CVE-2022-21807

Uncontrolled search path elements in the IntelR VTuneTM Profiler software before version 2022.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21807

CVE-2022-21807 affects Intel VTune Profiler prior to 2022.2.0. The vulnerability is an uncontrolled search path elements issue that could allow an authenticated local user to escalate privileges. Intel’s advisory (Intel-SA-00658) confirms the affected product/version and recommends upgrading to v...

PT-2022-17820 · Intel · Intel Seapi

Name of the Vulnerable Software and Affected Versions: IntelR SEAPI all versions Description: The issue is related to an uncontrolled search path in the installation binaries, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: At...

PT-2022-19173 · Intel · Intel Distribution For Python

Name of the Vulnerable Software and Affected Versions: IntelR Distribution for Python versions prior to 2022.0.3 Description: The issue is related to an uncontrolled search path, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations:...

PT-2022-15144 · Intel · Intel Vtune Profiler

Name of the Vulnerable Software and Affected Versions: IntelR VTuneTM Profiler versions prior to 2022.2.0 Description: The issue is related to uncontrolled search path elements in the software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2022-17628 · Intel · Intel Enpirion Digital Power Configurator Gui

Name of the Vulnerable Software and Affected Versions: IntelR EnpirionR Digital Power Configurator GUI software affected versions not specified Description: The issue is related to an uncontrolled search path element in the software, which may allow an authenticated user to potentially enable...

Exploit for Uncontrolled Search Path Element in Outbyte Pc_Repair

POC-of-CVE-2022-36271 !cve1https://user-images.githubuserc...

CVE-2022-36344

An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed...

CVE-2022-36344

An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed...

Design/Logic Flaw

An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed...

CVE-2022-36344

CVE-2022-36344 describes an unquoted search path vulnerability in JustSystems JUST Online Update for J-License, bundled with various corporate products (Ichitaro through Pro5 and others). The root cause is an unquoted file path used to start a secondary program from the Windows service, enabling ...

PT-2022-23320 · Justsystems · Atok +12

Name of the Vulnerable Software and Affected Versions: JustSystems JUST Online Update for J-License versions affected versions not specified Description: An unquoted search path issue exists in the JustSystems JUST Online Update for J-License, which is bundled with various products, including...

The vulnerability of the Intel(R) Datacenter Group Event software lies in the use of an insecure search path, allowing attackers to escalate their privileges.

The vulnerability of the IntelR Datacenter Group Event software is related to the use of an insecure search path. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2022-34235

Adobe Premiere Elements version 2020v20 and earlier is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user...

CVE-2022-34235

Adobe Premiere Elements version 2020v20 and earlier is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user...

Privilege escalation

Adobe Premiere Elements version 2020v20 and earlier is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user...

CVE-2022-34235 Adobe Premiere Elements Uncontrolled Search Path Element Privilege Escalation

Adobe Premiere Elements version 2020v20 and earlier is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user...

CVE-2022-34235

CVE-2022-34235 affects Adobe Premiere Elements versions 2020v20 and earlier. The issue is an Uncontrolled Search Path Element that could allow Privilege Escalation, enabling an attacker with a low-privileged user to obtain admin privileges without user interaction. The vulnerability is documented...

CVE-2022-34235 Adobe Premiere Elements Uncontrolled Search Path Element Privilege Escalation

Adobe Premiere Elements version 2020v20 and earlier is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user...

Intel Enpirion Digital Power Configurator 代码问题漏洞

Intel Enpirion Digital Power Configurator is digital power configuration software from Intel Corporation USA. A security vulnerability exists in Intel Enpirion Digital Power Configurator that originates from an uncontrolled search path element. An attacker could exploit the vulnerability to eleva...