11412 matches found
Power Automate for Desktop Path Traversal Information Disclosure
The vulnerability of the Power Automate for Desktop automation platform for Windows operating systems is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...
CVE-2025-4540
A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows. It has been rated as critical. This issue affects some unknown processing of the component CLodopPrintService. The manipulation leads to unquoted search path. The attack needs to be approached locally. The complexity of an attack...
CVE-2025-43553
Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or...
CVE-2025-43553
Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or...
CVE-2025-21099
Uncontrolled search path for some IntelR Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20079
Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20079
Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20043
Uncontrolled search path for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20015
Uncontrolled search path element for some IntelR Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-47800
Uncontrolled search path for some IntelR Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-47795
CVE-2024-47795 affects Intel® oneAPI DPC++/C++ Compiler (and FPGA Support Package for Windows) prior to 2025.0.0. The vulnerability is an uncontrolled search path that could enable local privilege escalation when an authenticated user gains local access. The issue is supported by multiple feeds (...
CVE-2024-39833
Uncontrolled search path for some IntelR QAT software before version 2.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20079
Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20043
Claimed vulnerability: CVE-2025-20043 concerns an uncontrolled search path in Intel RealSense SDK software prior to version 2.56.2. The underlying issue may enable escalation of privilege via local access for an authenticated user. Affected software/versions: Intel RealSense SDKs before 2.56.2. I...
CVE-2025-43553 Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)
Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or...
CVE-2025-43553
Adobe Substance 3D Modeler v1.21.0 and earlier is affected by an Uncontrolled Search Path Element (CWE-427) that could lead to arbitrary code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). Remediation: update to v1.22.0 or later per APSB25-51; ...
CVE-2025-43553 Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)
Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or...
CVE-2025-0035
Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution...