Ashlar Vellum Xenon 安全漏洞

Ashlar Vellum Xenon is a CAD modeling software from Ashlar, Inc. A security vulnerability exists in Ashlar Vellum Xenon that stems from the presence of an uncontrolled search path element remote code execution vulnerability that could allow a remote attacker to execute arbitrary code on an affect...

CVE-2024-23774

An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerability exists in the KSchedulerSvc.exe and AMPTools.exe components. This allows local attackers to execute code of their choice with NT Authority\SYSTEM privileges...

CVE-2024-23774

An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerability exists in the KSchedulerSvc.exe and AMPTools.exe components. This allows local attackers to execute code of their choice with NT Authority\SYSTEM privileges...

CVE-2024-23774

An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerability exists in the KSchedulerSvc.exe and AMPTools.exe components. This allows local attackers to execute code of their choice with NT Authority\SYSTEM privileges...

Quest KACE Agent 安全漏洞

Quest Software Quest KACE Systems Management Appliance is an IT asset management appliance from Quest Software, USA. A security vulnerability exists in Quest KACE Agent versions 12.0.38 and 13.1.23.0 that stems from the presence of an unquoted search path vulnerability that allows a local attacke...

PT-2024-20078 · Quest · Quest Kace Agent For Windows

Name of the Vulnerable Software and Affected Versions: Quest KACE Agent for Windows versions 12.0.38 through 13.1.23.0 Description: An unquoted Windows search path issue exists in the KSchedulerSvc.exe and AMPTools.exe components, allowing local attackers to execute code of their choice with NT...

CVE-2024-34010

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 37758, Acronis Cyber Protect 16 Windows before build 38690, Acronis True Image Windows before build 42386, Acronis True Image OEM Windo...

CVE-2024-34010

CVE-2024-34010 describes a local privilege escalation in Acronis software due to an unquoted search path. Affected Windows products and builds include: Acronis Cyber Protect Cloud Agent before 37758, Acronis Cyber Protect 16 before 38690, and Acronis True Image before 42386. The root cause is an ...

Acronis Cyber Protect Cloud Agent 代码问题漏洞

Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A code issue vulnerability exists in Acronis Cyber Protect Cloud Agent prior to version 37758, which stems from an unquoted search path vulnerability in the application that results in local elevation of privilege...

RHEL 7 : CloudForms 4.6.6 (RHSA-2018:3816)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3816 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual...

CVE-2024-33673

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search path...

PT-2024-25431 · Veritas · Veritas Backup Exec

Name of the Vulnerable Software and Affected Versions: Veritas Backup Exec versions prior to 22.2 HotFix 917391 Description: An issue was discovered that allows for DLL Hijacking in the Windows DLL Search path due to improper access controls. Recommendations: For versions prior to 22.2 HotFix...

Veritas Technologies Backup Exec 安全漏洞

Veritas Technologies Backup Exec is a powerful suite of data backup recovery tools from Veritas Technologies, USA. With a web-based management console and an intuitive graphical user interface with easy-to-use wizards, the software simplifies the installation process and improves manageability...

The vulnerability of the KEYENCE CORPORATION KV STUDIO programming software for programmable logic controllers lies in its uncontrolled search path, which allows a hacker to execute arbitrary code.

The vulnerability of the KEYENCE CORPORATION KV STUDIO programming software for programmable logic controllers is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

Logitech MEVO WEBCAM APP 安全漏洞

Logitech MEVO WEBCAM APP is a webcam application from Logitech Switzerland. A security vulnerability exists in Logitech MEVO WEBCAM APP, which stems from a vulnerability in the presence of an un-referenced search path or element, which allows local execution of arbitrary code...

PT-2024-28803 · Logitech · Logitech Mevo Webcam App

Name of the Vulnerable Software and Affected Versions: Logitech MEVO WEBCAM APP affected versions not specified Description: The issue concerns an Unquoted Search Path or Element vulnerability in the Logitech MEVO WEBCAM APP on Windows, allowing for Local Execution of Code. Recommendations: At th...

PT-2024-5604 · Dell · Dell Peripheral Manager

Name of the Vulnerable Software and Affected Versions: Dell Peripheral Manager versions prior to 1.7.6 Description: The issue is related to an uncontrolled search path element in the software. This could allow an attacker to potentially exploit the vulnerability through preloading malicious DLL o...

The vulnerability of Intel Wake Up Latency Tracer software lies in its use of an unreliable search path, allowing a hacker to execute arbitrary code or enhance their privileges.

The vulnerability of Intel Wake Up Latency Tracer software is related to the use of an unreliable search path. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or gain increased privileges...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s kernel is related to the use of an insecure search path. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2024-28099

VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...