8949 matches found
Rockwell Automation SequenceManager
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : SequenceManager Vulnerabilities : Unquoted Search Path or Element 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause a...
PT-2024-6587 · Ivanti · Ivanti Workspace Control
Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to an uncontrolled search path element in the Ivanti Workspace Control software, which can be exploited to allow an attacker to escalate their privileges...
PT-2024-6214 · Ivanti · Ivanti Epm
Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2022 SU6 Ivanti EPM versions prior to the 2024 September update Description: The issue is related to an uncontrolled search path in the agent of Ivanti EPM. This can be exploited by a local authenticated attacker...
Ivanti EPM 安全漏洞
Ivanti EPM is a one-stop shop for managing user profiles and all client devices from Ivanti USA. A security vulnerability exists in Ivanti EPM that originates from an uncontrolled search path. A local, authenticated attacker with administrator privileges could escalate their privileges to the...
CVE-2022-27592
An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow local authenticated administrators to execute unauthorized code or commands via unspecified vectors. We have already fixed the vulnerability in the following...
CVE-2022-27592
An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow local authenticated administrators to execute unauthorized code or commands via unspecified vectors. We have already fixed the vulnerability in the following...
CVE-2022-27592 QVR Smart Client
An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow local authenticated administrators to execute unauthorized code or commands via unspecified vectors. We have already fixed the vulnerability in the following...
CVE-2022-27592
CVE-2022-27592 affects QVR Smart Client (prior to 2.4.0.0570). The issue is an unquoted search path/element vulnerability that could allow local authenticated administrators to execute unauthorized code via unspecified vectors. Impact is local, with potential for full code execution on affected h...
PT-2024-11545 · Qnap · Qvr Smart Client
Name of the Vulnerable Software and Affected Versions: QVR Smart Client versions prior to 2.4.0.0570 Description: An unquoted search path or element issue has been reported, which could allow local authenticated administrators to execute unauthorized code or commands via unspecified vectors...
The vulnerability of the Cisco Meraki Systems Manager, a platform for managing network devices, in the Windows operating system allows a hacker to execute arbitrary code with elevated privileges.
The vulnerability of the Cisco Meraki Systems Manager, a platform for managing network devices, relates to improper handling of search paths in the catalog during execution. Exploiting this vulnerability can allow an attacker to execute arbitrary code with elevated privileges...
QNAP Systems QVR 代码问题漏洞
QNAP Systems QVR is a QNAP monitoring system control center from China Weilian Technology QNAP Systems. A code issue vulnerability exists in QNAP Systems QVR version 2.4.0.0570 and prior versions, which stems from a search path or element vulnerability that contains an unquoted search path or...
The vulnerability of the Yandex Browser is related to the use of an insecure search path, which allows a hacker to execute arbitrary code.
The vulnerability of the Yandex Browser is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code by loading a specially crafted DLL file...
CVE-2024-6473
Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used...
CVE-2024-6473
CVE-2024-6473 details (MODE C): Yandex Browser for Desktop is affected on versions before 24.7.1.380 due to a DLL hijacking vulnerability caused by an untrusted search path. A PoC demonstrates DLL loading from a crafted path, validating the vulnerability exists in the cited build. The PoC targets...
CVE-2024-6473 DLL Hijacking in Yandex Browser
Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used...
CVE-2024-6473 DLL Hijacking in Yandex Browser
Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used...
Yandex Browser 安全漏洞
Yandex Browser is a desktop version of the web browser from the Russian company Yandex. A security vulnerability exists in Yandex Browser versions prior to 24.7.1.380, which stems from the use of an untrusted search path, which leads to a DLL hijacking vulnerability...
Zoom Workplace Desktop App for macOS < 6.1.0 Untrusted Search Path (ZSB-24032)
The version of Zoom Workplace Desktop App for macOS installed on the remote host is prior to 6.1.0. It is, therefore, affected by an untrusted search path vulnerability as referenced in the ZSB-24032 advisory: - Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and...
Zoom Workplace Desktop App for macOS < 6.1.0 Buffer Overflow (ZSB-24033)
The version of Zoom Workplace Desktop App for macOS installed on the remote host is prior to 6.1.0. It is, therefore, affected by a buffer overflow vulnerability as referenced in the ZSB-24033 advisory: - Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom...