Privilege escalation

Uncontrolled search path in IntelR SCS Add-on for Microsoft SCCM before version 2.1.10 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12329

Uncontrolled search path in the IntelR VTuneTM Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12329

The vulnerability CVE-2020-12329 affects Intel VTune Profiler prior to 2020 Update 1. The issue is an uncontrolled search path that could allow an authenticated local user to escalate privileges. Affected component: Intel VTune Profiler (pre-2020 Update 1). Impact is described as local privilege ...

CVE-2020-12320

Intel SCS Add-on for Microsoft SCCM (pre-2.1.10) is affected by an uncontrolled search path issue that may enable local privilege escalation for authenticated users. The vulnerability affects Intel’s SCS Add-on prior to version 2.1.10. Remediation: upgrade to 2.1.10 or later, per Intel advisory I...

CVE-2020-12320

Uncontrolled search path in IntelR SCS Add-on for Microsoft SCCM before version 2.1.10 may allow an authenticated user to potentially enable escalation of privilege via local access...

Oracle Linux 8 : qt5-qtbase / and / qt5-qtwebsockets (ELSA-2020-4690)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4690 advisory. qt5-qtbase 5.12.5-6 - OpenSSL: handle SSLshutdowns errors properly Resolves: bz1851538 5.12.5-5 - Fix: Files placed by attacker can influence the worki...

PT-2020-5814

Name of the Vulnerable Software and Affected Versions: EcoStruxure Building Operation Enterprise Server versions 1.9 through 3.1 EcoStruxure Building Operation Enterprise Central versions 2.0 through 3.1 Description: A Windows Unquoted Search Path issue exists in the installers for Enterprise...

qt: files placed by attacker can influence the working directory and lead to malicious code execution

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access...

Huawei EulerOS: Security Advisory for qt (EulerOS-SA-2020-2393)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : qt (EulerOS-SA-2020-2393)

According to the versions of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of...

Huawei EulerOS: Security Advisory for qt (EulerOS-SA-2020-2321)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : qt (EulerOS-SA-2020-2321)

According to the version of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privileg...

Amazon Linux 2 : qt5-qtbase (ALAS-2020-1543)

The version of qt5-qtbase installed on the remote host is prior to 5.9.2-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1543 advisory. 2023-08-03: CVE-2020-24742 was added to this advisory. Files placed by attacker can influence the working directory and...

Medium: qt5-qtbase

Issue Overview: 2023-08-03: CVE-2020-24742 was added to this advisory. Files placed by attacker can influence the working directory and lead to malicious code execution CVE-2020-0569 Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to...

CVE-2020-5977

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure...

Adobe After Effects < 17.1.3 Multiple Arbitrary Code Execution (APSB20-62)

The version of Adobe After Effects installed on the remote Windows host is prior to 17.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-62 advisory. - Adobe After Effects version 17.1.1 and earlier for Windows is affected by an uncontrolled search path...

Adobe Media Encoder < 14.5 Arbitrary Code Execution (APSB20-65)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 14.5. It is, therefore, affected by a vulnerability as referenced in the APSB20-65 advisory. - Adobe Media Encoder version 14.4 and earlier for Windows is affected by an uncontrolled search path vulnerability that...

CVE-2020-24425

Dreamweaver version 20.2 and earlier is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Successful exploitation could result in a local user with permissions to write to the file system running system commands with administrator privileges...

CVE-2020-24425

Dreamweaver version 20.2 and earlier is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Successful exploitation could result in a local user with permissions to write to the file system running system commands with administrator privileges...

CVE-2020-24419

Adobe After Effects version 17.1.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...