Linux Distros Unpatched Vulnerability : CVE-2008-4865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current...

CVE-2025-1804

A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity...

CVE-2025-1804 Blizzard Battle.Net profapi.dll uncontrolled search path

A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity...

CVE-2025-1804

CVE-2025-1804 affects Blizzard Battle.Net (Windows) up to version 2.39.0.15212. The vulnerability resides in an unknown function of profapi.dll and causes an uncontrolled search path, enabling local exploitation. The initial descriptions indicate a locally approached attack with high complexity a...

CVE-2025-1804 Blizzard Battle.Net profapi.dll uncontrolled search path

A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity...

PT-2025-9186 · Blizzard · Blizzard Battle.Net

Name of the Vulnerable Software and Affected Versions: Blizzard Battle.Net versions up to 2.39.0.15212 Description: A critical issue was found in Blizzard Battle.Net, affecting some unknown functionality in the library profapi.dll. The manipulation leads to an uncontrolled search path. The attack...

Blizzard Battle.Net 代码问题漏洞

Blizzard Battle.Net is a multiplayer online gaming service provided by Blizzard Entertainment, Inc. for its games. A code issue vulnerability exists in Blizzard Battle.Net 2.39.0.15212 and prior versions, which stems from the presence of an uncontrolled search path that could lead to local code...

ESRI ArcGIS Pro Untrustworthy Search Path Vulnerability

ESRI ArcGIS Pro is a powerful desktop GIS software from ESRI. An untrusted search path vulnerability exists in ESRI ArcGIS Pro, which can be exploited by an attacker to execute malicious commands...

The vulnerability of the Intel QuickAssist Technology (QAT) driver package lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of the Intel QuickAssist Technology QAT driver package is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft Visual Studio Code’s source editor, related to an uncontrolled search path element, allows attackers to escalate their privileges.

The vulnerability of Microsoft Visual Studio Code’s source editor is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to gain increased privileges...

The vulnerability of the Intel Ethernet Adapter Complete Driver Pack driver package lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of the Intel Ethernet Adapter Complete Driver Pack driver package is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to gain increased privileges...

ESRI ArcGIS AllSource Untrusted Search Path Vulnerability

ESRI ArcGIS AllSource is a Intelligence Analyzer software developed by ESRI. An untrustworthy search path vulnerability exists in ESRI ArcGIS AllSource, which can be exploited by an attacker to execute malicious commands...

CVE-2025-1067

There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS ArcGIS Pro, the fil...

CVE-2025-1068

There is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS AllSource, th...

CVE-2025-1067

There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS ArcGIS Pro, the fil...

CVE-2025-1068

There is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS AllSource, th...

CVE-2025-1067

There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS ArcGIS Pro, the fil...

CVE-2025-1068

There is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS AllSource, th...

CVE-2025-1068 There is a code injection vulnerability in Esri ArcGIS AllSource

There is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS AllSource, th...

CVE-2025-1068 There is a code injection vulnerability in Esri ArcGIS AllSource

There is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS AllSource, th...