CVE-2023-38408

The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. Code in /usr/lib is not necessarily safe for loading into ssh-agent. NOTE: this issue exists because o...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection. The PKCS11 feature in ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. Note: This issue exists...

CVE-2023-36536

Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36536

Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36536

Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36536

Zoom Rooms for Windows contains a vulnerability prior to version 5.15.0 where an untrusted search path in the installer could enable privilege escalation for an authenticated local user. The issue is documented across CVE-2023-36536 sources (NVD/NVD entry, CVE listing, and related summaries). Aff...

CVE-2023-3438

An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service mvagtsce.exe. The misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privilege escalation and stop antimalwar...

CVE-2023-3438

CVE-2023-3438 describes an unquoted Windows search path vulnerability in Trellix MOVE, affecting version 4.10.x and earlier. The issue arises from the mvagtsce.exe service binary, where an unquoted service path could be exploited by a local user to insert arbitrary code, enabling privilege escala...

PT-2023-24851 · Move · Move

Name of the Vulnerable Software and Affected Versions: MOVE versions 4.10.x and earlier Description: An unquoted Windows search path vulnerability existed in the Windows install service, allowing an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privileg...

CVE-2023-34144

An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target syst...

CVE-2023-34145

An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target syst...

CVE-2023-34144

An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target syst...

Design/Logic Flaw

An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target syst...

CVE-2023-34145

An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target syst...

CVE-2023-34145

The connected Nessus plugin for Trend Micro Apex One (000293322) confirms CVE-2023-34145 affects Trend Micro Apex One and Apex One as a Service, due to an untrusted search path vulnerability that allows local privilege escalation. Exploitation requires the attacker to already run low-privilege co...

CVE-2023-34145

An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target syst...

The vulnerability of the ApexOne Security Agent for antivirus software from Trend Micro, Apex One and Apex One as a Service, allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the ApexOne Security Agent in antivirus software programs Trend Micro Apex One and Apex One as a Service is related to the use of an insecure search path. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

The vulnerability of the ApexOne Security Agent for antivirus software from Trend Micro, Apex One and Apex One as a Service, allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the ApexOne Security Agent in antivirus software programs Trend Micro Apex One and Apex One as a Service is related to the use of an insecure search path. Exploiting this vulnerability allows a attacker to enhance their privileges and execute arbitrary code...

postgresql: schema_element defeats protective search_path changes

A flaw was found in PostgreSQL. Certain database calls could permit an attacker with elevated database-level privileges to execute arbitrary code...

Synology Router Manager (SRM) 1.2.x, 1.3.x Uncontrolled Search Path Element Privilege Escalation Vulnerability (Synology-SA-23:06)

Synology Router Manager SRM is prone to an uncontrolled search path element privilege escalation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...