PT-2023-26903 · Forescout · Forescout Secureconnector

Name of the Vulnerable Software and Affected Versions: ForeScout NAC SecureConnector version 11.2 Description: The issue is related to an uncontrolled search path element, which is a type of security weakness. This weakness can potentially be exploited, although specific details about real-world...

ForeScout SecureConnector Code Issue Vulnerability

Forescout ForeScout SecureConnector is a network security software from Forescout, Inc. that authenticates machines attempting to join a network. A code issue vulnerability exists in ForeScout SecureConnector version 11.2 that stems from the presence of uncontrolled search path elements...

CVE-2023-4736

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...

CVE-2023-4736

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...

AZL-28629 CVE-2023-4736 affecting package vim for versions less than 9.0.1897-1

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...

CVE-2023-4736

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...

CVE-2023-4736

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...

CVE-2023-4736

CVE-2023-4736 affects vim/vim. Affected: Vim on platforms using Vim before version 9.0.1833 (Alpine) and versions below 9.0.1897-1 (Mariner). Root cause: untrusted search path that could cause loading/execution from untrusted directories. Impact per sources indicates potential for code execution ...

CVE-2023-4736 Untrusted Search Path in vim/vim

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...

CVE-2023-4736 Untrusted Search Path in vim/vim

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...

CVE-2023-4736

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...

PT-2023-5104

Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.1833 Description The issue is related to an untrusted search path in the vim text editor. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations For versions prior to 9.0.1833,...

Vim Code Problem Vulnerability

Vim is a cross-platform text editor. A code issue vulnerability exists in versions prior to Vim 9.0.1833 that stems from an untrusted search path...

CVE-2023-34391

Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulating Configuration File Search Paths. See Instruction Manual Appendix A Cybersecurity tag dated 20230522 for more details. This issue affects...

PTC Kepware KepServerEX (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : PTC Equipment : Kepware KepServerEX Vulnerabilities : Uncontrolled Search Path Element, Improper Input Validation, Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of...

PT-2023-5234 · Kepware +1 · Kepserverex +1

Name of the Vulnerable Software and Affected Versions: KEPServerEX versions affected versions not specified ThingWorx Kepware Server versions affected versions not specified Description: The issue is related to an uncontrolled search path element, which could allow a locally authenticated adversa...

The vulnerability of the Qt library, related to the use of an unreliable search path, allows attackers to escalate their privileges within the system.

The vulnerability of the Qt library is related to the use of an unreliable search path. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

GitPython untrusted search path on Windows systems leading to arbitrary code execution

Summary When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment see big warning in https://docs.python.org/3/library/subprocess.htmlpopen-constructor. GitPython defaults to use the git command, if a user runs GitPython from a repo has a...

GHSA-WFM5-V35H-VWF4 GitPython untrusted search path on Windows systems leading to arbitrary code execution

Summary When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment see big warning in https://docs.python.org/3/library/subprocess.htmlpopen-constructor. GitPython defaults to use the git command, if a user runs GitPython from a repo has a...

Advisory ROSA-SA-2023-2222

Software: openssh 8.0p1 OS: ROSA Virtualization 2.1 packageevrstring: openssh-8.0p1-19.rv3.src.rpm CVE-ID: CVE-2023-38408 BDU-ID: 2023-03950 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the PKCS11 function of the PKCS11 component of the ssh-agent component of the OpenSSH cryptographic security to...