CVE-2023-29299

CVE-2023-29299 affects Adobe Acrobat Reader versions 23.003.20244 and earlier, and 20.005.30467 and earlier. The issue is an Untrusted Search Path vulnerability that could lead to an application denial-of-service. Exploitation requires the user to open a malicious file and is conditioned by the d...

Exploit for Unquoted Search Path or Element in Openbsd Openssh

CVE-2023-38408 PoC for the recent critical vuln affecting Open...

CVE-2023-34545

A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL...

CVE-2023-39212

Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access...

CVE-2023-39212

Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access...

CVE-2023-39212

Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access...

CVE-2023-39212

CVE-2023-39212 affects Zoom Rooms for Windows prior to 5.15.5. The issue is an untrusted search path that may allow an authenticated user to trigger a denial of service via local access. Public advisories indicate Zoom fixed the vulnerability in version 5.15.5. Exploitation details are not provid...

CVE-2023-36344

An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature...

Design/Logic Flaw

An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature...

CVE-2023-36540

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

Design/Logic Flaw

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36540

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

postgresql: schema_element defeats protective search_path changes

A flaw was found in PostgreSQL. Certain database calls could permit an attacker with elevated database-level privileges to execute arbitrary code...

postgresql: schema_element defeats protective search_path changes

A flaw was found in PostgreSQL. Certain database calls could permit an attacker with elevated database-level privileges to execute arbitrary code...

postgresql: schema_element defeats protective search_path changes

A flaw was found in PostgreSQL. Certain database calls could permit an attacker with elevated database-level privileges to execute arbitrary code...

PT-2023-5323 · Microsoft +1 · Powershell +2

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.003.20244 and earlier Adobe Acrobat Reader versions 20.005.30467 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Description: The issue is related to an Untrusted Search Path vulnerability and imprope...

PT-2023-5571 · Siemens · Siemens Software Center

Name of the Vulnerable Software and Affected Versions: Siemens Software Center versions prior to V3.0 Description: A DLL Hijacking issue could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path. This is relat...

Siemens Software Center 代码问题漏洞

Siemens Software Center allows the download, installation and activation of purchased software. A DLL hijacking vulnerability exists in Siemens Software Center, which can be exploited by an attacker to execute code with elevated privilege by placing a malicious DLL in a directory on the DLL searc...

The vulnerability of the libxpc library in iOS, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura allows attackers to elevate their privileges to the root level.

The vulnerability of the libxpc library in iOS, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura systems is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to elevate their privileges to the root level...

​Siemens Software Center

​​As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services ...