8989 matches found
CVE-2018-10959
CVE-2018-10959 affects Avecto Defendpoint 4 (before 4.4 SR6) and 5 (before 5.1 SR1). The vulnerability is an Untrusted Search Path issue allowing elevation by modifying environment variables to launch the attacker’s process. Exploitation details beyond this are not provided in the documents. Reme...
PT-2019-2135 · Cisco · Cisco Directory Connector
Name of the Vulnerable Software and Affected Versions: Cisco Directory Connector affected versions not specified Description: The issue is related to uncontrolled search path elements in the search path processing of Cisco Directory Connector. This could allow an authenticated, local attacker to...
CVE-2019-6534
The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a malicious file...
CVE-2019-6534
The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a malicious file...
PT-2019-18146 · Gemalto · Gemalto Sentinel Ultrapro Client Library
Name of the Vulnerable Software and Affected Versions: Gemalto Sentinel UltraPro Client Library versions 1.3.0 through 1.3.2 Description: The issue is related to an uncontrolled search path element in the ux32w.dll library, which allows an attacker to load and execute a malicious file...
Path traversal
A DLL search path vulnerability was reported in Lenovo Bootable Generator, prior to version Mar-2019, that could allow a malicious user with local access to execute code on the system...
CVE-2019-6154
A DLL search path vulnerability was reported in Lenovo Bootable Generator, prior to version Mar-2019, that could allow a malicious user with local access to execute code on the system...
CVE-2019-6154
A DLL search path vulnerability was reported in Lenovo Bootable Generator, prior to version Mar-2019, that could allow a malicious user with local access to execute code on the system...
CVE-2019-6154
CVE-2019-6154 describes a DLL search path vulnerability in Lenovo Bootable Generator (prior to Mar-2019) that could allow a local attacker to execute code. Affected software: Lenovo Bootable Generator (used to create Linux diagnostics on bootable USB). Root cause: DLL search path flaw. Impact: lo...
Lenovo Bootable Generator Vulnerability - US
Lenovo Security Advisory: LEN-25401 Potential Impact: Code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6154 Summary Description: A DLL search path vulnerability was reported in Lenovo Bootable Generator that could allow a malicious user with local access t...
Lenovo Bootable Generator Vulnerability - Lenovo Support US
No description provided...
Untrusted Search Path Vulnerability in Aviosoft DVD X Player Standar Software
Aviosoft DVD X Player Standard is a DVD player from the American company Aviosoft. An untrusted search path vulnerability exists in the Aviosoft DVD X Player Standar software. An attacker can exploit this vulnerability by leveraging a malicious file in a directory to invoke the privileges of the...
The vulnerability of the Visual Studio C++ Redistributable installation program allows a perpetrator to execute arbitrary code.
The vulnerability of the Visual Studio C++ Redistributable software installation program is related to incorrect handling of the search path. Exploiting this vulnerability could allow an attacker to execute arbitrary code using the malicious DLL library...
Design/Logic Flaw
An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with administrative privileges...
Gemalto Sentinel UltraPro
1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Low skill level to exploit Vendor: Gemalto Equipment: Sentinel UltraPro Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow execution of unauthorized code or commands. 3...
Dynamic Power Reduction Utility Vulnerability - US
Lenovo Security Advisory: LEN-25674 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6149 Summary Description: An unquoted search path vulnerability was identified in Dynamic Power Reduction Utility, affecting ThinkPad X1 Carbon...
Dynamic Power Reduction Utility Vulnerability - Lenovo Support US
No description provided...
CVE-2019-5921
Untrusted search path vulnerability in Windows 7 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...