Lucene search
+L

8946 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.14 views

The vulnerability of the Microsoft Visual Studio software development tool, related to an uncontrolled search path element, allows a hacker to escalate their privileges.

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.3CVSS7.6AI score0.00908EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.18 views

The vulnerability of the toolset for configuring Microsoft Visual Studio Tools for Applications (VSTA) is related to an uncontrolled search path element, which allows a malicious actor to escalate their privileges.

The vulnerability of the toolset for configuring Microsoft Visual Studio Tools for Applications VSTA is related to an uncontrolled search path element. Exploiting this vulnerability could allow an attacker to increase their privileges...

7.3CVSS7.6AI score0.00718EPSS
SaveExploits0References2Affected Software3
Positive Technologies
Positive Technologies
added 2025/04/09 12:00 a.m.8 views

PT-2025-15841 · National Instruments · Ni Labview

Name of the Vulnerable Software and Affected Versions: NI LabVIEW versions prior to 2025 Q1 Description: The issue is related to a DLL hijacking vulnerability due to an uncontrolled search path in NI LabVIEW, which may result in arbitrary code execution. Successful exploitation requires an attack...

7.8CVSS7.4AI score0.00188EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/04/09 12:00 a.m.7 views

NI LabVIEW(National Instruments LabVIEW) 安全漏洞

NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW National Instruments LabVIEW version 2025 Q1 and earlier, which stems from an uncontrolled search path that could lead to the execution o...

7.8CVSS6.9AI score0.00188EPSS
SaveExploits0References2
NVD
NVD
added 2025/04/08 6:16 p.m.28 views

CVE-2025-27743

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00844EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/08 6:16 p.m.9 views

CVE-2025-27743

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally...

7.8CVSS7.3AI score0.00844EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/08 5:23 p.m.111 views

CVE-2025-27743

CVE-2025-27743 — Microsoft System Center Elevation of Privilege . A local privilege-elevation vulnerability arises from an untrusted search path in System Center (DLL hijacking). This can enable an authorized local attacker to obtain higher privileges. Public details confirm the impact and that e...

7.8CVSS7.1AI score0.00844EPSS
SaveExploits0References1Affected Software5
Microsoft CVE
Microsoft CVE
added 2025/04/08 7:00 a.m.18 views

Microsoft System Center Elevation of Privilege Vulnerability

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.00844EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/04/01 1:51 a.m.13 views

CVE-2025-30672 Mite for Perl generates code with an untrusted search path vulnerability

Mite for Perl before 0.013000 generates code with the current working directory '.' added to the @INC path similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code...

7.4AI score0.00394EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/04/01 1:51 a.m.42 views

CVE-2025-30672 Mite for Perl generates code with an untrusted search path vulnerability

Mite for Perl before 0.013000 generates code with the current working directory '.' added to the @INC path similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code...

0.00394EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/03/27 12:37 a.m.7 views

SUSE CVE-2009-0848

Untrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to execute arbitrary code via a Trojan horse GTK module in an unspecified "relative search path."...

4.4CVSS7.6AI score0.00456EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:00 a.m.12 views

The vulnerability of Adobe Illustrator, related to the use of an insecure search path, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created malicious file...

7.8CVSS5.9AI score0.00228EPSS
SaveExploits0References3Affected Software2
HPE Security Bulletins
HPE Security Bulletins
added 2025/03/25 12:00 a.m.12 views

HPESBNW04834 rev.1 - HPE Unified OSS Console (UOC) and HPE Unified OSS Assurance Monitoring (UOCAM) Software, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Arbitrary file upload; Remote: Denial of Service DoS, Disclosure of Information, Arbitrary file upload, Unquoted Search Path SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified OSS Console...

8.7CVSS6.1AI score0.00868EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/03/25 12:00 a.m.7 views

PT-2025-12845 · Bdrive · Bdrive Netdrive

Name of the Vulnerable Software and Affected Versions: Bdrive NetDrive affected versions not specified Description: The issue is related to an uncontrolled search path element, which can lead to local privilege escalation. This is a 0-day vulnerability, meaning it is being exploited before a fix ...

7.8CVSS7.3AI score0.0021EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/03/25 12:00 a.m.8 views

PT-2025-12844 · Bdrive · Bdrive Netdrive

Name of the Vulnerable Software and Affected Versions: Bdrive NetDrive affected versions not specified Description: The issue is related to an uncontrolled search path element, which can lead to local privilege escalation. Recommendations: At the moment, there is no information about a newer...

7.8CVSS7.3AI score0.0021EPSS
SaveExploits0References9
VulnCheck KEV
VulnCheck KEV
added 2025/03/19 12:00 a.m.7 views

VulnCheck KEV: CVE-2022-0074

Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1...

8.8CVSS5.8AI score0.01166EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/03/17 12:00 a.m.9 views

The vulnerability of Acronis Cyber Protect Cloud Agent lies in its use of an insecure search path, which allows attackers to escalate their privileges.

The vulnerability of Acronis Cyber Protect Cloud Agent is related to the use of an insecure search path. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created DLL...

6.3CVSS6.5AI score0.00134EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/16 12:00 a.m.15 views

The vulnerability of the Intel Simics Package Manager, related to an uncontrolled search path element, allows a perpetrator to escalate their privileges.

The vulnerability of the Intel Simics Package Manager’s manager is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.00139EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/16 12:00 a.m.9 views

The vulnerability of the Intel Integrated Performance Primitives library in the Intel oneAPI Base Toolkit development tools, related to an uncontrolled search path element, allows attackers to exploit their privileges.

The vulnerability of the Intel Integrated Performance Primitives library in the Intel oneAPI Base Toolkit development tools set is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to enhance their privileges...

6.7CVSS7.5AI score0.0014EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/16 12:00 a.m.11 views

The vulnerability of the software installer for Zoom video conferencing applications on macOS systems allows a hacker to escalate their privileges.

The vulnerability of the software installer for Zoom video conferencing on macOS systems is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to gain increased privileges...

6.8CVSS5.5AI score0.00178EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder