Lucene search
+L

11410 matches found

attackerkb
attackerkb
•added 2025/06/10 3:15 p.m.•9 views

CVE-2025-5335

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

7.8CVSS7.6AI score0.00208EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2025/06/10 3:15 p.m.•19 views

CVE-2025-5335

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

7.8CVSS7.6AI score0.00208EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/06/10 2:50 p.m.•12 views

CVE-2025-5335 Privilege Ecalation due to Untrusted Search Path Vulnerability

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

7.8CVSS7.6AI score0.00208EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/06/10 2:50 p.m.•61 views

CVE-2025-5335 Privilege Ecalation due to Untrusted Search Path Vulnerability

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

7.8CVSS0.00208EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2025/06/10 7:00 a.m.•90 views

.NET and Visual Studio Remote Code Execution Vulnerability

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network...

7.5CVSS7.1AI score0.01072EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•7 views

CVE-2025-5335: Untrusted Search Path

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

7.8CVSS7.6AI score0.00208EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/06/10 12:00 a.m.•20 views

UBUNTU-CVE-2025-30399

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network...

7.5CVSS7.1AI score0.01072EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/06/10 12:00 a.m.•16 views

Autodesk Installer security vulnerabilities

Autodesk installer is an installer program from Autodesk USA. A security vulnerability exists in Autodesk Installer that stems from the use of an untrusted search path that could result in elevation of privilege to NT AUTHORITY/SYSTEM...

7.8CVSS7.3AI score0.00208EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/06/09 12:00 a.m.•8 views

PT-2025-25562

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.7 Apache Tomcat versions 10.1.0 through 10.1.41 Apache Tomcat versions 9.0.23 through 9.0.105 Description The issue is related to an Untrusted Search Path vulnerability in the Apache Tomcat install...

8.4CVSS7.4AI score0.00362EPSS
SaveExploits0References34
RedhatCVE
RedhatCVE
•added 2025/06/08 7:18 p.m.•29 views

CVE-2025-5480

Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Action1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to explo...

7.8CVSS7.9AI score0.00322EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/06/07 6:34 a.m.•15 views

Uncontrolled Search Path Element

Overview ramalama is a RamaLama is a command line tool for working with AI LLM models. Affected versions of this package are vulnerable to Uncontrolled Search Path Element via the addsitepackagestosyspath'/usr/local', which unconditionally appended /usr/local/lib/python/site-packages to sys.path....

9.3CVSS6.8AI score
SaveExploits0References3
osv_cve
osv_cve
•added 2025/06/06 7:15 p.m.•20 views

CVE-2025-5480

Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Action1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to explo...

7.8CVSS7.8AI score0.00322EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/06/06 6:49 p.m.•12 views

CVE-2025-5480 Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Action1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to explo...

7.8CVSS7.8AI score0.00322EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2025/06/04 9:00 p.m.•27 views

GHSA-33P9-3P43-82VQ Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Impact On Windows, the shared %PROGRAMDATA% directory is searched for configuration files SYSTEMCONFIGPATH and SYSTEMJUPYTERPATH, which may allow users to create configuration files affecting other users. Only shared Windows systems with multiple users and unprotected %PROGRAMDATA% are affected...

7.3CVSS7.2AI score0.0019EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/06/04 9:00 p.m.•43 views

Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Impact On Windows, the shared %PROGRAMDATA% directory is searched for configuration files SYSTEMCONFIGPATH and SYSTEMJUPYTERPATH, which may allow users to create configuration files affecting other users. Only shared Windows systems with multiple users and unprotected %PROGRAMDATA% are affected...

7.3CVSS7.2AI score0.0019EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
•added 2025/06/04 1:18 p.m.•32 views

CVE-2024-12168

Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used...

8.4CVSS7.6AI score0.00156EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/06/03 5:43 p.m.•12 views

Uncontrolled Search Path Element

Overview Affected versions of this package are vulnerable to Uncontrolled Search Path Element due to the shared %PROGRAMDATA% directory being searched for configuration files. An attacker can introduce unintended behavior and affect other users by creating malicious configuration files in the...

7.3CVSS7AI score0.0019EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/03 12:00 a.m.•3 views

CVE-2025-30167: Uncontrolled Search Path Element

Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared %PROGRAMDATA% directory is searched for configuration files SYSTEMCONFIGPATH and SYSTEMJUPYTERPATH, which may allow users to create configuration...

7.3CVSS7.2AI score0.0019EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/06/02 1:15 p.m.•17 views

CVE-2024-12168

Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used...

7.8CVSS7.6AI score0.00156EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/02 1:15 p.m.•32 views

CVE-2024-12168

Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used...

8.4CVSS0.00156EPSS
SaveExploits0References1
Rows per page
Query Builder