CVE-2023-39254

Dell Update Package DUP, Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin...

CVE-2023-39254

Dell Update Package DUP, Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin...

Design/Logic Flaw

Dell Update Package DUP, Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin...

CVE-2023-39254

Dell Update Package DUP, Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin...

CVE-2023-39254

Dell Update Package (DUP) suffers an Uncontrolled Search Path vulnerability in versions prior to 4.9.10. A local attacker could potentially exploit this to execute arbitrary code with admin privileges. Affected product/component: Dell Update Package (DUP) framework. Root cause: uncontrolled searc...

CVE-2023-39254

Dell Update Package DUP, Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin...

CVE-2024-25552 Wiesemann & Theis: Multiple products prone to unquoted search path

A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product...

Dell Update Package (DUP) Framework Code Issue Vulnerability

Dell Update Package DUP Framework is a framework for updating system components from Dell USA. The product primarily provides installers for drivers, applications, BIOS, and firmware. A code issue vulnerability exists in Dell Update Package DUP Framework that stems from the inclusion of an...

PT-2024-22235 · Intel · Intel Gpa

Name of the Vulnerable Software and Affected Versions: IntelR GPA software versions prior to 2024.1 Description: The issue is related to an uncontrolled search path in some IntelR GPA software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-12786 · Dell · Dell Update Package

Name of the Vulnerable Software and Affected Versions: Dell Update Package DUP versions prior to 4.9.10 Description: The issue allows a malicious user with local access to the system to potentially exploit it and run arbitrary code as admin. This is due to an Uncontrolled Search Path vulnerabilit...

CVE-2023-6132 AVEVA Edge products Uncontrolled Search Path Element

The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL...

CVE-2023-6132 AVEVA Edge products Uncontrolled Search Path Element

The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL...

PT-2024-8901 · Intel · Intel Fpga Sdk For Opencl

Name of the Vulnerable Software and Affected Versions: IntelR FPGA SDK for OpenCLTM affected versions not specified Description: The issue is related to an uncontrolled search path in some IntelR FPGA SDK for OpenCLTM software technology. This may allow an authenticated user to potentially enable...

The vulnerability of the Intel System Support Utility’s scanning function, related to an uncontrolled search path element, allows a malicious actor to escalate their privileges.

The vulnerability of the Intel System Support Utility scanning tool is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Intel Computing Improvement Program’s data collection tool lies in its uncontrolled search path, which allows attackers to escalate their privileges.

The vulnerability of the Intel Computing Improvement Program’s data collection tool is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow attackers to enhance their privileges...

Tosibox Key Service 3.3.0 Local Privilege Escalation

Summary TOSIBOX® SoftKey is a software that enables a secure connection between your computer and one or more TOSIBOX® Nodes, giving you full visibility and control over the network devices connected to the Node. Description The application suffers from an unquoted search path issue impacting the...

Delta Electronics CNCSoft-B DOPSoft

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Delta Electronics Equipment : CNCSoft-B DOPSoft Vulnerability : Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve remote code...

The vulnerability of the Intel Battery Life Diagnostic Tool, related to an uncontrolled search path, allows a hacker to exploit their privileges.

The vulnerability of the Intel Battery Life Diagnostic Tool relates to an uncontrolled search path. Exploiting this vulnerability can allow a hacker to gain increased privileges...

The vulnerability of the toolset and development libraries of the Intel SDK for OpenCL Applications lies in the uncontrolled search path element, which allows attackers to escalate their privileges.

The vulnerability of the toolset and development libraries of the Intel SDK for OpenCL Applications is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the ISPC programming language compiler lies in its uncontrolled search path element, which allows attackers to exploit their privileges.

The vulnerability of the Implicit SPMD Program Compiler ISPC programming language compiler is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...