CVE-2021-28955: Uncontrolled Search Path Element

git-bug before 0.7.2 has an Uncontrolled Search Path Element. It will execute git.bat from the current directory in certain PATH situations most often seen on Windows...

CVE-2021-28953: Uncontrolled Search Path Element

The unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted repository...

CVE-2021-28954: Uncontrolled Search Path Element

In Chris Walz bit before 1.0.5 on Windows, attackers can run arbitrary code via a .exe file in a crafted repository...

CVE-2020-26155: Uncontrolled Search Path Element

Multiple files and folders in Utimaco SecurityServer 4.20.0.4 and 4.31.1.0. are installed with Read/Write permissions for authenticated users, which allows for binaries to be manipulated by non-administrator users. Additionally, entries are made to the PATH environment variable which, in...

CVE-2021-22665: Uncontrolled Search Path Element

Rockwell Automation DriveTools SP v5.13 and below and Drives AOP v4.12 and below both contain a vulnerability that a local attacker with limited privileges may be able to exploit resulting in privilege escalation and complete control of the system...

CVE-2021-20674: Uncontrolled Search Path Element

Untrusted search path vulnerability in Installer of MagicConnect Client program distributed before 2021 March 1 allows an attacker to gain privileges and via a Trojan horse DLL in an unspecified directory and to execute arbitrary code with the privilege of the user invoking the installer when a...

NewStart CGSL CORE 5.04 / MAIN 5.04 : qt5-qtbase Multiple Vulnerabilities (NS-SA-2021-0035)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has qt5-qtbase packages installed that are affected by multiple vulnerabilities: - An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. readxbmbody in gui/image/qxbmhandler.cpp has a buffer...

CVE-2020-28646: Uncontrolled Search Path Element

ownCloud owncloud/client before 2.7 allows DLL Injection. The desktop client loaded development plugins from certain directories when they were present...

CVE-2020-24451

Uncontrolled search path in the IntelR OptaneTM DC Persistent Memory installer for Windows before version 1.00.00.3506 may allow an authenticated user to potentially enable escalation of privilege via local access...

Code injection

Uncontrolled search path in the IntelR OptaneTM DC Persistent Memory installer for Windows before version 1.00.00.3506 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24451

The CVE-2020-24451 issue affects Intel Optane DC Persistent Memory software for Windows prior to version 1.00.00.3506. The root cause is an uncontrolled search path in the installer, enabling an authenticated local user to potentially escalate privileges. Impact is described as high confidentiali...

CVE-2020-24451: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR OptaneTM DC Persistent Memory installer for Windows before version 1.00.00.3506 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24485: Uncontrolled Search Path Element

Improper conditions check in the IntelR FPGA OPAE Driver for Linux before kernel version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

Adobe Dreamweaver Information Disclosure Vulnerability (APSB21-13) - Windows

Adobe Dreamweaver is prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Rockwell Automation DriveTools SP and Drives AOP

1. EXECUTIVE SUMMARY CVSS v3 7.5 Vendor : Rockwell Automation Equipment : DriveTools SP and Drives AOP Vulnerability : Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability may result in privilege escalation and total loss of device confidentiality,...

Adobe Dreamweaver Uncontrolled Search Path Element Vulnerability

Adobe Dreamweaver is the United States of America Odooby Adobe company a Windows-based platform to support visual HTML editing and code editing software. An uncontrolled search path element vulnerability exists in Adobe Dreamweaver. An attacker could exploit this vulnerability to cause an...

PT-2021-2103

Name of the Vulnerable Software and Affected Versions: IntelR FPGA OPAE Driver for Linux versions prior to 4.17 IntelR Trace Analyzer and Collector versions prior to 2020 update 3 Description: The issue is related to improper conditions check and uncontrolled search path, which may allow an...

PT-2021-2031

Name of the Vulnerable Software and Affected Versions: IntelR OptaneTM DC Persistent Memory installer for Windows versions prior to 1.00.00.3506 Description: The issue is related to an uncontrolled search path in the installer, which may allow an authenticated user to potentially enable escalatio...

The vulnerability of Adobe Illustrator’s graphic editor lies in its uncontrolled search path, which allows attackers to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to an uncontrolled element of the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

The vulnerability of the Adobe InCopy text creation and editing software lies in its uncontrolled search path, which allows a hacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...