CVE-2023-39201

Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of privilege via local access...

CVE-2023-39201

CVE-2023-39201 affects CleanZoom: untrusted search path may enable a local-privilege-escalation via local access on affected builds prior to 07/24/2023. Root cause is an untrusted search path within CleanZoom; impact is privilege escalation with high confidentiality/integrity/availability impact ...

CVE-2023-39201

Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of privilege via local access...

Zoom Client Code Issue Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A code issue vulnerability exists in Zoom Client that stems from the presence of an untrusted search path that could allow a privileged user to escalate privileges via local access...

PT-2023-26834 · Cleanzoom · Cleanzoom

Name of the Vulnerable Software and Affected Versions: CleanZoom versions prior to file date 07/24/2023 Description: The issue is related to an untrusted search path in CleanZoom, which may allow a privileged user to conduct an escalation of privilege via local access. Recommendations: For versio...

Oracle Linux 5 : python (ELSA-2011-0027)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0027 advisory. - Resolves: CVE-2010-1634 CVE-2010-2089 - Related: CVE-2008-5983 - Rework rgbimgmodule fix for CVE-2008-3143 - Resolves: rhbz644425 CVE-2009-4134...

Python Untrusted Search Path (CVE-2023-41105)

The version of Python installed on the remote Windows host is potentially affected by a vulnerability. Passing a path with null bytes to the os.path.normpath function causes the returned path to be unexpectedly truncated at the first occurrence of null bytes within the path. Note that Nessus has...

Oracle Linux 7 : qt5-qtbase (ELSA-2020-4025)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4025 advisory. 5.9.7-4 - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution Resolves: bz1814740 Resolves: bz181468...

CVE-2023-4736

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...

Advisory ROSA-SA-2023-2229

Software: openssh 7.4p1 OS: rosa-server79 packageevrstring: openssh-7.4p1-23.res7 CVE-ID: CVE-2023-38408 BDU-ID: 2023-03950 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the PKCS11 function of the PKCS11 component of the ssh-agent component of the OpenSSH cryptographic security tool is related to...

Untrusted Search Path in vim/vim

...

SUSE CVE-2023-4736

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...

The vulnerability of the Python library for interacting with git repositories, GitPython, allows a hacker to execute arbitrary commands.

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to the use of an unreliable search path. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

The vulnerability of the Zoom Desktop for Windows video conferencing software for clients relates to the use of an insecure search path, allowing attackers to escalate their privileges.

The vulnerability of the Zoom Desktop for Windows video conferencing software-related software lies in the use of an unreliable search path. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Zoom video conferencing service relates to the use of an unreliable search path, which allows a malicious actor to cause a service failure.

The vulnerability of the Zoom video conferencing service is related to the use of an unreliable search path. Exploiting this vulnerability could allow a hacker to cause a service failure...

CVE-2023-39374

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element...

CVE-2023-39374

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element...

Design/Logic Flaw

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element...

CVE-2023-39374 ForeScout NAC SecureConnector – CWE-427: Uncontrolled Search Path Element

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element...

CVE-2023-39374

CVE-2023-39374 affects ForeScout NAC SecureConnector 11.2. The issue is described as CWE-427: Uncontrolled Search Path Element, attributed to an uncontrolled search path element in the affected software. According to NVD/NVD-derived metrics, the vulnerability is rated CVSS v3.1 base score 7.8 (HI...