Python Untrusted Search Path Vulnerability (Feb 2025) - Windows

Python is prone to an untrusted search path vulnerability in the mimetypes standard library. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

CVE-2025-1353

A vulnerability was found in Kong Insomnia up to 10.3.0 and classified as critical. This issue affects some unknown processing in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The...

CVE-2025-1353 Kong Insomnia profapi.dll untrusted search path

A vulnerability was found in Kong Insomnia up to 10.3.0 and classified as critical. This issue affects some unknown processing in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The...

CVE-2025-1353

CVE-2025-1353 affects Kong Insomnia up to 10.3.0, involving the library profapi.dll . The issue is an untrusted search path vulnerability that requires a local attack, with high complexity as described. The existence and reproducibility are disputed in sources. Affected component is the profapi.d...

CVE-2025-1353 Kong Insomnia profapi.dll untrusted search path

A vulnerability was found in Kong Insomnia up to 10.3.0 and classified as critical. This issue affects some unknown processing in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The...

PT-2025-6886 · Kong · Kong Insomnia

Name of the Vulnerable Software and Affected Versions: Kong Insomnia versions prior to 10.3.0 Description: A critical issue has been detected in Kong Insomnia, affecting some unknown processing in the library profapi.dll. The manipulation leads to an untrusted search path. An attack must be...

Insomnia 代码问题漏洞

Insomnia is an open source, cross-platform API client from Insomnia for GraphQL, REST, WebSockets, server-sent events, and gRPC. A code issue vulnerability exists in Insomnia prior to version 10.3.0 that stems from an issue with profapi.dll containing an untrusted search path...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39813

Uncontrolled search path for some EPCT software before version 1.42.8.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Zoom Workplace Apps for Windows Elevation of Privilege Vulnerability

Zoom Workplace Apps for Windows is a professional video conferencing client, built for enterprise meetings, that is mobile and cloud-based. Zoom Workplace Apps for Windows suffers from an elevation of privilege vulnerability that stems from an untrusted search path in the installer. No details of...

CVE-2024-39284

Uncontrolled search path for some IntelR Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36291

Uncontrolled search path for some IntelR Chipset Software Installation Utility before version 10.1.19867.8574 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39372

Uncontrolled search path for the IntelR XTU software for Windows before version 7.14.2.14 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39284

CVE-2024-39284 concerns an uncontrolled search path in Intel® Advisor software before version 2024.2, potentially allowing an authenticated user to escalate privileges via local access. Connected sources (Intel advisory INTEL-SA-01208, Red Hat RH:CVE-2024-39284, and related feeds) confirm the aff...

CVE-2024-42492

The CVE-2024-42492 entry applies to the BIOS and System Firmware Update Package for IntelR Server M50FCP family prior to version R01.02.0002. The root cause is an uncontrolled search path element, which could allow a privileged user to escalate privileges via local access. Intel's advisory (INTEL...

Intel Extreme Tuning Utility 代码问题漏洞

Intel Extreme Tuning Utility is a software from Intel Corporation that can increase CPU frequency. In addition to supporting overclocking of CPUs and graphics cards, the software also features system hardware information detection and real-time monitoring of the current system status to ensure...

Intel Advisor 代码问题漏洞

Intel Advisor is a design and analysis tool for developing high-performance code from Intel Corporation USA. A code issue vulnerability exists in Intel Advisor versions prior to 2024.2 that stems from the presence of an uncontrolled search path that could allow an authenticated user to potentiall...

Intel oneAPI DPC++/C++ Compiler 代码问题漏洞

Intel oneAPI DPC++/C++ Compiler is a compiler from Intel Corporation USA. A code issue vulnerability exists in Intel oneAPI DPC++/C++ Compiler versions prior to 2024.2, which stems from the presence of an uncontrolled search path that could allow an authenticated user to enable elevation of...

Intel QuickAssist Technology 代码问题漏洞

Intel QuickAssist Technology is an Intel technology that improves server utilization. The technology improves server efficiency by sharing the stress of compute-intensive tasks to equalize server pressure. A code issue vulnerability exists in Intel QuickAssist Technology versions prior to 2.2.0,...