8969 matches found
CVE-2023-47453
CVE-2023-47453 affects Sohu Video Player 7.0.15.0. It describes an Untrusted search path vulnerability where local users can gain escalated privileges via the version.dll file located in the current working directory. The CVSS–3.1 base metrics assign a HIGH severity (7.8) with Local attack vector...
PT-2023-30456 · Microsoft +1 · Urlmon.Dll +1
Name of the Vulnerable Software and Affected Versions: NetEase CloudMusic version 2.10.4 Description: An Untrusted search path issue allows local users to gain escalated privileges through the urlmon.dll file in the current working directory. Recommendations: For NetEase CloudMusic version 2.10.4...
PT-2023-30454 · Notepad++ · Notepad++
Name of the Vulnerable Software and Affected Versions: notepad++ version 6.5 Description: An Untrusted search path issue allows local users to gain escalated privileges through the msimg32.dll file in the current working directory. Recommendations: For notepad++ version 6.5, consider restricting...
postgresql: schema_element defeats protective search_path changes
A flaw was found in PostgreSQL. Certain database calls could permit an attacker with elevated database-level privileges to execute arbitrary code...
The vulnerability of the Fortinet FortiClient security device for Windows, related to the use of an insecure search path, allows attackers to execute arbitrary code.
The vulnerability of the Fortinet FortiClient security device for Windows relates to the use of an insecure lookup path. Exploiting this vulnerability allows attackers to execute arbitrary code by replacing the legitimate DLL file with a malicious library...
The vulnerability of the Perl programming language lies in its uncontrolled search path element, which allows attackers to execute arbitrary code.
The vulnerability of the Perl programming language is related to an uncontrollable element in the search process. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Path traversal
Uncontrolled search path element vulnerability in Plesk Installer affects version 3.27.0.0. A local attacker could execute arbitrary code by injecting DLL files into the same folder where the application is installed, resulting in DLL hijacking in edputil.dll, samlib.dll, urlmon.dll, sspicli.dll,...
CVE-2023-41787
Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File Search Paths. This vulnerability allows access to files with sensitive information. This issue affects Pandora FMS: from 700 through 772...
CVE-2023-41790
Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File Search Paths. This vulnerability allows to access the server configuration file and to compromise the database. This issue affects Pandora FMS: from 700 through 773...
CVE-2023-41790
CVE-2023-41790 is a path traversal vulnerability in Pandora FMS (versions 700–773) that allows access to server configuration files via an uncontrolled search path element, potentially compromising the database. Public descriptions consistently cite traversal through get_file.php as the root caus...
CVE-2023-41790 Traversal Path on PHP file
Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File Search Paths. This vulnerability allows to access the server configuration file and to compromise the database. This issue affects Pandora FMS: from 700 through 773...
CVE-2023-41787
CVE-2023-41787 is an Uncontrolled Search Path Element vulnerability in Pandora FMS affecting versions 700–772. The issue arises from insecure search-path handling, enabling an attacker to access files containing sensitive information by manipulating configuration/file search paths. Documents cons...
CVE-2023-41787 Arbitrary File Read
Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File Search Paths. This vulnerability allows access to files with sensitive information. This issue affects Pandora FMS: from 700 through 772...
PT-2023-28093 · Unknown · Pandora Fms
Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 773 Description: The issue is related to an Uncontrolled Search Path Element vulnerability, which allows for Leveraging/Manipulating Configuration File Search Paths. This vulnerability enables access to the...
PT-2023-28089 · Unknown · Pandora Fms
Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 772 Description: The issue is related to an Uncontrolled Search Path Element vulnerability, which allows for Leveraging/Manipulating Configuration File Search Paths. This vulnerability enables access to files...
CVE-2023-6235
An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of...
CVE-2023-6235 Arbitrary code execution in Duet Display
An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of...
The vulnerability of Zoom’s video conferencing software relates to the use of an unreliable search path, which allows a hacker to trigger a service failure.
The vulnerability of Zoom’s video conferencing software is related to the use of an unreliable search path. Exploiting this vulnerability can allow a hacker to cause service failures...
The vulnerability of the software for the effective use of the ELECOM Camera Assistant and the QuickFileDealer software, which improves file transfer speed, is related to the use of an unreliable search path, allowing attackers to escalate their privileges.
The vulnerability of the software for the effective use of the ELECOM Camera Assistant and the software for increasing file transfer speed, QuickFileDealer, is related to the use of an unreliable search path. Exploiting this vulnerability can allow a hacker to increase their privileges...
