8945 matches found
Fortinet FortiClient Online Installer DLL Hijacking (FG-IR-24-205)
The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-205 advisory. - A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12...
PT-2024-8816 · Intel · Intel Acat
Name of the Vulnerable Software and Affected Versions: IntelR ACAT software versions prior to 3.11.0 Description: The issue is related to an uncontrolled search path in the Intel Assistive Context-Aware Toolkit ACAT for Windows, which may allow an authenticated user to potentially enable escalati...
Fortinet FortiClientWindows 代码问题漏洞
Fortinet FortiClientWindows is a Windows-based mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in...
PT-2024-8715 · Siemens · Solid Edge
Name of the Vulnerable Software and Affected Versions: Solid Edge SE2024 versions prior to V224.0 Update 9 Description: A DLL hijacking issue has been identified, which could allow an attacker to execute arbitrary code by placing a crafted DLL file on the system. The vulnerability is related to a...
PT-2024-8834 · Intel · Intel Oneapi Dpc++/C++ Compiler
Name of the Vulnerable Software and Affected Versions: IntelR oneAPI DPC++/C++ Compiler versions prior to 2024.2 Description: The issue is related to an uncontrolled search path in the IntelR oneAPI DPC++/C++ Compiler, which may allow an authenticated user to potentially enable escalation of...
PT-2024-8842 · Intel · Intel(R) Fortran Compiler Classic
Name of the Vulnerable Software and Affected Versions: IntelR Fortran Compiler Classic versions prior to 2021.13 Description: The issue is related to an uncontrolled search path in some IntelR Fortran Compiler Classic software, which may allow an authenticated user to potentially enable escalatio...
PT-2024-8843 · Intel · Oneapi Math Kernel Library
Name of the Vulnerable Software and Affected Versions: oneAPI Math Kernel Library versions prior to 2024.2 Description: The issue is related to an uncontrolled search path in the oneAPI Math Kernel Library, which may allow an authenticated user to potentially enable escalation of privilege via...
PT-2024-8686 · Intel · Intel Binary Configuration Tool
Name of the Vulnerable Software and Affected Versions: Intel Binary Configuration Tool versions prior to 3.4.5 Description: The issue is related to an uncontrolled search path element in the Intel Binary Configuration Tool. Exploitation of this issue may allow an attacker to potentially enable...
PT-2024-8784 · Intel · Intel Rendering Toolkit
Name of the Vulnerable Software and Affected Versions: Intel Rendering Toolkit versions prior to 2024.1.0 Description: The issue is related to an uncontrolled search path in some Intel Rendering Toolkit software. This may allow an authenticated user to potentially enable escalation of privilege v...
PT-2024-8817 · Intel · Intel Quartus Prime Pro Edition +1
Name of the Vulnerable Software and Affected Versions: Intel High Level Synthesis Compiler for Intel Quartus Prime Pro Edition Software versions prior to 24.1 Description: The issue is related to an uncontrolled search path element in the Intel High Level Synthesis HLS Compiler, part of the Intel...
PHPGurukul Online Marriage Registration System 安全漏洞
PHPGurukul Online Marriage Registration System is a website builder from PHPGurukul that supports online marriage registration. A security vulnerability exists in PHPGurukul Online Marriage Registration System v1.0, which originates from a Reflective Cross-Site Scripting XSS vulnerability in the...
The vulnerability of the Intel Raid Web Console web console involves an uncontrolled search path element, which allows attackers to escalate their privileges.
The vulnerability of the Intel Raid Web Console web console relates to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the python3.dll library, which is an interpreter for the Python programming language, allows attackers to compromise the integrity and accessibility of protected information.
The vulnerability of the python3.dll library, which is responsible for interpreting Python programming language code, is related to the use of an invalid search path during the loading of the vulnerable file after the PySetPath function is called. Exploiting this vulnerability could allow a...
CVE-2024-7995
A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design application. Exploitation of this vulnerability may lead to code execution...
CVE-2024-7995 Autodesk VRED Design Privilege Escalation Vulnerability
A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design application. Exploitation of this vulnerability may lead to code execution...
CVE-2024-7995 Autodesk VRED Design Privilege Escalation Vulnerability
A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design application. Exploitation of this vulnerability may lead to code execution...
CVE-2024-7995
Autodesk VRED Design is affected by CVE-2024-7995, where a maliciously crafted binary file downloaded could exploit an untrusted search path to escalate privileges to NT AUTHORITY/SYSTEM, potentially enabling code execution. The condition is triggered by handling a downloaded binary within the VR...
PT-2024-38744 · Autodesk · Vred Design
Name of the Vulnerable Software and Affected Versions: VRED Design affected versions not specified Description: A maliciously crafted binary file, when downloaded, could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design...
Autodesk VRED Design 安全漏洞
Autodesk VRED Design is a professional 3D visualization software from Autodesk, Inc. A security vulnerability exists in Autodesk VRED Design version 2025, which stems from the use of an untrusted search path, where a maliciously crafted binary file may lead to privilege escalation during download...
