CVE-2024-37142

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege...

CVE-2024-37142

Dell Peripheral Manager is affected in versions prior to 1.7.6 by an uncontrolled search path element vulnerability. The underlying issue is exposure to preloading malicious DLLs or symbolic links, which could enable arbitrary code execution and privilege escalation locally. Affected software: De...

PT-2024-5613 · Iobit · Iobit Itop Data Recovery Pro

Name of the Vulnerable Software and Affected Versions: IObit iTop Data Recovery Pro version 4.4.0.687 Description: The issue is related to an uncontrolled search path element in the BPL Handler component of the IObit iTop Data Recovery Pro. This can be exploited to execute arbitrary commands. Loc...

PT-2024-5611 · Iobit · Iobit Dualsafe Password Manager

Name of the Vulnerable Software and Affected Versions: IObit DualSafe Password Manager version 1.4.0.3 Description: The issue is related to an uncontrolled search path element in the BPL Handler component of the IObit DualSafe Password Manager. This could allow an attacker to execute arbitrary...

PT-2024-38013 · Cato Networks · Cato Networks Sdp Client

Name of the Vulnerable Software and Affected Versions: Cato Networks SDP Client versions prior to 5.10.34 Description: The issue affects the Cato Networks SDP Client on Windows, allowing for local privilege escalation due to an untrusted search path and incorrect default permissions...

PT-2024-38268 · Iobit · Iobit Driver Booster

Name of the Vulnerable Software and Affected Versions: IObit Driver Booster version 11.0.0.0 Description: A critical issue affects some unknown functionality in the library VCL120.BPL of the component BPL Handler, leading to an uncontrolled search path. The manipulation requires a local attack. T...

IObit iTop Data Recovery Pro 代码问题漏洞

IObit iTop Data Recovery Pro is a data recovery software from IObit. A code issue vulnerability exists in IObit iTop Data Recovery Pro version 4.4.0.687, which stems from an unknown operation in the madbasic.bpl library that can result in an uncontrolled search path...

PT-2024-23845 · Unknown · Thermoscanip Scrutation

Name of the Vulnerable Software and Affected Versions: ThermoscanIP Scrutation affected versions not specified Description: A misconfiguration known as "CWE-428: Unquoted Search Path or Element" affects the ThermoscanIP Scrutation service. This issue could be exploited in scenarios where incorrec...

Zoom Workplace Desktop App For MacOS < 6.0.10 Uncontrolled Search Path Element (ZSB-24027)

The version of Zoom Workplace Desktop App for MacOS installed on the remote host is prior to 6.0.10. It is, therefore, affected by a uncontrolled search path element vulnerability that allow a local authenticated attacker to conduct a denial of service via local access. Note that Nessus has not...

CVE-2024-7193

A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library takdecolib.dll of the component DLL Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The...

CVE-2024-7193 Mp3tag DLL tak_deco_lib.dll uncontrolled search path

A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library takdecolib.dll of the component DLL Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The...

CVE-2024-7193 Mp3tag DLL tak_deco_lib.dll uncontrolled search path

A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library takdecolib.dll of the component DLL Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The...

CVE-2024-7193

Summary of CVE-2024-7193 (Mp3tag): Affected software is Mp3tag up to version 3.26d, with the vulnerability located in the DLL Handler’s tak_deco_lib.dll. The issue is an uncontrolled search path resulting from code in tak_deco_lib.dll, enabling local-host exploitation. Public exploit information ...

Microsoft Azure VSTS CLI vstscli Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Azure VSTS CLI. Authentication is not required to exploit this vulnerability. The specific flaw exists within the installation of Azure VSTS CLI. When installed from the Microsoft Container...

PT-2024-38155 · Mp3Tag · Mp3Tag

Name of the Vulnerable Software and Affected Versions: Mp3tag versions up to 3.26d Description: A vulnerability has been found in the library tak deco lib.dll of the component DLL Handler, leading to an uncontrolled search path. The manipulation can be launched on the local host. It is possible t...

Mp3tag 代码问题漏洞

Mp3tag is a metadata tag editor from Mp3tag, Inc. A code issue vulnerability exists in Mp3tag 3.26d and prior versions, which stems from unknown code in the component DLL Handler that can lead to uncontrolled search paths...

Microsoft Azure SQL Workshop azuremlsampleexperiments Uncontrolled Search Path Element Vulnerability

This vulnerability allows remote attackers to manipulate sample datasets on affected installations of SQL Workshop for Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within the installation of SQL Workshop. When installed from the official...

ROS-20240723-05

A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to an insecure privilege management vulnerability. insecure privilege management. Exploitation of the vulnerability could allow an attacker to escalate their privileges A vulnerability in the...

The vulnerability of Zoom’s video conferencing software lies in its uncontrolled search path, which allows attackers to trigger service failures.

The vulnerability of Zoom, a video conferencing software, is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Microsoft Dataverse data management platform, related to the use of an unreliable search path, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Dataverse data management platform is related to the use of an unreliable search path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...