3759 matches found
CVE-2020-0570
Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access...
CVE-2020-8315: Uncontrolled Search Path Element
In Python CPython 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected...
CVE-2019-6858
A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...
Path traversal
A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...
CVE-2019-6858: Uncontrolled Search Path Element
A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...
PT-2020-11218
Name of the Vulnerable Software and Affected Versions MSX Configurator versions prior to V1.0.8.1 Description A privilege escalation issue exists due to an uncontrolled search path element, which could be exploited by injecting a malicious DLL. Recommendations For versions prior to V1.0.8.1, upda...
Privilege escalation
Uncontrolled search path element in the installer for IntelR SNMP Subagent Stand-Alone for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-14600: Uncontrolled Search Path Element
Uncontrolled search path element in the installer for IntelR SNMP Subagent Stand-Alone for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2016-6592: Uncontrolled Search Path Element
A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and...
PT-2020-1556
Name of the Vulnerable Software and Affected Versions IntelR SNMP Subagent Stand-Alone for Windows affected versions not specified Description The issue is related to an uncontrolled search path element in the installer, which may allow an authenticated user to potentially enable escalation of...
PT-2020-6894
Name of the Vulnerable Software and Affected Versions QT Library versions prior to 5.14.0 QT Library versions prior to 5.12.7 QT Library versions prior to 5.9.10 Description The issue is related to an uncontrolled search path in the QT Library, which may allow an authenticated user to potentially...
CVE-2019-19235: Uncontrolled Search Path Element
AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 for Windows 10 notebook PCs could lead to unsigned code execution with no additional execution. The user must put an application at a particular path, with a particular file name...
CVE-2019-18575
Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system...
CVE-2019-18575
Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system...
Design/Logic Flaw
Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system...
CVE-2019-18575
Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system...
CVE-2019-18575: Uncontrolled Search Path Element
Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system...
PT-2019-15528
Name of the Vulnerable Software and Affected Versions Dell Command Configure versions prior to 4.2.1 Description The issue allows a locally authenticated malicious user to exploit an uncontrolled search path vulnerability. This can be done by creating a symlink to a target file, enabling the...