Arbitrary code execution due to an uncontrolled search path for the git binary
Impact The go language recently addressed a security issue in the way that binaries are found before being executed. Some operating systems like Windows persist to have the current directory being part of the default search path, and having priority over the system-wide path. This means that it's...
@irrelon/nextstate (=5.0.0), @irrelon/schema (>=3.0.0 <=3.3.0) +2 more potentially affected by CVE-2020-7708 via @irrelon/path (>=2.3.5 <=3.1.1)
@irrelon/path NPM version =2.3.5, =3.0.0, =0.0.10, =4.1.0, =4.2.1 Source cves: CVE-2020-7708 Source advisory: OSV:GHSA-J7CG-H9V9-6VQP...
CVE-2021-3464
CVE-2021-3464 affects Lenovo PCManager prior to version 3.0.400.3252, describing a DLL search path vulnerability that could enable privilege escalation. The Red Hat/CNVD/CNNVD variants and NVD record the same affected product/version and root cause as a DLL search path issue, with no exploitation...
@codedungeon/gunner (>=0.0.1 <=0.80.1), @codedungeon/laravel-versions-cli (>=0.0.3 <=0.1.0) +74 more potentially affected by CVE-2020-8298 via fs-path (>=0.0.22 <=0.0.24)
fs-path NPM version =0.0.22, =0.0.1, =0.0.3, =0.0.9, =1.0.2, =1.0.1, =0.0.1, =1.0.0, =1.0.0, =0.0.40, =1.0.1, =0.0.1, =1.0.1, =0.1.0, =1.0.0, =1.0.2 and more Source cves: CVE-2020-8298 Source advisory: OSV:GHSA-8MRF-64FW-2X75...
CVE-2020-8298
fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods...
The vulnerability of the software installer for Intel Optane DC Persistent Memory, which allows a hacker to enhance their privileges.
The vulnerability of the software installer for Intel Optane DC Persistent Memory, which operates on non-volatile memory, is related to improper handling of the search path. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2021-3120
An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. In order to exploit this vulnerability, an attacker must ...
TP-Link Archer C5v 安全漏洞
The TP-Link Archer C5v is an AC1200 wireless dual-band Gigabit VoIP router. An information disclosure vulnerability exists in TP-Link Archer C5v 1.7181221. A remote attacker can exploit this vulnerability by sending a USERCFG0,0,0,0,0,0,0,00,0,0,0,00,0 request to the /cgi?1&5 URI to retrieve...
