CVE-2019-16861

Code42 Server up to version 7.0.2 on Windows is affected by an Untrusted Search Path vulnerability. A non-administrative attacker on the local server could create or modify a DLL that the Code42 service loads at runtime, potentially executing arbitrary code with elevated privileges on the local s...

CVE-2019-16861

Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local server could create or modify a dynamic-link library DLL. The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated...

CVE-2019-16860

Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could create or modify a dynamic-link library DLL. The Code42 service could then load it at runtime, and potentially execute arbitrary code at an...

CVE-2019-16860

CVE-2019-16860 affects Code42 app (Windows) up to v7.0.2. An Untrusted Search Path could let a non-admin local attacker create/modify a DLL that the Code42 service loads at runtime, potentially enabling arbitrary code execution with elevated privileges. Red Hat and CNVD entries confirm the same d...

DLL Search Path and Symbolic Link Vulnerabilities - Lenovo Support US

No description provided...

Rockwellautomation Rslinx Unquoted Search Path or Element

An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation...

CVE-2019-16647

Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows...

CVE-2019-16647

Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows...

Design/Logic Flaw

Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows...

CVE-2019-16647

The CVE-2019-16647 entry relates to an Unquoted Search Path vulnerability in Maxthon for Windows (versions 5.1.0–5.2.7). Affected component is the browser executable; root cause is an unquoted search path. CVSS data from NVD indicates a HIGH impact across confidentiality, integrity, and availabil...

CVE-2019-16647

Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows...

CVE-2019-16647

Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

ICSA-19-295-01_Schneider Electric ProClima

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: Proclima Vulnerabilities: Code Injection, Improper Restriction of Operations within the Bounds of a Memory Buffer, Uncontrolled Search Path Element 2. RISK EVALUATION...

CVE-2019-17664

NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working directory is set to this path. Then, when launching the Python interpreter via the "Ghidra Codebrowser Window Python" option, Ghidra will try to execute the cmd.exe...

CVE-2019-17664

NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working directory is set to this path. Then, when launching the Python interpreter via the "Ghidra Codebrowser Window Python" option, Ghidra will try to execute the cmd.exe...

Design/Logic Flaw

NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working directory is set to this path. Then, when launching the Python interpreter via the "Ghidra Codebrowser Window Python" option, Ghidra will try to execute the cmd.exe...

CVE-2019-17664

CVE-2019-17664 affects NSA Ghidra up to 9.0.4, where the Java process working directory is set to the user-provided path. When launching the Python interpreter from Ghidra CodeBrowser > Window > Python, Ghidra attempts to execute cmd.exe from that working directory due to a potentially untr...

National Instruments Circuit Design Suite 14.0 - Local Privilege Escalation

National Instruments Circuit Design Suite 14.0 - Local Privilege Escalation Exploit Title: National Instruments Circuit Design Suite 14.0 - Local Privilege Escalation Discovery Date: 2019-10-10 Exploit Author: Ivan Marmolejo Vendor Homepage: http://www.ni.com/en-us.html Software Link:...

National Instruments Circuit Design Suite 14.0 - Local Privilege Escalation

Exploit Title: National Instruments Circuit Design Suite 14.0 - Local Privilege Escalation Discovery Date: 2019-10-10 Exploit Author: Ivan Marmolejo Vendor Homepage: http://www.ni.com/en-us.html Software Link: https://www.ni.com/en-us/shop/select/circuit-design-suite Version: 14.0 Vulnerability...

National Instruments Circuit Design Suite 14.0 - Local Privilege Escalation Vulnerability

Exploit Title: National Instruments Circuit Design Suite 14.0 - Local Privilege Escalation Exploit Author: Ivan Marmolejo Vendor Homepage: http://www.ni.com/en-us.html Software Link: https://www.ni.com/en-us/shop/select/circuit-design-suite Version: 14.0 Vulnerability Type: Local Tested on: Windo...