8976 matches found
CVE-2022-36403
Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2022-36403
The CVE-2022-36403 issue affects Ricoh Device Software Manager installer up to version 2.20.3.0. The root cause is an untrusted search path that may cause insecure loading of DLLs (CWE-427), potentially allowing arbitrary code execution with the installer user’s privileges. Public documents consi...
CVE-2022-36070 Poetry's Untrusted Search Path can lead to Local Code Execution on Windows
Poetry is a dependency manager for Python. To handle dependencies that come from a Git repository, Poetry executes various commands, e.g. git config. These commands are being executed using the executable’s name and not its absolute path. This can lead to the execution of untrusted code due to th...
The vulnerability of the Device Software Manager installer, related to an uncontrolled search path, allows a hacker to load arbitrary files.
The vulnerability of the Device Software Manager installer is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to load arbitrary files...
AVEVA Edge 2020 R2 SP1 and all prior versions
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: AVEVA Equipment: AVEVA Edge 2020 R2 SP1 and all prior versions Vulnerabilities: Insufficient UI Warning of Dangerous Operations, Uncontrolled Search Path Element, Deserialization of Untrusted Data, Improper Restriction of...
CVE-2022-2006 AutomationDirect C-more EA9 HMI Uncontrolled Search Path Element
AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installation process. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73; EA9-T6CL-R versions prior to 6.73; EA9-T7CL versions prior to...
The vulnerability of the software for adjusting Intel XTU performance lies in the uncontrolled search path element, which allows a hacker to increase their privileges.
The vulnerability of the software for adjusting Intel XTU performance is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow a perpetrator to enhance their privileges...
Piwigo 跨站脚本漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A security vulnerability exists in Piwigo version 12.3.0, which stems from vulnerability to cross-site scripting XSS attacks via...
PT-2022-4667 · Unknown · Device Software Manager
Name of the Vulnerable Software and Affected Versions: Device Software Manager versions prior to 2.20.3.0 Description: The issue is related to an untrusted search path vulnerability in the installer of Device Software Manager. This vulnerability can be exploited by an attacker to gain privileges...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in the v1.0 version of Library Management System due to an SQL injection issue in the name parameter of the...
The vulnerability of Adobe Premiere Elements’ video editing software lies in its uncontrolled search path, which allows attackers to exploit their privileges.
The vulnerability of Adobe Premiere Elements’ video editing software is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Outbyte PC Repair program for cleaning temporary files and checking security settings is related to an uncontrolled search path element, allowing attackers to increase their privileges.
The vulnerability of Outbyte PC Repair’s file cleaning and security settings checking function is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...
(Pwn2Own) AVEVA Edge Uncontrolled Search Path Element Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of APP...
(Pwn2Own) AVEVA Edge Uncontrolled Search Path Element Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of APP...
(Pwn2Own) AVEVA Edge Uncontrolled Search Path Element Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of APP...
PT-2022-4346 · Aveva · Aveva Edge
Name of the Vulnerable Software and Affected Versions: AVEVA Edge versions 2020 SP2 Patch 04201.2111.1802.0000 Description: The issue is related to an uncontrolled search path element in the AVEVA Edge SCADA system, which can be exploited to execute arbitrary code or elevate privileges. Remote...
PT-2022-4415 · Outbyte · Outbyte Pc Repair
Name of the Vulnerable Software and Affected Versions: Outbyte PC Repair version 1.7.112.7856 Description: The issue is related to an uncontrolled search path element, which can be exploited to elevate privileges. Specifically, the iertutil.dll is missing, allowing an attacker to use a malicious...
CVE-2022-28696
Uncontrolled search path in the IntelR Distribution for Python before version 2022.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...
