postgresql: Uncontrolled search path element in CREATE EXTENSION

A flaw was found in PostgreSQL, where some PostgreSQL extensions did not use the searchpath safely in their installation script. This flaw allows an attacker with sufficient privileges to trick an administrator into executing a specially crafted script during the extension's installation or updat...

Adobe Photoshop Uncontrolled Search Path Element Vulnerability

Adobe Photoshop, or "PS" for short, is an image processing software developed and distributed by Adobe. Adobe Photoshop suffers from an uncontrolled search path element vulnerability. An attacker can exploit this vulnerability to achieve arbitrary code execution...

Adobe Premiere Pro Uncontrolled Search Path Element Vulnerability

Premiere Pro is a video editing software for movies, TV and the web. An uncontrolled search path element vulnerability exists in Adobe Premiere Pro 14.4 and earlier versions. An attacker can exploit this vulnerability to achieve arbitrary code execution...

Adobe Creative Cloud Desktop Application Uncontrolled Search Path Vulnerability

Adobe Creative Cloud Desktop Application is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial...

Adobe Media Encoder Uncontrolled Search Path Vulnerability

Adobe Media Encoder is a video and audio encoding application. An uncontrolled search path vulnerability exists in Adobe Media Encoder 14.4 and earlier versions. An attacker can exploit this vulnerability to achieve arbitrary code execution...

Adobe Dreamweaver Uncontrolled Search Path Element Vulnerability

Adobe Dreamweaver is the United States of America Odooby Adobe company a Windows-based platform to support visual HTML editing and code editing software. A security vulnerability exists in Adobe Dreamweaver, which exists on Windwos/MacOS platforms and can be exploited by attackers to extract powe...

CVE-2020-24420

Adobe Photoshop for Windows version 21.2.1 and earlier is affected by an uncontrolled search path element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fil...

CVE-2020-24419

Adobe After Effects version 17.1.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2020-24425

Dreamweaver version 20.2 and earlier is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Successful exploitation could result in a local user with permissions to write to the file system running system commands with administrator privileges...

CVE-2020-24423

Adobe Media Encoder version 14.4 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2020-24424

Adobe Premiere Pro version 14.4 and earlier is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Fixes 16 Critical Code-Execution Bugs Across Portfolio

Adobe has released 18 out-of-band security patches in 10 different software packages, including fixes for critical vulnerabilities that stretch across its product suite. Adobe Illustrator was hit the hardest. There are 16 critical bugs, all of which allow arbitrary code execution in the context o...

CVE-2020-8338

A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system...

CVE-2020-8345

A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege...

CVE-2020-8345

A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege...

Path traversal

A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system...

CVE-2020-8338

CVE-2020-8338 affects Lenovo Diagnostics. A DLL search path vulnerability in Lenovo Diagnostics prior to version 4.35.4 could allow a local attacker to execute code with elevated privileges. Lenovo’s advisory confirms privilege escalation potential and recommends upgrading to Lenovo Diagnostics 4...

CVE-2020-8345

A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege...

CVE-2020-8345

The CVE-2020-8345 issue affects the Lenovo HardwareScan Plugin used by Lenovo Vantage. A DLL search path vulnerability in the plugin before version 1.0.46.11 could allow privilege escalation. Connected sources specify affected component (Lenovo HardwareScan Plugin DLL), root cause (DLL search pat...

CVE-2020-24422

Adobe Creative Cloud Desktop Application version 5.2 and earlier and 2.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that ...