8977 matches found
Uncontrolled Search Path Element
Overview std/syscall is a Go standard library package std/syscall Affected versions of this package are vulnerable to Uncontrolled Search Path Element. Go Vulnerability Report: via the LoadLibrary process. An attacker can execute arbitrary code by placing a malicious DLL in a location where it wi...
CVE-2022-29650
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...
CVE-2022-31467
A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLLs and then not verifying the signature...
CVE-2022-22139
Uncontrolled search path in the IntelR XTU software before version 7.3.0.33 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-22139
Uncontrolled search path in the IntelR XTU software before version 7.3.0.33 may allow an authenticated user to potentially enable escalation of privilege via local access...
Privilege escalation
Uncontrolled search path in the IntelR XTU software before version 7.3.0.33 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-22139
Uncontrolled search path in the IntelR XTU software before version 7.3.0.33 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-22139
The CVE-2022-22139 entry concerns Intel XTU (Intel® Extreme Tuning Utility) software prior to version 7.3.0.33. The vulnerability is an Uncontrolled search path that may allow an authenticated, local attacker to escalate privileges. Affected products are explicitly Intel XTU before 7.3.0.33. The ...
CVE-2022-28247
Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an uncontrolled search path vulnerability that could lead to local privilege escalation. Exploitation of this issue requires user interaction in that a victim must run the...
CVE-2022-28247
Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an uncontrolled search path vulnerability that could lead to local privilege escalation. Exploitation of this issue requires user interaction in that a victim must run the...
Design/Logic Flaw
Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an uncontrolled search path vulnerability that could lead to local privilege escalation. Exploitation of this issue requires user interaction in that a victim must run the...
CVE-2022-28247 Adobe Acrobat Uninstaller Hard Link Leads To Remote Code Execution
Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an uncontrolled search path vulnerability that could lead to local privilege escalation. Exploitation of this issue requires user interaction in that a victim must run the...
Adobe Creative Cloud < 2.5 Multiple Vulnerabilities (APSB21-41) (macOS)
The version of Adobe Creative Cloud installed on the remote macOS host is prior to 2.5. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-41 advisory. - Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Uncontrolled Searc...
Intel® XTU Advisory
Summary: A potential security vulnerability in the Intel® Extreme Tuning Utility XTU software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-22139 Description: Uncontrolled search path in the...
SonicWall Global VPN Client 代码问题漏洞
Sonicwall Global Vpn Client is a corporate VPN client from Sonicwall USA. SonicWall Global VPN Client suffers from a code issue vulnerability that stems from an untrusted search path at load time. An attacker could exploit the vulnerability to place a malicious file that would escalate privileges...
The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app, related to an uncontrolled search path element, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...
CVE-2022-0192
A DLL search path vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow privilege escalation...
CVE-2022-0192
A DLL search path vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow privilege escalation...