8946 matches found
CVE-2024-9491
DLL hijacking vulnerabilities, caused by an uncontrolled search path in Configuration Wizard 2 installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...
CVE-2024-9325
A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Program Files x86\Intelbras\Incontrol Cliente\incontrolwebcam\incontrol-service-watchdog.exe. The manipulation leads to unquoted search path. It is possible to...
CVE-2024-9493
DLL hijacking vulnerabilities, caused by an uncontrolled search path in the ToolStick installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...
CVE-2024-45710
SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine...
CVE-2024-6080
A vulnerability classified as critical was found in Intelbras InControl 2.21.56. This vulnerability affects unknown code of the component incontrolWebcam Service. The manipulation leads to unquoted search path. Local access is required to approach this attack. The exploit has been disclosed to th...
CVE-2024-2637
An Uncontrolled Search Path Element vulnerability in B Industrial Automation Scene Viewer, B Industrial Automation Automation Runtime, B Industrial Automation mapp Vision, B Industrial Automation mapp View, B Industrial Automation mapp Cockpit, B Industrial Automation mapp Safety, B Industrial...
CVE-2024-11454
A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized...
CVE-2024-28133
A local low privileged attacker can use an untrusted search path in a CHARX system utility to gain root privileges...
Dell EMC NetWorker Unquoted Search Path (DSA-2025-064)
Dell NetWorker, versions prior to 19.11.0.3, all versions of 19.10 & prior versions contains an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. Note that Nessus has not tested for...
CVE-2024-13158
An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-22190
GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted search path if it uses a shell to run git, as well as when it runs bash.exe to interpret hooks. If either of those features are used on...
PT-2025-7900 · Esri · Arcgis Pro
Name of the Vulnerable Software and Affected Versions: Esri ArcGIS Pro versions 3.3 through 3.4 Description: The issue is related to an untrusted search path vulnerability that may allow a low-privileged attacker with write privileges to the local file system to introduce a malicious executable...
PT-2025-7901 · Esri · Esri Arcgis Allsource
Name of the Vulnerable Software and Affected Versions: Esri ArcGIS AllSource versions 1.2 through 1.3 Description: There is an untrusted search path vulnerability that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the...
CVE-2025-24831
Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...
CVE-2025-24831
Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...
CVE-2025-24831
Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...
CVE-2025-24831
CVE-2025-24831 affects Acronis Cyber Protect Cloud Agent on Windows (pre-build 39378). The local privilege escalation stems from an unquoted search path vulnerability in the agent executable. CVSSv3.0 indicates LOCAL access, LOW attack complexity, and LOW privileges required, with HIGH impact on ...
CVE-2025-24831
Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...
Acronis Cyber Protect Cloud Agent 代码问题漏洞
Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A code issue vulnerability exists in Acronis Cyber Protect Cloud Agent that stems from a local elevation of privilege due to an unreferenced search path vulnerability...
