8982 matches found
CVE-2021-3550
CVE-2021-3550, a DLL search path vulnerability in Lenovo PCManager (prior to version 3.0.500.5102), could allow privilege escalation. Affected software is Lenovo PCManager; the vulnerability lies in DLL search path handling that could enable local privilege escalation with high impact (as per CVS...
CVE-2021-35056
CVE-2021-35056 affects Unisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0, which have an unquoted Windows search path for a scheduled task. This can allow an unintended executable to run. Connected sources confirm the vulnerability details; no exploitation status or patch information is...
RUSTSEC-2021-0106 Uncontrolled Search Path Element in sharkdp/bat
bat on windows before 0.18.2 executes programs named less.exe from the current working directory. This can lead to unintended code execution...
Adobe Dimension Uncontrolled Search Path Element Vulnerability
Adobe Dimension is a 3D rendering and design software. An uncontrolled search path element vulnerability exists in Adobe Dimension 3.4 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...
CVE-2021-28636
Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Uncontrolled Search Path Element vulnerability. An attacker with access to the victim's C:/ folder could leverage this vulnerability to achieve arbitrary code...
Adobe Acrobat 代码问题漏洞
Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader is vulnerable to uncontrolled search path element vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...
Adobe Dimension 代码问题漏洞
Adobe Dimension is a 3D rendering and design software. An uncontrolled search path element vulnerability exists in Adobe Dimension 3.4 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...
MDT AutoSave
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: MDT Software Equipment: MDT AutoSave Vulnerabilities: Inadequate Encryption Strength, SQL Injection, Relative Path Traversal, Command Injection, Uncontrolled Search Path Element, Generation of Error...
CVE-2021-28570
Adobe After Effects version 18.1 and earlier is affected by an Uncontrolled Search Path element vulnerability. An unauthenticated attacker could exploit this to to plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction...
CVE-2021-28570
Adobe After Effects version 18.1 and earlier is affected by an Uncontrolled Search Path element vulnerability. An unauthenticated attacker could exploit this to to plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction...
Path traversal
Adobe After Effects version 18.1 and earlier is affected by an Uncontrolled Search Path element vulnerability. An unauthenticated attacker could exploit this to to plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction...
CVE-2021-28570
CVE-2021-28570 affects Adobe After Effects 18.1 and earlier. It is an Uncontrolled Search Path Element vulnerability that could allow an unauthenticated attacker to plant and execute a binary with System permissions ; exploitation requires user interaction. The issue is confirmed in APSB21-33, wh...
CVE-2021-28570 Adobe After Effects uncontrolled search path element vulnerability could lead to remote code execution
Adobe After Effects version 18.1 and earlier is affected by an Uncontrolled Search Path element vulnerability. An unauthenticated attacker could exploit this to to plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction...
CVE-2021-28570 Adobe After Effects uncontrolled search path element vulnerability could lead to remote code execution
Adobe After Effects version 18.1 and earlier is affected by an Uncontrolled Search Path element vulnerability. An unauthenticated attacker could exploit this to to plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction...
The vulnerability of the McAfee Total Protection download client allows a hacker to execute arbitrary code.
The vulnerability of the McAfee Total Protection antivirus protection software’s download process is related to the use of an unreliable search path during the download of dynamic DLL libraries. Exploiting this vulnerability allows an attacker to execute arbitrary code...
VMware Workstation Tools Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the VGAuthService...
CVE-2021-0108
Uncontrolled search path in the Intel UniteR Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access...
CVE-2021-0057
Uncontrolled search path in the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...