Lucene search
+L

3634 matches found

CVE
CVE
•added 2023/02/09 8:30 a.m.•66 views

CVE-2022-43440

CVE-2022-43440 affects Checkmk: Uncontrolled Search Path Element in Checkmk Agent allows a local attacker to escalate privileges by manipulating the unixcat executable. Impacts Checkmk server deployments with vulnerable Agent/orchestrations prior to 2.1.0p1, 2.0.0p25, or 1.6.0p29. Root cause is a...

8.8CVSS7.9AI score0.0023EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/02/09 8:30 a.m.•68 views

CVE-2022-43440 Privilege escalation via manipulated unixcat executable

Uncontrolled Search Path Element in Checkmk Agent in Tribe29 Checkmk before 2.1.0p1, before 2.0.0p25 and before 1.6.0p29 on a Checkmk server allows the site user to escalate privileges via a manipulated unixcat executable...

8.8CVSS8.9AI score0.0023EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/02/09 8:30 a.m.•7 views

CVE-2022-43440 Privilege escalation via manipulated unixcat executable

Uncontrolled Search Path Element in Checkmk Agent in Tribe29 Checkmk before 2.1.0p1, before 2.0.0p25 and before 1.6.0p29 on a Checkmk server allows the site user to escalate privileges via a manipulated unixcat executable...

8.8CVSS7.2AI score0.0023EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/02/09 12:00 a.m.•17 views

PT-2023-14204 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.1.0p1 Checkmk versions prior to 2.0.0p25 Checkmk versions prior to 1.6.0p29 Description: The issue allows a site user to escalate privileges via a manipulated unixcat executable due to an uncontrolled search path...

8.8CVSS7.3AI score0.0023EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2023/02/08 12:00 a.m.•43 views

NVIDIA GeForce Experience < 3.27.0.112 Multiple Vulnerabilities

The version of NVIDIA GeForce Experience installed on the remote host is prior to 3.24.0.126. It is, therefore, affected by multiple vulnerabilities: - A vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete data from a linked...

8.2CVSS7AI score0.00219EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/02/08 12:00 a.m.•10 views

The vulnerability of the PostgreSQL database management system, related to an uncontrolled search path element, allows a perpetrator to enhance their privileges and execute arbitrary commands.

The vulnerability of the PostgreSQL database management system is related to an uncontrolled element in the search path processing when handling the searchpath parameter. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary commands...

7.5CVSS7.8AI score0.02235EPSS
SaveExploits0References14Affected Software6
Prion
Prion
•added 2023/02/07 3:15 a.m.•24 views

Design/Logic Flaw

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. A successful exploit of this vulnerability could lead to...

4.1CVSS7.6AI score0.00209EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/02/07 2:22 a.m.•56 views

CVE-2022-31611

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. A successful exploit of this vulnerability could lead to...

6.8CVSS7.9AI score0.00209EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/02/07 2:22 a.m.•9 views

CVE-2022-31611

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. A successful exploit of this vulnerability could lead to...

6.8CVSS7.6AI score0.00209EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/07 12:00 a.m.•4 views

CVE-2022-31611: Uncontrolled Search Path Element

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. A successful exploit of this vulnerability could lead to...

7.3CVSS6.2AI score0.00209EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/02/07 12:00 a.m.•19 views

NVIDIA GeForce Experience 代码问题漏洞

NVIDIA GeForce Experience is a set of automatic graphics card update tools from NVIDIA. The product can automatically update graphics card drivers and support graphics card performance management and optimization, among other things. A security vulnerability exists in NVIDIA GeForce Experience,...

7.3CVSS7.7AI score0.00209EPSS
SaveExploits0References2
OSV
OSV
•added 2023/02/06 7:15 p.m.•15 views

CVE-2022-38136

Uncontrolled search path in the IntelR oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows before version 2022.2.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.3CVSS5.8AI score0.00195EPSS
SaveExploits0References1
Prion
Prion
•added 2023/02/06 7:15 p.m.•21 views

Design/Logic Flaw

Uncontrolled search path in the IntelR oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows before version 2022.2.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

4.1CVSS7.3AI score0.00195EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•3 views

CVE-2022-38136: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows before version 2022.2.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.3CVSS5.9AI score0.00195EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/01 12:00 a.m.•1 views

CVE-2023-22283: Uncontrolled Search Path Element

On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit this vulnerability because the victim user needs to run the executable on the system and the attacke...

6.5CVSS5.8AI score0.00197EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/01/30 12:00 a.m.•15 views

PT-2023-1475 · Nvidia · Nvidia Geforce Experience

Name of the Vulnerable Software and Affected Versions: NVIDIA GeForce Experience affected versions not specified Description: The issue is related to an uncontrolled search path vulnerability in the client installers of NVIDIA GeForce Experience. This vulnerability can be exploited by an attacker...

9CVSS7.2AI score0.00209EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/01/23 12:00 a.m.•22 views

The vulnerability of Zoom video conferencing software relates to an uncontrolled search path element, allowing attackers to elevate their privileges to that of the SYSTEM user.

The vulnerability of Zoom video conferencing software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a hacker to elevate their privileges to that of the SYSTEM user...

8.2CVSS7.2AI score0.00466EPSS
SaveExploits0References3Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•54 views

Microsoft Exchange GetTorusCmdletConfigurationEntries Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Exchange. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7CVSS7.8AI score0.00569EPSS
SaveExploits0References1
NVD
NVD
•added 2023/01/12 5:15 p.m.•29 views

CVE-2023-0247

Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1...

7.8CVSS7.6AI score0.00403EPSS
SaveExploits1References2
Prion
Prion
•added 2023/01/12 5:15 p.m.•25 views

Code injection

Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1...

4.4CVSS7.6AI score0.00403EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder