CVE-2025-66476

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66476

Vim for Windows before 9.1.1947 is affected by CVE-2025-66476, an uncontrolled search-path vulnerability that allows launching a malicious executable in the current working directory when Vim resolves external commands (eg. :grep, :!, compiler/make) while using cmd.exe. Affected product: Vim for ...

CVE-2025-66476

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66476 Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66476 Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66476

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66476 Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

PT-2025-48974

Name of the Vulnerable Software and Affected Versions NVIDIA TAO affected versions not specified Description NVIDIA TAO is susceptible to a flaw that allows an attacker to load a resource through an uncontrolled search path. Exploitation of this issue could lead to privilege escalation, data...

CVE-2025-64695

Uncontrolled search path element issue exists in the installer of LogStare Collector for Windows. If exploited, arbitrary code may be executed with the privilege of the user invoking the installer...

CVE-2025-64695

Uncontrolled search path element issue exists in the installer of LogStare Collector for Windows. If exploited, arbitrary code may be executed with the privilege of the user invoking the installer...

CVE-2025-64695

CVE-2025-64695 affects LogStare Collector (Windows installer) with an Uncontrolled search path element (CWE-427) that can allow arbitrary code execution with the invoking user’s privileges. The Red Hat/NVD/JVN entries confirm this as a local issue in the Windows installer; the risk is described a...

PT-2025-47671

Uncontrolled search path element issue exists in the installer of LogStare Collector for Windows. If exploited, arbitrary code may be executed with the privilege of the user invoking the installer...

EulerOS 2.0 SP13 : linux-sgx (EulerOS-SA-2025-2439)

According to the versions of the linux-sgx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Uncontrolled search path for some IntelR IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable...

Linux Distros Unpatched Vulnerability : CVE-2020-0570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via loc...

CVE-2025-10089

Uncontrolled Search Path Element Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S Setting Application all versions, MILCO.S Setting Application IR all versions, MILCO.S Easy Setting Application IR all versions, and MILCO.S Easy Switch Application IR all...

CVE-2025-13051 Windows service used an uncontrolled search path element will cause unauthorized code execution with localsystem privileges

When the service of ABP and AES is installed in a directory writable by non-administrative users, an attacker can replace or plant a DLL with the same name as one loaded by the service. Upon service restart, the malicious DLL is loaded and executed under the LocalSystem account, resulting in...

CVE-2025-13051

CVE-2025-13051 affects ABP (2.0–2.0.7.9050) and AES (1.0–1.0.6.8290). The vulnerability arises when the service runs from a directory writable by non-admin users, allowing an attacker to replace or plant a DLL with the same name as one loaded by the service. On service restart, the malicious DLL ...

EUVD-2025-197931

Uncontrolled Search Path Element Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S Setting Application all versions, MILCO.S Setting Application IR all versions, MILCO.S Easy Setting Application IR all versions, and MILCO.S Easy Switch Application IR all...

CVE-2025-10089 Malicious Code Execution Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S

Uncontrolled Search Path Element Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S Setting Application all versions, MILCO.S Setting Application IR all versions, MILCO.S Easy Setting Application IR all versions, and MILCO.S Easy Switch Application IR all...

Mitsubishi Electric多款产品 安全漏洞

Mitsubishi Electric MILCO.S Setting Application and Mitsubishi Electric MILCO.S Easy Switch Application are both products of Mitsubishi Electric Japan. Mitsubishi Electric MILCO.S Setting Application is a companion software for lighting control systems.Mitsubishi Electric MILCO.S Easy Switch...