The vulnerability of the Query Handler component of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server allows a perpetrator to cause service failures.

The vulnerability of the Query Handler component of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using ...

The vulnerability of the Safearchive library for processing tar and zip archives lies in its uncontrolled search path element, which allows attackers to escalate their privileges.

The vulnerability of the Safearchive library for processing tar and zip archives is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Intel High Level Synthesis (HLS) compilers lies in their uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of Intel’s High-Level Synthesis HLS compilers is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Intel Quartus Prime’s automated design system lies in its uncontrolled search path, which allows attackers to escalate their privileges.

The vulnerability of Intel Quartus Prime’s automated design system is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux Distros Unpatched Vulnerability : CVE-2022-30632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containin...

The vulnerability of the software for adjusting performance with the Intel Extreme Tuning Utility (Intel XTU) involves an uncontrolled search path element, allowing attackers to enhance their privileges.

The vulnerability of the software for configuring Intel Extreme Tuning Utility Intel XTU is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the design and analysis tools for developing efficient Intel Advisor code, as well as the Intel oneAPI Base Toolkit, related to an uncontrolled element in the search process, allows attackers to enhance their privileges.

The vulnerability of the design and analysis tools for developing efficient Intel Advisor code, as well as the set of development tools Intel oneAPI Base Toolkit, is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow attackers to enhance their...

Linux Distros Unpatched Vulnerability : CVE-2022-30633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via unmarshallin...

CVE-2024-10930

An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges...

CVE-2024-10930 Carrier Block Load Privilege Escalation

An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges...

CVE-2024-10930

CVE-2024-10930 affects Carrier Block Load software (Carrier Inc.), versions 4.00–4.16. The issue is an Uncontrolled Search Path Element that could allow DLL hijacking and arbitrary code execution with elevated privileges. Exploitation is reportedly active per PT-2025-7322; multiple advisories (e....

The vulnerability of the Intel Thread Director Visualizer, a tool for visualizing CPU loading, stems from an uncontrolled element in the search process. This allows attackers to exploit their privileges.

The vulnerability of the Intel Thread Director Visualizer, a tool for visualizing CPU loading, is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to increase their privileges...

AZL-57694 CVE-2024-45778 affecting package grub2 for versions less than 2.06-25

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash...

CVE-2024-45778

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash...

CVE-2024-45778 Grub2: fs/bfs: integer overflow in the bfs parser.

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash...

CVE-2025-27099

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-site scripting XSS via the tracker names used in the semantic timeframe deletion message. A tracker administrator with a semantic timeframe used by other trackers could use this...

The vulnerability of Acronis Cyber Protect 16’s data protection software lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of Acronis Cyber Protect 16 data protection software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Acronis Cyber Protect 16’s data protection software lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of Acronis Cyber Protect 16 data protection software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2025-1804

A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity...

CVE-2025-1804

CVE-2025-1804 affects Blizzard Battle.Net (Windows) up to version 2.39.0.15212. The vulnerability resides in an unknown function of profapi.dll and causes an uncontrolled search path, enabling local exploitation. The initial descriptions indicate a locally approached attack with high complexity a...