Intel AI for Enterprise Retrieval-augmented Generation 代码问题漏洞

Intel AI for Enterprise Retrieval-augmented Generation is a technology framework for enhancing the accuracy and relevance of Large Language Model LLM responses by incorporating an external knowledge base. An uncontrolled search path vulnerability exists in Intel AI for Enterprise...

PT-2025-32692 · Intel · Intel Oneapi Toolkit

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI Toolkit and component software affected versions not specified Description: An uncontrolled search path exists in some IntelR oneAPI Toolkit and component software installers. This may allow an authenticated user to potentially...

Intel® AI for Enterprise Retrieval-augmented Generation Software Advisory

Summary: A potential security vulnerability in some Intel® AI for Enterprise Retrieval-augmented Generation software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24923 Description:...

Intel® DSA Software Advisory

Summary: A potential security vulnerability in some Intel® Driver & Support Assistant DSA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-26404 Description: Uncontrolled search path fo...

Intel® RealSense™ Dynamic Calibrator Software Advisory

Summary: A potential security vulnerability for some Intel® RealSense™ Dynamic Calibrator software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-22838 Description: Uncontrolled search path fo...

Clock Jitter Tool Software Advisory

Summary: A potential security vulnerability for some Clock Jitter Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20092 Description: Uncontrolled search path for some Clock Jitter...

Intel DSA 代码问题漏洞

Intel DSA is a hardware gas pedal built into Intel® Xeon® Scalable processors that accelerates storage, networking, and data analytics workloads by offloading data transfer tasks to dedicated hardware, freeing up CPU resources for other tasks. Intel DSA suffers from an uncontrolled search path...

Intel Tiber Edge Platform Edge Orchestrator 代码问题漏洞

Intel Tiber Edge Platform Edge Orchestrator is an enterprise-class edge computing orchestration management platform from Intel Corporation USA. A code issue vulnerability exists in Intel Graphics Driver that stems from an uncontrolled search path that could lead to elevation of privilege...

Zoom Workplace < 6.3.10 Vulnerability (ZSB-25030)

The version of Zoom Workplace installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25030 advisory. - Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege...

PT-2025-32900 · Adobe · Substance3D - Modeler

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.22.0 and earlier Description: Substance3D - Modeler is affected by an uncontrolled search path element issue that may lead to arbitrary code execution with current user privileges. An attacker could manipulate...

Zoom Workplace VDI < 6.3.10 Vulnerability (ZSB-25030)

The version of Zoom Workplace VDI installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25030 advisory. - Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of...

K000152931: Multiple PostgreSQL vulnerabilities

Security Advisory Description CVE-2023-2455 Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is planned under one role and then executed under other...

Elastic Beats filebeat < 9.1.0 Privilege Escalation

The version of Elastic Beats filebeat installed on the remote host is prior to 9.1.0. It is, therefore, affected by a vulnerability. An uncontrolled search path element vulnerability can lead to local privilege Escalation LPE via Insecure Directory Permissions. The vulnerability arises from...

CVE-2025-53395

Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx backup file and a malicious VSSSvr.dll located in the same directory. When a user with administrative privileges mounts a backup by opening the .mrimgx...

Exploit for CVE-2024-32019

⚠️ CVE-2024-32019 - PoC 📌 Affected Versions - = v1.45.0...

Autodesk Navisworks Manage 2026 Untrusted Search Path (adsk-sa-2025-0014)

The version of Autodesk Navisworks Manage installed on the remote host may be affected by a vulnerability as referenced in the adsk-sa-2025-0014 advisory. - A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary...

Autodesk Revit 2026 < 2026.0.2 Untrusted Search Path (adsk-sa-2025-0014)

The version of Autodesk Revit installed on the remote host is 2026 prior to 2026.0.2. It is, therefore, affected by a vulnerability as referenced in the adsk-sa-2025-0014 advisory. - A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead t...

CVE-2025-25011 Beats Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer

An uncontrolled search path element vulnerability can lead to local privilege Escalation LPE via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files,...

CVE-2025-25011

CVE-2025-25011 affects Elastic Beats (notably Filebeat) installed via Windows, where the Windows install script can trigger an Uncontrolled Search Path Element leading to Local Privilege Escalation through insecure directory permissions. Affected versions include Beats prior to 9.1.0 (with mainte...

CVE-2025-0712 APM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer

An uncontrolled search path element vulnerability can lead to local privilege Escalation LPE via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files,...