Intel® OFU Software Advisory

Summary: Potential security vulnerabilities in some Intel® One Boot Flash Update OFU software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32204 Description: Improper access control in so...

Ashlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Argon. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PT-2023-23940 · Intel · Intel Nuc Kit Nuc6I7Kyk Thunderbolt 3 Firmware Update Tool

Name of the Vulnerable Software and Affected Versions: IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update Tool versions prior to 46 Description: The issue is related to an uncontrolled search path in the installation software of the IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update...

PT-2023-23937 · Intel · Hdmi Firmware Update Tool

Name of the Vulnerable Software and Affected Versions: IntelR NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software versions prior to 1.79.1.1 Description: The issue is related to an unquoted search path in the HDMI firmware update tool software, which may allow an authenticate...

PT-2023-6936 · Zoom · Zoom Rooms Client For Windows +1

Name of the Vulnerable Software and Affected Versions: Zoom Rooms Client for Windows affected versions not specified Zoom VDI Client affected versions not specified Description: The issue is related to an untrusted search path in the software, which may allow a privileged user to conduct a denial...

Ashlar-Vellum Cobalt Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

PT-2023-7194 · Fortinet · Forticlient

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClientWindows version 7.0.9 Description: The issue is related to an untrusted search path vulnerability that allows an attacker to perform a DLL Hijack attack. This can be achieved by placing a malicious OpenSSL engine library i...

PT-2023-22179 · Intel · Intel Ofu

Name of the Vulnerable Software and Affected Versions: IntelR OFU software versions prior to 14.1.31 Description: The issue is related to an uncontrolled search path in some IntelR OFU software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

The vulnerability of NVIDIA Virtual GPU driver involves an uncontrolled search path element, which allows attackers to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause service failures.

The vulnerability of NVIDIA Virtual GPU driver is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, increase their privileges, execute arbitrary code, or cause service failures...

Exploit for Unquoted Search Path or Element in Openbsd Openssh

OpenSSH Vulnerability - CVE-2023-38408 :books: Introduct...

The vulnerability of the software for updating Lenovo System Update lies in the use of an unreliable search path, allowing a hacker to execute arbitrary code with elevated privileges.

The vulnerability of the Lenovo System Update software-related update tool is related to the use of an unreliable search path. Exploiting this vulnerability allows a perpetrator to execute arbitrary code with elevated privileges...

CVE-2023-4632

An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges...

CVE-2023-4632

An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges...

Path traversal

An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges...

CVE-2023-4632

An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges...

CVE-2023-0898 Uncontrolled Search Path Element in GE MiCOM S1 Agile

General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application...

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution (CVE-2023-38408)

The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. Code in /usr/lib is not necessarily safe for loading into ssh-agent. NOTE: this issue exists because o...

Zoom Client for Meetings < 5.14.5 Vulnerability (ZSB-23026)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-23026 advisory. - Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated use...

CVE-2023-31016

NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering...

CVE-2023-31016

NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering...