UBUNTU-CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435 Yarn: untrusted search path

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435 Yarn: untrusted search path

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435

CVE-2021-4435 describes an untrusted search path vulnerability in Yarn. The issue can allow execution of malicious commands when a victim runs certain Yarn commands in a directory containing attacker-controlled content. Impact details in the NVD entry show a high-severity, local attack with requi...

Yarn Security Vulnerabilities

Yarn is an open source package installation and management tool. A security vulnerability exists in Yarn that stems from an untrustworthy search path vulnerability...

PT-2024-11033 · Yarn +2 · Yarn +2

Name of the Vulnerable Software and Affected Versions: Yarn affected versions not specified Description: An untrusted search path issue was found, allowing malicious commands to be executed in unexpected ways when certain commands are run in a directory with attacker-controlled content...

SUSE CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2024-1201

Search path or unquoted item vulnerability in HDD Health affecting versions 4.2.0.112 and earlier. This vulnerability could allow a local attacker to store a malicious executable file within the unquoted search path, resulting in privilege escalation...

Privilege escalation

Search path or unquoted item vulnerability in HDD Health affecting versions 4.2.0.112 and earlier. This vulnerability could allow a local attacker to store a malicious executable file within the unquoted search path, resulting in privilege escalation...

CVE-2024-1201 PanteraSoft HDD Health search path or unquoted item vulnerability

Search path or unquoted item vulnerability in HDD Health affecting versions 4.2.0.112 and earlier. This vulnerability could allow a local attacker to store a malicious executable file within the unquoted search path, resulting in privilege escalation...

CVE-2024-1201

The CVE is linked to PanteraSoft HDD Health 4.2.0.112 and earlier. Affected component: HDD Health executable handling with a search path/unquoted item scenario. Root cause: unquoted search path leading to privilege escalation when a local attacker can place a malicious executable in the unquoted ...

CVE-2020-24682

Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial Automation NET/PVI allows Target Programs with Elevated Privileges.This issue affects Automation Studio: from 4.0 through 4.6, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from...

Path traversal

Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial Automation NET/PVI allows Target Programs with Elevated Privileges.This issue affects Automation Studio: from 4.0 through 4.6, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from...

CVE-2020-24682

CVE-2020-24682 is an Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio and NET/PVI. Affected products and versions include Automation Studio 4.0–4.6, 4.7.0–4.7.7 SP, 4.8.0–4.8.6 SP, 4.9.0–4.9.4 SP, and NET/PVI 4.0–4.6, 4.7.0–4.7.7, 4.8.0–4.8.6, 4.9.0–4.9...

PanteraSoft HDD Health Code Issue Vulnerability

PanteraSoft HDD Health is a compact freeware from PanteraSoft. A code issue vulnerability exists in PanteraSoft HDD Health 4.2.0.112 and prior versions, which stems from the presence of a search path or unquoted item vulnerability that could allow a local attacker to store malicious executables...

AVEVA Edge Code Issue Vulnerability

AVEVA Edge is a highly scalable and flexible HMI/SCADA software from AVEVA Software UK. A code issue vulnerability exists in AVEVA Edge 2020 R2 SP2 and prior versions, which stems from the presence of an uncontrolled search path element that can be exploited by an attacker to load an insecure DLL...

CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

The vulnerability of the installer of the Intel NUC Pro Software Suite, related to an uncontrolled search path element, allows a hacker to trigger a service failure.

The vulnerability of the installer of the Intel NUC Pro Software Suite related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a perpetrator to cause a service failure...