CVE-2024-9496

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9498

CVE-2024-9498 affects the USBXpress SDK installer, where an uncontrolled search path enables DLL hijacking. This can lead to privilege escalation and arbitrary code execution when the impacted installer runs. Exploitation details are not provided in the connected documents. Remediation/fix detail...

CVE-2024-9494

CVE-2024-9494 concerns a DLL hijacking vulnerability in the CP210 VCP Win 2k installer caused by an uncontrolled search path. The affected component is the installer for Silicon CP210 VCP Win 2k, with impact described as privilege escalation and arbitrary code execution when running the impacted ...

CVE-2024-9493 Uncontrolled search path can lead to DLL hijacking in ToolStick installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the ToolStick installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9490

CVE-2024-9490 concerns DLL hijacking due to an uncontrolled search path in Silicon Labs (8‑bit) IDE installer. The vulnerability allows privilege escalation and arbitrary code execution when running the impacted installer. Affected software is the Silicon Labs IDE installer (8‑bit). Root cause is...

Silicon Configuration Wizard 2 installer 代码问题漏洞

Silicon Configuration Wizard 2 installer is a Configuration Wizard 2 installer from Silicon Corporation. A security vulnerability exists in the Silicon Configuration Wizard 2 installer that stems from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges...

Silicon CP210 VCP Win 2k installer 代码问题漏洞

Silicon CP210 VCP Win 2k installer is a CP210 VCP Win 2k installer from Silicon. A security vulnerability exists in the Silicon CP210 VCP Win 2k installer that stems from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary code...

Silicon USBXpress Dev Kit installer 代码问题漏洞

Silicon USBXpress Dev Kit installer is a USBXpress Dev Kit installer from Silicon. A security vulnerability exists in the Silicon USBXpress Dev Kit installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary...

Silicon USBXpress 4 SDK installer 代码问题漏洞

Silicon USBXpress 4 SDK installer is a USBXpress 4 SDK installer from Silicon. A security vulnerability exists in the Silicon USBXpress 4 SDK installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary code...

Silicon ToolStick installer 代码问题漏洞

Silicon ToolStick installer is a ToolStick installer from Silicon Corporation. A security vulnerability exists in Silicon ToolStick installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary code...

Silicon IDE installer 代码问题漏洞

Silicon IDE installer is a development program installer from Silicon Corporation. A security vulnerability exists in Silicon IDE installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary code...

PT-2025-3718 · Toolstick · Toolstick

Name of the Vulnerable Software and Affected Versions: ToolStick affected versions not specified Description: The issue is caused by an uncontrolled search path in the ToolStick installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation and arbitrary code executi...

PT-2025-3722 · Unknown · Usbxpress 4 Sdk

Name of the Vulnerable Software and Affected Versions: USBXpress 4 SDK affected versions not specified Description: The issue is related to DLL hijacking vulnerabilities caused by an uncontrolled search path in the USBXpress 4 SDK installer. This can lead to privilege escalation and arbitrary cod...

PT-2025-3716 · Unknown · Configuration Wizard 2

Name of the Vulnerable Software and Affected Versions: Configuration Wizard 2 affected versions not specified Description: The issue is caused by an uncontrolled search path in the Configuration Wizard 2 installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation...

Silicon USBXpress Win 98SE Dev Kit installer 代码问题漏洞

Silicon USBXpress Win 98SE Dev Kit installer is a USBXpress Win 98SE Dev Kit installer from Silicon. A security vulnerability exists in the Silicon USBXpress Win 98SE Dev Kit installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate...

PT-2025-3717 · Unknown · Flash Programming Utility

Name of the Vulnerable Software and Affected Versions: Flash Programming Utility affected versions not specified Description: The issue is caused by an uncontrolled search path in the Flash Programming Utility installer, leading to DLL hijacking vulnerabilities. This can result in privilege...

PT-2025-3723 · Unknown · Usbxpress Sdk

Name of the Vulnerable Software and Affected Versions: USBXpress SDK affected versions not specified Description: The issue is caused by an uncontrolled search path in the USBXpress SDK installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation and arbitrary code...

Silicon Flash Programming Utility installer 代码问题漏洞

Silicon Flash Programming Utility installer is a Flash Programming Utility installer from Silicon. A security vulnerability exists in the Silicon Flash Programming Utility installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privilege...

PT-2025-4016 · Rise · Rise Mode Temp Cpu

Name of the Vulnerable Software and Affected Versions: Rise Group Rise Mode Temp CPU version 2.1 Description: A critical issue has been found, affecting an unknown part of the CRYPTBASE.dll library in the Startup component. This leads to an untrusted search path, and the attack must be launched...

Ivanti EPM Code Execution Vulnerability

Ivanti EPM is a comprehensive endpoint management solution developed by Ivanti. Ivanti EPM suffers from a code execution vulnerability that stems from the inclusion of an unrestricted resource search path. An attacker could exploit this vulnerability to achieve remote code execution...