CVE-2025-5129

CVE-2025-5129 pertains to Sangfor aTrust 2.3.10.60 where an uncontrolled search path is caused by a flaw in MSASN1.dll. The vulnerability can be exploited with local access and has high attack complexity; some references indicate that privileges may be required (local and elevated depending on so...

CVE-2025-2272

Uncontrolled Search Path Element vulnerability in Forcepoint FIE Endpoint allows Privilege Escalation, Code Injection, Hijacking a privileged process.This issue affects FIE Endpoint: before 25.05...

PT-2025-22844 · Unknown +1 · Msasn1.Dll +1

Name of the Vulnerable Software and Affected Versions: Sangfor aTrust version 2.3.10.60 Description: A critical vulnerability has been found in Sangfor aTrust, affecting an unknown functionality in the library MSASN1.dll. The manipulation leads to uncontrolled search path. Local access is require...

Sangfor aTrust 代码问题漏洞

Sangfor aTrust is a zero-trust access control system from China's Sangfor. A code issue vulnerability exists in Sangfor aTrust version 2.3.10.60, which stems from an uncontrolled search path in the MSASN1.dll library...

CVE-2024-21857

Uncontrolled search path for some IntelR oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21784

Uncontrolled search path for some IntelR IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-7193

A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library takdecolib.dll of the component DLL Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The...

CVE-2024-8441

An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local authenticated attacker with admin privileges to escalate their privileges to SYSTEM...

CVE-2024-26027

Uncontrolled search path for some IntelR Simics Package Manager software before version 1.8.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21831

Uncontrolled search path in some IntelR Processor Diagnostic Tool software before version 4.1.9.41 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21772

Uncontrolled search path in some IntelR Advisor software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21774

Uncontrolled search path in some IntelR Processor Identification Utility software before versions 6.10.34.1129, 7.1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21862

Uncontrolled search path in some IntelR QuartusR Prime Standard Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21843

Uncontrolled search path for some IntelR Computing Improvement Program software before version 2.4.0.10654 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21861

Uncontrolled search path in some IntelR GPA Framework software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21814

Uncontrolled search path for some IntelR Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21841

Uncontrolled search path for some IntelR Distribution for GDB software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21777

Uncontrolled search path in some IntelR QuartusR Prime Pro Edition Design software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21818

Uncontrolled search path in some IntelR PCM software before version 202311 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21837

Uncontrolled search path in some IntelR QuartusR Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...