CVE-2024-5509

CVE-2024-5509 concerns Luxion KeyShot: a flaw in BIP file parsing enables an attacker to load a library from an unsecured location, leading to remote code execution . The vulnerability arises from an uncontrolled search path element, allowing code execution in the context of the current process. ...

CVE-2024-5509 Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target mus...

Luxion KeyShot Security Vulnerability

Luxion KeyShot is a software for designing photos of 3D scenes from Luxion, USA. The software allows real-time 3D rendering workflows to display results immediately and reduce the time required to create photorealistic product photos. A security vulnerability exists in Luxion KeyShot Viewer that...

PT-2024-5609 · Dell · Dell Peripheral Manager

Name of the Vulnerable Software and Affected Versions: Dell Peripheral Manager versions prior to 1.7.6 Description: The issue is related to an uncontrolled search path element in the Dell Peripheral Manager software. This could allow an attacker to potentially exploit the vulnerability through...

RHEL 6 : postgresql (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - postgresql: Start scripts permit database administrator to modify root-owned files CVE-2017-15097 -...

PT-2024-5619 · Dell · Dell Peripheral Manager

Name of the Vulnerable Software and Affected Versions: Dell Peripheral Manager versions prior to 1.7.6 Description: The issue is related to an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link...

RHEL 7 : postgresql (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - postgresql: Uncontrolled search path element in pgdump and other client applications CVE-2018-1058 - It w...

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BIP...

PT-2024-5576

Name of the Vulnerable Software and Affected Versions wpa supplicant affected versions not specified Description The issue is related to an uncontrolled search path element in wpa supplicant, allowing a local unprivileged attacker to escalate privileges to the user that wpa supplicant runs as,...

CVE-2024-5292

D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of D-Link Network Assistant. An attacker must first obtain the ability to execute low-privileged code on t...

CVE-2024-5292

CVE-2024-5292 concerns the D-Link Network Assistant. The DNACore service loads a file from an unsecured location, enabling a local attacker who can run low-privileged code to escalate to SYSTEM and execute arbitrary code. Public disclosures (ZDI-24-443, NVD entry) confirm local privilege escalati...

SUSE CVE-2023-39929

Uncontrolled search path in some Libva software maintained by IntelR before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-22379

Uncontrolled search path in some IntelR Inspector software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21861

Uncontrolled search path in some IntelR GPA Framework software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21862

Uncontrolled search path in some IntelR QuartusR Prime Standard Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21861

Uncontrolled search path in some IntelR GPA Framework software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21862

Uncontrolled search path in some IntelR QuartusR Prime Standard Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21843

Uncontrolled search path for some IntelR Computing Improvement Program software before version 2.4.0.10654 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21841

Uncontrolled search path for some IntelR Distribution for GDB software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21837

Uncontrolled search path in some IntelR QuartusR Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...