Intel VTune Profiler 代码问题漏洞

Intel VTune Profiler is a performance testing tool for optimized software from Intel USA. The software performs performance testing of IoT embedded applications, media software, Java applications, and high-performance computing applications. A security vulnerability exists in Intel VTune Profiler...

PT-2022-18276 · Intel · Intel Quartus Prime Standard

Name of the Vulnerable Software and Affected Versions: IntelR Quartus Prime Standard edition software versions prior to 21.1 Patch 0.02std Description: The issue is related to an uncontrolled search path element, which may allow an authenticated user to potentially enable escalation of privilege...

PT-2022-18542 · Intel · Intel Advanced Link Analyzer Standard +1

Name of the Vulnerable Software and Affected Versions: IntelR Advanced Link Analyzer Pro versions prior to 22.2 IntelR Advanced Link Analyzer Standard edition software versions prior to 22.1.1 STD Description: The issue is related to an uncontrolled search path element, which may allow an...

PT-2022-23340 · Intel · Intel Nuc Kit Wireless Adapter Drivers

Name of the Vulnerable Software and Affected Versions: Intel NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue is related to an uncontrolled search path in the installer software for some Intel NUC Kit Wireless Adapter drivers. This may allow an...

CVE-2022-43310

An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path...

CVE-2022-31253

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior ...

CVE-2022-31253

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior ...

Design/Logic Flaw

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior ...

CVE-2022-31253 openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior ...

CVE-2022-31253 openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior ...

CVE-2022-31253

CVE-2022-31253 covers an Untrusted Search Path vulnerability in openldap2 for openSUSE Factory. The issue allows a local attacker who has control of the ldap user or group to change ownership of arbitrary directory entries to that user/group, enabling escalation to root. Affected are openldap2 ve...

CVE-2022-31253

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior ...

PT-2022-6949 · Openldap2 · Openldap2

Name of the Vulnerable Software and Affected Versions: openldap2 versions prior to 2.6.3-404.1 Description: The issue is related to an Untrusted Search Path vulnerability in openldap2, which allows local attackers with control of the ldap user or group to change ownership of arbitrary directory...

CVE-2022-43310

Foxit Reader v11.2.118.51569 is affected by CVE-2022-43310 due to an Uncontrolled Search Path Element when searching for DLL libraries without an absolute path. This local privilege-escalation vulnerability can allow an attacker to gain high impact on confidentiality, integrity, and availability....

CVE-2022-34825

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrit...

Code injection

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrit...

CVE-2022-34825

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrit...

CVE-2022-34825

The CVE-2022-34825 issue affects CLUSTERPRO X (5.0 and earlier), EXPRESSCLUSTER X (5.0 and earlier), CLUSTERPRO X SingleServerSafe (5.0 and earlier), and EXPRESSCLUSTER X SingleServerSafe (5.0 and earlier). It stems from an uncontrolled search path element in these products. The vulnerability all...

NEC Expresscluster X 代码问题漏洞

NEC Expresscluster X is a specialized high availability cluster software from Nippon Electric NEC. It is used to enable fast restore functions and continuously protect critical applications and data. A security vulnerability exists in NEC Expresscluster X 5.0 for Windows and prior versions,...

PT-2023-5862 · Git · Git For Windows

Name of the Vulnerable Software and Affected Versions: Git for Windows versions prior to 2.40.1 Description: The issue is related to an Uncontrolled Search Path Element vulnerability. It affects users of Git CMD who start the command in an untrusted directory, allowing maliciously-placed doskey.e...