ROS-20260216-73-0022

A vulnerability in the imgstore.php script of the Zabbix IT infrastructure monitoring system is related to uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

CVE-2026-2516 Unidocs ezPDF DRM Reader/ezPDF Reader SHFOLDER.dll uncontrolled search path

A vulnerability was identified in Unidocs ezPDF DRM Reader and ezPDF Reader 2.0/3.0.0.4. This affects an unknown part in the library SHFOLDER.dll. Such manipulation leads to uncontrolled search path. The attack needs to be performed locally. Attacks of this nature are highly complex. It is...

CVE-2026-2516

Unidocs ezPDF DRM Reader and ezPDF Reader 2.0/3.0.0.4 (32-bit) are affected by a vulnerability in SHFOLDER.dll causing an uncontrolled search path. The issue requires local access to exploit and is described as high impact (confidentiality, integrity, availability) with high exploit maturity (pro...

CVE-2026-2516 Unidocs ezPDF DRM Reader/ezPDF Reader SHFOLDER.dll uncontrolled search path

A vulnerability was identified in Unidocs ezPDF DRM Reader and ezPDF Reader 2.0/3.0.0.4. This affects an unknown part in the library SHFOLDER.dll. Such manipulation leads to uncontrolled search path. The attack needs to be performed locally. Attacks of this nature are highly complex. It is...

PT-2026-8237

Name of the Vulnerable Software and Affected Versions Unidocs ezPDF DRM Reader and ezPDF Reader versions 2.0 and 3.0.0.4 Description A security issue exists in Unidocs ezPDF DRM Reader and ezPDF Reader. The problem is related to an uncontrolled search path within the SHFOLDER.dll library. This...

Unidocs ezPDF DRM Reader和Unidocs ezPDF Reader 代码问题漏洞

Unidocs ezPDF DRM Reader and Unidocs ezPDF Reader are PDF readers developed by Unidocs, a company from South Korea. There are code vulnerabilities in Unidocs ezPDF DRM Reader and Unidocs ezPDF Reader 2.0, as well as Unidocs ezPDF Reader 3.0.0.4. These vulnerabilities stem from uncontrolled search...

Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart

CVE-2024-48990 — needrestart Local Privilege Escalation Local...

CVE-2025-15569

A flaw has been found in Artifex MuPDF up to 1.26.1 on Windows. The impacted element is the function getsystemdpi of the file platform/x11/winmain.c. This manipulation causes uncontrolled search path. The attack requires local access. The attack is considered to have high complexity. The...

CVE-2025-62854 File Station 5

An uncontrolled resource consumption vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Statio...

CVE-2025-62854

File Station 5 vulnerability CVE-2025-62854 is an uncontrolled resource consumption issue that can be exploited to cause a DoS when an attacker with a valid user account is present. Affected software: File Station 5. The issue arises within the service when resource consumption is not properly co...

Uncontrolled Search Path Element

Overview Affected versions of this package are vulnerable to Uncontrolled Search Path Element due to the insecure default configuration that loads configuration files from the C:\etc directory on Windows systems. An attacker can compromise confidentiality, integrity, and availability by placing...

CVE-2025-32452

Uncontrolled search path for some AI Playground before version 2.6.1 beta within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2025-20106

Uncontrolled search path in some software installer for some VTuneTM Profiler software and IntelR oneAPI Base Toolkits before version 2025.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity...

CVE-2025-32452

Uncontrolled search path for some AI Playground before version 2.6.1 beta within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2025-32452

The CVE-2025-32452 entry concerns AI Playground prior to version 2.6.1 beta, where an uncontrolled search path in Ring 3: User Applications may enable privilege escalation. The vulnerability is described as requiring an authenticated user with high attack complexity and active user interaction, w...

CVE-2025-32452

Uncontrolled search path for some AI Playground before version 2.6.1 beta within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2025-20106

The CVE-2025-20106 entry concerns VTune Profiler software and Intel oneAPI Base Toolkit installers. The vulnerability is caused by an Uncontrolled search path in the installer, affecting Ring 3 user applications. It may enable elevation of privilege when an authenticated user with high attack com...

CVE-2025-20106

Uncontrolled search path in some software installer for some VTuneTM Profiler software and IntelR oneAPI Base Toolkits before version 2025.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity...

CVE-2025-20106

Uncontrolled search path in some software installer for some VTuneTM Profiler software and IntelR oneAPI Base Toolkits before version 2025.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity...

CVE-2025-15569

A flaw has been found in Artifex MuPDF up to 1.26.1 on Windows. The impacted element is the function getsystemdpi of the file platform/x11/winmain.c. This manipulation causes uncontrolled search path. The attack requires local access. The attack is considered to have high complexity. The...