CVE-2021-21055

CVE-2021-21055 affects Adobe Dreamweaver 21.0 and earlier and 20.2 and earlier and is caused by an untrusted search path vulnerability that could allow information disclosure if an attacker with physical access replaces Dreamweaver’s configuration files or dynamic libraries. Impact is information...

Microsoft Edge Code Issue Vulnerability

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A code issue vulnerability exists in Edge, which contains an untrusted search path vulnerability that allows an attacker to load a malicious DLL library from its current directory...

Rockwell Automation DriveTools SP and Drives AOP

1. EXECUTIVE SUMMARY CVSS v3 7.5 Vendor : Rockwell Automation Equipment : DriveTools SP and Drives AOP Vulnerability : Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability may result in privilege escalation and total loss of device confidentiality,...

Adobe Dreamweaver Information Disclosure Vulnerability (APSB21-13) - Windows

Adobe Dreamweaver is prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

F5 Networks BIG-IP : BIG-IP APM CTU vulnerability (K29282483)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.3.6 / 14.1.4 / 15.1.3.1 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K29282483 advisory. - In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and...

Adobe Dreamweaver Uncontrolled Search Path Element Vulnerability

Adobe Dreamweaver is the United States of America Odooby Adobe company a Windows-based platform to support visual HTML editing and code editing software. An uncontrolled search path element vulnerability exists in Adobe Dreamweaver. An attacker could exploit this vulnerability to cause an...

The vulnerability of Adobe Illustrator’s graphic editor lies in its uncontrolled search path, which allows attackers to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to an uncontrolled element of the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

Intel Optane(TM) DC Security Vulnerability

Intel OptaneTM DC is a software application from Intel Corporation USA. It provides a new storage technology. A security vulnerability exists in Intel OptaneTM DC Persistent Memory installer for Windows, which arises from an uncontrolled search path in the installer that could allow an...

The vulnerability of the Adobe InCopy text creation and editing software lies in its uncontrolled search path, which allows a hacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

The vulnerability of the Adobe Lightroom Classic graphic editor lies in its uncontrolled search path, which allows a hacker to execute arbitrary code.

The vulnerability of Adobe Lightroom Classic’s graphic editor is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to execute arbitrary code within the context of the current user...

The vulnerability of the cloud-based video editing, annotation, and format conversion application Adobe Prelude lies in its uncontrolled search path, allowing attackers to execute arbitrary code within the context of the current user.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code in the context of the current...

CentOS 8 : postgresql:12 (CESA-2020:5620)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5620 advisory. - postgresql: Uncontrolled search path element in logical replication CVE-2020-14349 - postgresql: Uncontrolled search path element in CREATE EXTENSION...

CVE-2020-35145

Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a DLL hijacking vulnerability in multiple components, aka an Untrusted Search Path issue...

CVE-2020-35145

Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a DLL hijacking vulnerability in multiple components, aka an Untrusted Search Path issue...

CVE-2020-35145

CVE-2020-35145 affects Acronis True Image for Windows prior to 2021 Update 3, with a DLL hijacking (Untrusted Search Path) local privilege escalation in multiple components. Root cause: untrusted search path; impact: local privilege escalation. Affected versions are prior to 2021 Update 3. Mitiga...

Security Bulletin:  InstallAnywhere Vulnerability affects Daeja ViewONE Professional, Standard & Virtual (CVE-2016-4560)

Summary Flexera InstallAnywhere has a security vulnerability that could be exploited in the Daeja ViewONE installation Vulnerability Details CVEID: CVE-2016-4560 DESCRIPTION: Flexera InstallAnywhere could allow a local attacker to gain elevated privileges on the system, caused by an untrusted...

The vulnerabilities of the Network Access Manager and Web Security Agent components of the Cisco AnyConnect Secure Mobility Client cryptographic security tool for Windows allow a perpetrator to execute arbitrary code.

The vulnerability of the Network Access Manager and Web Security Agent components of the Cisco AnyConnect Secure Mobility Client cryptographic security solution for Windows is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a attacker to execute...

The vulnerability of the Cisco Proximity Desktop display software lies in its uncontrolled search path element, which allows a hacker to execute arbitrary code.

The vulnerability of the Cisco Proximity Desktop display software is related to an uncontrolled search path element. Exploiting this vulnerability could allow a attacker to execute arbitrary code during the loading of certain DLL libraries...

Selea CarPlateServer 4.0.1.6 Local Privilege Escalation

Selea CarPlateServer CPS v4.0.1.6 Local Privilege Escalation Vendor: Selea s.r.l. Product web page: https://www.selea.com Affected version: 4.0.1.6210120 4.013201105 3.100200225 3.005191206 3.005191112 Summary: Our CPS Car Plate Server software is an advanced solution that can be installed on...

Selea CarPlateServer (CPS) 4.0.1.6 - Local Privilege Escalation

Exploit Title: Selea CarPlateServer CPS 4.0.1.6 - Local Privilege Escalation Date: 08.11.2020 Exploit Author: LiquidWorm Vendor Homepage: https://www.selea.com Selea CarPlateServer CPS v4.0.1.6 Local Privilege Escalation Vendor: Selea s.r.l. Product web page: https://www.selea.com Affected versio...