Lucene search
+L

11334 matches found

Positive Technologies
Positive Technologies
•added 2026/09/21 12:00 a.m.•7 views

PT-2026-96237

Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges...

7.8CVSS6AI score0.00191EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/21 12:00 a.m.•14 views

CVE-2026-81469: Unquoted Search Path or Element

Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges...

7.8CVSS6AI score0.00191EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/09/18 12:00 a.m.•13 views

The vulnerability of the Adobe Photoshop graphic editor lies in its uncontrolled search path, which allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

8.6CVSS7.3AI score0.00293EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•9 views

CVE-2026-57223: Unquoted Search Path or Element

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the Windows service installation and parameter-update logic in src/win32-service.c can pass an unquoted service ImagePath to CreateServiceA. When Surica...

7CVSS6AI score0.00153EPSS
SaveExploits0References8
NVD
NVD
•added 2026/09/17 4:17 p.m.•26 views

CVE-2026-56795

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

8.2CVSS0.00188EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/17 3:24 p.m.•41 views

CVE-2026-56795

Dell Server Update Utility versions prior to 26.07.01 are affected by an Uncontrolled Search Path Element vulnerability. A low-privileged attacker with local access could exploit this to achieve code execution , with a CVSS 3.1 score of 8.2 (HIGH) and a changed scope impacting confidentiality, in...

8.2CVSS5.9AI score0.00188EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/17 3:24 p.m.•16 views

CVE-2026-56795

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

8.2CVSS5.9AI score0.00188EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/17 3:24 p.m.•35 views

CVE-2026-56795

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

8.2CVSS0.00188EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 3:24 p.m.•21 views

EUVD-2026-81691

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

8.2CVSS5.9AI score0.00188EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/17 2:16 a.m.•28 views

CVE-2026-92838

A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location. If...

7.8CVSS0.00198EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/17 1:50 a.m.•48 views

CVE-2026-92838

A DLL hijacking vulnerability in the GeoVision GV-Remote E-Map desktop application allows a local attacker to place a malicious DLL in a directory searched before the legitimate library location, achieving arbitrary code execution in the context of the GV-Remote E-Map process. Exploitation requir...

7.8CVSS6.4AI score0.00198EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/17 1:50 a.m.•17 views

CVE-2026-92838 GeoVision GV-Remote E-Map dll hijacking vulnerability

A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location. If...

7.8CVSS6.4AI score0.00198EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/17 1:50 a.m.•27 views

EUVD-2026-81314

A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location. If...

7.8CVSS7.7AI score0.00334EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•7 views

CVE-2026-56795: Uncontrolled Search Path Element

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

8.2CVSS5.9AI score0.00188EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•8 views

PT-2026-94378

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

8.2CVSS6AI score0.00188EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/09/16 1:54 p.m.•21 views

OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

Summary The OpenTelemetry.Resources.Host NuGet package is affected by an untrusted search path vulnerability on macOS. The host.id resource attribute detector launches the sh and ioreg executables by bare name rather than by absolute path, so both are resolved through the PATH environment variabl...

7CVSS6.2AI score0.00177EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2026/09/16 1:54 p.m.•15 views

EUVD-2026-74187

OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS...

7CVSS6.4AI score0.00177EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•8 views

CVE-2026-92587: Untrusted Search Path

n8n is a workflow automation platform. In versions before 1.123.76, 2.37.7, and 2.38.2, the Git node validated a relative remote URL against the configured repositoryPath but then invoked git with that path as its working directory; git walked up to the enclosing repository's top level and resolv...

5.3CVSS5.7AI score0.00306EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 7:17 p.m.•18 views

CVE-2026-92180

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker must first obtain the ability to...

7.8CVSS0.00195EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:05 p.m.•37 views

CVE-2026-92180 pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker must first obtain the ability to...

7.8CVSS0.00195EPSS
SaveExploits0References1
Rows per page
Query Builder