The vulnerability of the software for loading, installing, and activating Siemens Software Center is related to an uncontrolled search path element, allowing a perpetrator to execute arbitrary code with elevated privileges.

The vulnerability of the software for loading, installing, and activating Siemens Software Center is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a perpetrator to execute arbitrary code with elevated privileges using a specially created DLL file...

Untrusted Search Path

vim is vulnerable to Untrusted Search Path. An attacker could exploit this vulnerability by tricking a user into opening a malicious file or by sending a specially crafted HTTP request to a vulnerable Vim server due to the way Vim searches for files. Once the vulnerability is exploited, the...

CVE-2022-4956

A vulnerability classified as critical has been found in Caphyon Advanced Installer 19.7. This affects an unknown part of the component WinSxS DLL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may ...

CVE-2022-4956

A vulnerability classified as critical has been found in Caphyon Advanced Installer 19.7. This affects an unknown part of the component WinSxS DLL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may ...

Design/Logic Flaw

A vulnerability classified as critical has been found in Caphyon Advanced Installer 19.7. This affects an unknown part of the component WinSxS DLL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may ...

CVE-2022-4956 Caphyon Advanced Installer WinSxS DLL uncontrolled search path

A vulnerability classified as critical has been found in Caphyon Advanced Installer 19.7. This affects an unknown part of the component WinSxS DLL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may ...

CVE-2022-4956 Caphyon Advanced Installer WinSxS DLL uncontrolled search path

A vulnerability classified as critical has been found in Caphyon Advanced Installer 19.7. This affects an unknown part of the component WinSxS DLL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may ...

CVE-2023-42486

Fortect - CWE-428: Unquoted Search Path or Element, may be used by local user to elevate privileges...

Code injection

Fortect - CWE-428: Unquoted Search Path or Element, may be used by local user to elevate privileges...

CVE-2023-42486

Fortect CVE-2023-42486 describes CWE-428 Unquoted Search Path or Element leading to local privilege elevation. Affected: Fortect software (sources reference Fortect, with one entry citing version 5.0.0.7). Root cause: unquoted search path/element. Impact: local privilege elevation with high confi...

CVE-2023-42486 Fortect - CWE-428: Unquoted Search Path or Element

Fortect - CWE-428: Unquoted Search Path or Element, may be used by local user to elevate privileges...

CVE-2023-42486 Fortect - CWE-428: Unquoted Search Path or Element

Fortect - CWE-428: Unquoted Search Path or Element, may be used by local user to elevate privileges...

PT-2023-28369 · Fortect · Fortect

Name of the Vulnerable Software and Affected Versions: Fortect affected versions not specified Description: The issue is related to an unquoted search path or element, which may be exploited by a local user to elevate privileges. Recommendations: At the moment, there is no information about a new...

Important: mariadb

Issue Overview: A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in...

CLSA-2023-1695319769 vim: Fix of CVE-2023-4736

CVE-2023-4736: improve search path to avoid run an executable in untrusted dir...

CLSA-2023-1695319372 vim: Fix of CVE-2023-4736

CVE-2023-4736: improve search path to avoid run an executable in untrusted dir...

vim: Fix of CVE-2023-4736

CVE-2023-4736: improve search path to avoid run an executable in untrusted dir...

postgresql: schema_element defeats protective search_path changes

A flaw was found in PostgreSQL. Certain database calls could permit an attacker with elevated database-level privileges to execute arbitrary code...

The vulnerability of Kepware KEPServerEX and ThingWorkx Kepware Server software lies in the uncontrolled element of the search path, allowing a attacker to replace the installer with an arbitrary DLL library.

The vulnerability of the OPC-server software from Kepware, KEPServerEX and ThingWorkx Kepware Server, is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to replace the installer with a program that uses arbitrary DLL libraries...

CVE-2023-5012

A vulnerability, which was classified as problematic, was found in Topaz OFD 2.11.0.201. This affects an unknown part of the file C:\Program Files\Topaz OFD\Warsaw\core.exe of the component Protection Module Warsaw. The manipulation leads to unquoted search path. Attacking locally is a requiremen...