Lucene search
+L

11412 matches found

Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•19 views

PT-2025-15841 · National Instruments · Ni Labview

Name of the Vulnerable Software and Affected Versions: NI LabVIEW versions prior to 2025 Q1 Description: The issue is related to a DLL hijacking vulnerability due to an uncontrolled search path in NI LabVIEW, which may result in arbitrary code execution. Successful exploitation requires an attack...

7.8CVSS6.6AI score0.00194EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/04/09 12:00 a.m.•20 views

NI LabVIEW (National Instruments LabVIEW) security vulnerabilities

NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW National Instruments LabVIEW version 2025 Q1 and earlier, which stems from an uncontrolled search path that could lead to the execution o...

7.8CVSS6.3AI score0.00194EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•7 views

CVE-2025-2630: Uncontrolled Search Path Element

There is a DLL hijacking vulnerability due to an uncontrolled search path that exists in NI LabVIEW. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to insert a malicious DLL into the uncontrolled search path. This vulnerability affects NI...

7.8CVSS6.6AI score0.00194EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/09 12:00 a.m.•20 views

NI LabVIEW (National Instruments LabVIEW) security vulnerabilities

NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW National Instruments LabVIEW version 2025 Q1 and earlier, which stems from an uncontrolled search path that could lead to the execution o...

7.8CVSS6.3AI score0.00194EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•8 views

CVE-2025-2629: Uncontrolled Search Path Element

There is a DLL hijacking vulnerability due to an uncontrolled search path that exists in NI LabVIEW when loading NI Error Reporting. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to insert a malicious DLL into the uncontrolled search path...

7.8CVSS6.6AI score0.00194EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/09 12:00 a.m.•20 views

Microsoft Visual Studio Privilege Escalation

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.3CVSS8.1AI score0.0095EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/09 12:00 a.m.•26 views

VSTA Uncontrolled Search Path Privilege Escalation

The vulnerability of the toolset for configuring Microsoft Visual Studio Tools for Applications VSTA is related to an uncontrolled search path element. Exploiting this vulnerability could allow an attacker to increase their privileges...

7.3CVSS8.1AI score0.00752EPSS
SaveExploits0References2Affected Software3
osv_cve
osv_cve
•added 2025/04/08 6:16 p.m.•25 views

CVE-2025-27743

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally...

7.8CVSS7.5AI score0.00883EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/08 6:16 p.m.•39 views

CVE-2025-27743

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00883EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/08 5:23 p.m.•138 views

CVE-2025-27743

CVE-2025-27743 — Microsoft System Center Elevation of Privilege . A local privilege-elevation vulnerability arises from an untrusted search path in System Center (DLL hijacking). This can enable an authorized local attacker to obtain higher privileges. Public details confirm the impact and that e...

7.8CVSS7.5AI score0.00883EPSS
SaveExploits0References1Affected Software5
Microsoft CVE
Microsoft CVE
•added 2025/04/08 7:00 a.m.•28 views

Microsoft System Center Elevation of Privilege Vulnerability

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally...

7.8CVSS7.7AI score0.00883EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•1 views

PT-2025-15566

Name of the Vulnerable Software and Affected Versions: System Center affected versions not specified Description: The issue concerns an untrusted search path in System Center, allowing an authorized attacker to elevate privileges locally. This means an attacker with existing authorization could...

7.8CVSS7.4AI score0.00883EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•2 views

CVE-2025-27743: Untrusted Search Path

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally...

7.8CVSS7.5AI score0.00883EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•4 views

CVE-2025-29802: Uncontrolled Search Path Element

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...

7.3CVSS7.4AI score0.0095EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/01 1:51 a.m.•53 views

CVE-2025-30672 Mite for Perl generates code with an untrusted search path vulnerability

Mite for Perl before 0.013000 generates code with the current working directory '.' added to the @INC path similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code...

0.00431EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/04/01 1:51 a.m.•13 views

CVE-2025-30672 Mite for Perl generates code with an untrusted search path vulnerability

Mite for Perl before 0.013000 generates code with the current working directory '.' added to the @INC path similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code...

6.1AI score0.00431EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•8 views

CVE-2025-30672: Uncontrolled Search Path Element

Mite for Perl before 0.013000 generates code with the current working directory '.' added to the @INC path similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code...

6.5CVSS6.1AI score0.00431EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•8 views

CVE-2025-3051: Uncontrolled Search Path Element

Linux::Statm::Tiny for Perl before 0.0701 allows untrusted code from the current working directory '.' to be loaded similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary cod...

6.5CVSS5.9AI score0.00428EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•6 views

CVE-2025-30673: Uncontrolled Search Path Element

Sub::HandlesVia for Perl before 0.050002 allows untrusted code from the current working directory '.' to be loaded similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code...

6.5CVSS5.9AI score0.00428EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/03/27 12:37 a.m.•13 views

SUSE CVE-2009-0848

Untrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to execute arbitrary code via a Trojan horse GTK module in an unspecified "relative search path."...

4.4CVSS7.6AI score0.00456EPSS
SaveExploits0References3
Rows per page
Query Builder