Lucene search
+L

3635 matches found

OSV
OSV
•added 2023/11/08 10:15 p.m.•19 views

CVE-2023-4632

An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges...

7.8CVSS5.9AI score0.00321EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/08 12:00 a.m.•9 views

CVE-2023-4632: Uncontrolled Search Path Element

An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges...

7.8CVSS7.5AI score0.00321EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/11/07 4:34 p.m.•14 views

CVE-2023-0898 Uncontrolled Search Path Element in GE MiCOM S1 Agile

General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application...

5.3CVSS7.3AI score0.00255EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/07 12:00 a.m.•6 views

CVE-2023-0898: Uncontrolled Search Path Element

General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application...

7.3CVSS7.5AI score0.00255EPSS
SaveExploits0References3
OSV
OSV
•added 2023/11/02 7:15 p.m.•8 views

CVE-2023-31016

NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering...

7.8CVSS7.4AI score0.00211EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/02 7:15 p.m.•41 views

CVE-2023-31016

NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering...

7.8CVSS8.1AI score0.00211EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/02 7:15 p.m.•31 views

Design/Logic Flaw

NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering...

4.4CVSS8AI score0.00211EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/02 12:00 a.m.•2 views

CVE-2023-31027: Uncontrolled Search Path Element

NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to escalation of privileges...

8.2CVSS7.4AI score0.00196EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/02 12:00 a.m.•4 views

CVE-2023-31016: Uncontrolled Search Path Element

NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering...

7.8CVSS7.7AI score0.00211EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/11/02 12:00 a.m.•29 views

NVIDIA GPU Display Driver Security Vulnerability

NVIDIA GPU Display Driver is a driver software from NVIDIA Corporation for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver, which stems from an uncontrolled search path element that could lead to the execution...

7.8CVSS7AI score0.00211EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/10/11 12:00 a.m.•17 views

The vulnerability of the distributed version of the Git version control system for Windows, doskey.exe, allows a hacker to execute arbitrary code.

The vulnerability of the distributed version of the Git version control system for Windows, called doskey.exe, is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

7.8CVSS7AI score0.0038EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
•added 2023/10/10 12:00 a.m.•16 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of backup and data recovery software on computers and servers is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

10CVSS7AI score0.0028EPSS
SaveExploits0References2
OSV
OSV
•added 2023/10/09 10:15 p.m.•11 views

CVE-2023-5463

A vulnerability was found in XINJE XDPPro up to 3.7.17a. It has been rated as critical. Affected by this issue is some unknown functionality in the library cfgmgr32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The exploit has been disclosed to t...

7.8CVSS5.2AI score0.00277EPSS
SaveExploits0References3
NVD
NVD
•added 2023/10/09 10:15 p.m.•24 views

CVE-2023-5463

A vulnerability was found in XINJE XDPPro up to 3.7.17a. It has been rated as critical. Affected by this issue is some unknown functionality in the library cfgmgr32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The exploit has been disclosed to t...

7.8CVSS7.6AI score0.00277EPSS
SaveExploits0References3
Prion
Prion
•added 2023/10/09 10:15 p.m.•32 views

Design/Logic Flaw

A vulnerability was found in XINJE XDPPro up to 3.7.17a. It has been rated as critical. Affected by this issue is some unknown functionality in the library cfgmgr32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The exploit has been disclosed to t...

6.8CVSS7.5AI score0.00277EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2023/10/09 9:31 p.m.•81 views

CVE-2023-5463

Summary: CVE-2023-5463 affects XINJE XDPPro up to 3.7.17a. Affected component: library cfgmgr32.dll, issue: uncontrolled search path due to a code/config issue. Impact appears local with potential for high confidentiality/integrity/availability impact as per CVSS data; exploitation has been discl...

7.8CVSS7.6AI score0.00277EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/10/09 9:31 p.m.•41 views

CVE-2023-5463 XINJE XDPPro cfgmgr32.dll uncontrolled search path

A vulnerability was found in XINJE XDPPro up to 3.7.17a. It has been rated as critical. Affected by this issue is some unknown functionality in the library cfgmgr32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The exploit has been disclosed to t...

7.8CVSS7.8AI score0.00277EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/10/09 9:31 p.m.•23 views

CVE-2023-5463 XINJE XDPPro cfgmgr32.dll uncontrolled search path

A vulnerability was found in XINJE XDPPro up to 3.7.17a. It has been rated as critical. Affected by this issue is some unknown functionality in the library cfgmgr32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The exploit has been disclosed to t...

7.8CVSS6.7AI score0.00277EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/10/09 12:00 a.m.•20 views

PT-2023-5788 · Acronis · Acronis Cyber Protect 16 +2

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions before build 36497 Acronis Cyber Protect 16 Windows versions before build 37391 Acronis Agent Windows versions before build 36497 Description: The issue is related to a local privilege...

10CVSS6.9AI score0.0028EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/10/09 12:00 a.m.•18 views

XINJE XDPPro Code Issue Vulnerability

XINJE XDPPro is a USB port connection programming software using PLC from China XINJE. A code issue vulnerability exists in XINJE XDPPro version 3.7.17a and prior versions. An attacker could use this vulnerability to cause an uncontrolled search path...

7.8CVSS6.9AI score0.00277EPSS
SaveExploits0References4
Rows per page
Query Builder