3765 matches found
CVE-2021-21010
InCopy version 15.1.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2021-1890
Name of the Vulnerable Software and Affected Versions Adobe Animate versions 21.0 and earlier Description The issue is related to an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...
PT-2021-1824
Name of the Vulnerable Software and Affected Versions: Adobe InCopy versions 15.1.1 and earlier Description: The issue is related to an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...
Adobe Incopy 代码问题漏洞
Adobe InCopy is a professional word processing program from Adobe that is integrated with Adobe InDesign. An uncontrolled search path element vulnerability exists in Adobe InCopy 15.1.3 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...
PT-2021-1887
Name of the Vulnerable Software and Affected Versions Adobe Captivate 2019 versions 11.5.1.499 and earlier Description The issue is related to an uncontrolled search path element, which could lead to privilege escalation. An attacker with permissions to write to the file system could leverage thi...
Adobe Illustrator 代码问题漏洞
Adobe Illustrator 2020 is a vector graphics editor. An uncontrolled search path element vulnerability exists in Adobe Illustrator 2020 25.0 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...
PT-2021-1888
Name of the Vulnerable Software and Affected Versions Adobe Illustrator versions 25.0 and earlier Description The issue is related to an uncontrolled search path element in Adobe Illustrator, which could result in arbitrary code execution in the context of the current user. Exploitation of this...
Adobe Animate 代码问题漏洞
Adobe Animate is a multimedia authoring and computer animation program. An uncontrolled search path element vulnerability exists in Adobe Animate 21.0 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...
Adobe Captivate 代码问题漏洞
Adobe Captivate 2019 is a screen recording software. An uncontrolled search path element vulnerability exists in Adobe Captivate 2019 11.5.1.499 and earlier versions. An attacker can exploit the vulnerability to elevate privileges...
CVE-2020-35483: Uncontrolled Search Path Element
AnyDesk before 6.1.0 on Windows, when run in portable mode on a system where the attacker has write access to the application directory, allows this attacker to compromise a local user account via a read-only setting for a Trojan horse gcapi.dll file...
CVE-2020-5681: Uncontrolled Search Path Element
Untrusted search path vulnerability in self-extracting files created by EpsonNet SetupManager versions 2.2.14 and earlier, and Offirio SynergyWare PrintDirector versions 1.6x/1.6y and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
postgresql: Uncontrolled search path element in logical replication
A flaw was found in PostgreSQL, where it did not properly sanitize the searchpath during logical replication. This flaw allows an authenticated attacker to use this flaw in an attack similar to CVE-2018-1058 to execute an arbitrary SQL command in the user's context for replication. The highest...
CVE-2020-24578: Uncontrolled Search Path Element
An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU2.31V1.1.47ae55. It has a misconfigured FTP service that allows a malicious network user to access system folders and download sensitive files such as the password hash file...
postgresql: Uncontrolled search path element in CREATE EXTENSION
A flaw was found in PostgreSQL, where some PostgreSQL extensions did not use the searchpath safely in their installation script. This flaw allows an attacker with sufficient privileges to trick an administrator into executing a specially crafted script during the extension's installation or updat...
CVE-2020-24447
Adobe Lightroom Classic version 10.0 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2020-24440
Adobe Prelude version 9.0.1 and earlier is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2020-24440
Adobe Prelude version 9.0.1 and earlier is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2020-24447
Adobe Lightroom Classic version 10.0 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Design/Logic Flaw
Adobe Prelude version 9.0.1 and earlier is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
