Intel DSA 代码问题漏洞

Intel DSA is a driver update tool. It can detect user drivers, update installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, i card users must have. A security vulnerability exists in IntelR DSA versions prior to 20.11.50.9, whic...

Intel Processor Diagnostic Tool代码问题漏洞

Intel Processor Diagnostic Tool IPDT is a processor functionality diagnostic tool from IntelR Corporation. A security vulnerability exists in IntelR Processor Diagnostic Tool versions prior to 4.1.5.37, which stems from an uncontrolled search path element in the tool that could allow an...

Intel Unite 代码问题漏洞

Intel Unite is a suite of enterprise meeting collaboration solutions from Intel Corporation. A security vulnerability exists in Intel UniteR Client versions prior to 4.2.25031, which stems from an uncontrolled search path that could allow authenticated users to potentially enable privilege...

CVE-2021-0104: Uncontrolled Search Path Element

Uncontrolled search path element in the installer for the IntelR Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0108: Uncontrolled Search Path Element

Uncontrolled search path in the Intel UniteR Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2020-8702: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-12908

Name of the Vulnerable Software and Affected Versions: IntelR Rapid Storage Technology software versions prior to 17.9.0.34 IntelR Rapid Storage Technology software versions prior to 18.0.0.640 IntelR Rapid Storage Technology software versions prior to 18.1.0.24 Description: The issue is related ...

PT-2021-12878

Name of the Vulnerable Software and Affected Versions: IntelR NUC M15 Laptop Kit Driver Pack software versions prior to 1.1 Description: The issue is related to an uncontrolled search path in the software, which may allow an authenticated user to potentially enable escalation of privilege via loc...

SUSE: Security Advisory (SUSE-SU-2018:0755-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Intel NUC 代码问题漏洞

The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in Intel NUC versions prior to 1.1, which stems from an uncontrolled search path in the software that could allow an authenticated user to enable privileged escalation via local access...

CVE-2021-28594

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Uncontrolled Search Path Element vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

PT-2021-5602

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application installer version 2.4 and earlier Description The issue is related to an Uncontrolled Search Path Element. An unauthenticated attacker could leverage this to achieve arbitrary code execution in the...

CVE-2021-1536: Uncontrolled Search Path Element

A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this...

GHSA-M898-H4PM-PQFR Arbitrary code execution due to an uncontrolled search path for the git binary

Impact The go language recently addressed a security issue in the way that binaries are found before being executed. Some operating systems like Windows persist to have the current directory being part of the default search path, and having priority over the system-wide path. This means that it's...

Arbitrary code execution due to an uncontrolled search path for the git binary

Impact The go language recently addressed a security issue in the way that binaries are found before being executed. Some operating systems like Windows persist to have the current directory being part of the default search path, and having priority over the system-wide path. This means that it's...

Uncontrolled Search Path Element

git-bug before 0.7.2 has an Uncontrolled Search Path Element. It will execute git.bat from the current directory in certain PATH situations most often seen on Windows...

CVE-2021-20726: Uncontrolled Search Path Element

Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory...

CVE-2021-3423

Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Security allows an attacker to load a third party DLL to elevate privileges. This issue affects Bitdefender GravityZone Business Security versions prior to 6.6.23.329...

Path traversal

Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Security allows an attacker to load a third party DLL to elevate privileges. This issue affects Bitdefender GravityZone Business Security versions prior to 6.6.23.329...

CVE-2021-3423

CVE-2021-3423 describes an uncontrolled search path element issue in the OpenSSL usage within Bitdefender GravityZone Business Security that enables local privilege escalation by loading a third-party DLL. Affected versions are GravityZone Business Security prior to 6.6.23.329. The root cause is ...