Lucene search
+L

9043 matches found

Vulnrichment
Vulnrichment
added 2026/02/20 4:53 p.m.7 views

CVE-2026-26097 Uncontrolled Search Path Element in Owl opds

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request...

8.4CVSS5.4AI score0.00109EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/20 4:53 p.m.38 views

CVE-2026-26097 Uncontrolled Search Path Element in Owl opds

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request...

8.4CVSS0.00109EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/20 4:53 p.m.35 views

CVE-2026-26097

Owl opds 2.2.0.4 is affected by CVE-2026-26097, which concerns an Uncontrolled Search Path Element that can leverage/manipulate configuration file search paths via a crafted network request. The CVSS metrics indicate a HIGH impact across confidentiality, integrity, and availability, with a LOCAL ...

8.4CVSS5.4AI score0.00109EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/20 4:53 p.m.8 views

CVE-2026-26097

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request...

8.4CVSS5.4AI score0.00109EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/20 9:15 a.m.18 views

CVE-2026-26050

The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges...

8.4CVSS0.0016EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/02/20 3:31 a.m.23 views

Installer for Job log aggregation/analysis software RICOH Job Log Aggregation Tool may insecurely load Dynamic Link Libraries

Overview The installer for Job log aggregation/analysis software RICOH Job Log Aggregation Tool contains the following vulnerability related to the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2026-26050 Kazuma...

8.4CVSS5.7AI score0.0016EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/02/20 1:22 a.m.13 views

CVE-2026-25926

Notepad++ is a free and open-source source code editor. An Unsafe Search Path vulnerability CWE-426 exists in versions prior to 8.9.2 when launching Windows Explorer without an absolute executable path. This may allow execution of a malicious explorer.exe if an attacker can control the process...

7.3CVSS6.5AI score0.00248EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/02/20 12:00 a.m.21 views

Owl Cyber Defense OPDS 代码问题漏洞

Owl Cyber Defense OPDS is a network isolation device developed by Owl Cyber Defense Corporation in the United States. Version 2.2.0.4 of Owl Cyber Defense OPDS contains a code vulnerability; this vulnerability stems from an uncontrolled search path element, which may lead to the exploitation of t...

8.4CVSS5.9AI score0.00109EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/20 12:00 a.m.19 views

Owl Cyber Defense OPDS 代码问题漏洞

Owl Cyber Defense OPDS is a network isolation device developed by Owl Cyber Defense Corporation in the United States. Version 2.2.0.4 of Owl Cyber Defense OPDS contains a code vulnerability; this vulnerability stems from an uncontrolled search path element, which may lead to the exploitation of t...

8.4CVSS5.9AI score0.00109EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/02/20 12:00 a.m.53 views

Notepad++ < 8.9.2 Unsafe Search Path (GHSA-rjvm-fcxw-2jxq)

The version of Notepad++ installed on the remote host is prior to 8.9.2. It is, therefore, affected by a vulnerability: - An Unsafe Search Path vulnerability CWE-426 exists when launching Windows Explorer without an absolute executable path. This may allow execution of a malicious explorer.exe if...

7.3CVSS9.2AI score0.00248EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/02/20 12:00 a.m.19 views

Owl Cyber Defense OPDS 代码问题漏洞

Owl Cyber Defense OPDS is a network isolation device developed by Owl Cyber Defense Corporation in the United States. Version 2.2.0.4 of Owl Cyber Defense OPDS contains a code vulnerability; this vulnerability stems from an uncontrolled search path element, which may lead to the exploitation of t...

8.4CVSS5.9AI score0.00109EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/20 12:00 a.m.20 views

PT-2026-21264

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request...

8.4CVSS5.4AI score0.00109EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/20 12:00 a.m.22 views

PT-2026-21265

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request...

8.4CVSS5.4AI score0.00109EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/20 12:00 a.m.18 views

PT-2026-21266

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request...

8.4CVSS5.4AI score0.00109EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/19 12:16 a.m.18 views

CVE-2026-25926

Notepad++ is a free and open-source source code editor. An Unsafe Search Path vulnerability CWE-426 exists in versions prior to 8.9.2 when launching Windows Explorer without an absolute executable path. This may allow execution of a malicious explorer.exe if an attacker can control the process...

7.3CVSS0.00248EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/02/19 12:00 a.m.21 views

PT-2026-20855

Name of the Vulnerable Software and Affected Versions PDF-XChange Editor affected versions not specified Description A flaw exists within the TrackerUpdate process of PDF-XChange Editor that allows local attackers to escalate privileges on affected systems. An attacker must first have the ability...

7.3CVSS7.6AI score0.00258EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2026/02/19 12:00 a.m.14 views

TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TensorFlow. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of plugins...

7CVSS6.2AI score0.00252EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/19 12:00 a.m.14 views

PT-2026-20861

Name of the Vulnerable Software and Affected Versions TensorFlow affected versions not specified Description A flaw exists in TensorFlow due to insecure handling of plugins, allowing local attackers to potentially escalate privileges on affected systems. An attacker must first have the ability to...

7CVSS7.5AI score0.00252EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/18 11:07 p.m.9 views

CVE-2026-25926 Notepad++ has an Untrusted Search Path

Notepad++ is a free and open-source source code editor. An Unsafe Search Path vulnerability CWE-426 exists in versions prior to 8.9.2 when launching Windows Explorer without an absolute executable path. This may allow execution of a malicious explorer.exe if an attacker can control the process...

7.3CVSS6.5AI score0.00248EPSS
SaveExploits1References3
CVE
CVE
added 2026/02/18 11:07 p.m.95 views

CVE-2026-25926

CVE-2026-25926 (Notepad++) is an Unsafe Search Path vulnerability (CWE-426) affecting Notepad++ versions prior to 8.9.2. The issue arises when launching explorer.exe without an absolute path, allowing an attacker who controls the process working directory to execute a malicious explorer.exe, pote...

7.3CVSS6.7AI score0.00248EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder