CVE-2022-27187

Uncontrolled search path element in the IntelR Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-30548

Uncontrolled search path element in the IntelR Glorp software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26086

Uncontrolled search path element in the PresentMon software maintained by IntelR before version 1.7.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26086

CVE-2022-26086 affects Intel’s PresentMon software prior to version 1.7.1. The flaw is an uncontrolled search path element that could allow an authenticated user with local access to escalate privileges. The Red Hat and Intel advisory entries corroborate that the affected product is PresentMon an...

PT-2022-17639 · Intel · Intel Vtune Profiler

Name of the Vulnerable Software and Affected Versions: IntelR VTuneTM Profiler versions prior to 2022.2.0 Description: The issue is related to an uncontrolled search path in the IntelR VTuneTM Profiler software. This may allow an authenticated user to potentially enable escalation of privilege vi...

Intel PresentMon 代码问题漏洞

Intel PresentMon is a tool from Intel Corporation USA. It is used to capture and analyze ETW events related to exchange chain presentations on Windows. A security vulnerability exists in Intel PresentMon versions prior to 1.7.1 that stems from an uncontrolled search path element that could allow ...

PT-2022-17658 · Unknown · Presentmon

Name of the Vulnerable Software and Affected Versions: PresentMon versions prior to 1.7.1 Description: The issue is related to an uncontrolled search path element in the PresentMon software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Glorp 代码问题漏洞

Intel Glorp is a U.S. Intel Intel application. Intel Glorp version 1.0.0 contains an elevation of privilege vulnerability, which originates from an uncontrolled search path element in the IntelR Glorp software and can be exploited by attackers for local elevation of privilege...

Intel Quartus Prime 代码问题漏洞

Intel Quartus Prime is a programmable logic device tool for the design and development of Fpga from Intel Corporation. A security vulnerability exists in Intel Quartus Prime Standard and Intel Quartus Prime Pro that originates from an uncontrolled search path element that could allow an...

PT-2022-18542 · Intel · Intel Advanced Link Analyzer Standard +1

Name of the Vulnerable Software and Affected Versions: IntelR Advanced Link Analyzer Pro versions prior to 22.2 IntelR Advanced Link Analyzer Standard edition software versions prior to 22.1.1 STD Description: The issue is related to an uncontrolled search path element, which may allow an...

PT-2022-23340 · Intel · Intel Nuc Kit Wireless Adapter Drivers

Name of the Vulnerable Software and Affected Versions: Intel NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue is related to an uncontrolled search path in the installer software for some Intel NUC Kit Wireless Adapter drivers. This may allow an...

PT-2022-20171 · Intel · Intel Glorp

Name of the Vulnerable Software and Affected Versions: IntelR Glorp software affected versions not specified Description: The issue is related to an uncontrolled search path element in the IntelR Glorp software, which may allow an authenticated user to potentially enable escalation of privilege v...

Intel VTune Profiler 代码问题漏洞

Intel VTune Profiler is a performance testing tool for optimized software from Intel USA. The software performs performance testing of IoT embedded applications, media software, Java applications, and high-performance computing applications. A security vulnerability exists in Intel VTune Profiler...

PT-2022-18276 · Intel · Intel Quartus Prime Standard

Name of the Vulnerable Software and Affected Versions: IntelR Quartus Prime Standard edition software versions prior to 21.1 Patch 0.02std Description: The issue is related to an uncontrolled search path element, which may allow an authenticated user to potentially enable escalation of privilege...

CVE-2022-43310

An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path...

CVE-2022-31253

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior ...

CVE-2022-31253

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior ...

Design/Logic Flaw

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior ...

CVE-2022-31253 openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior ...

CVE-2022-31253 openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior ...