235 matches found
CVE-2026-21333 Illustrator | Untrusted Search Path (CWE-426)
Illustrator versions 29.8.4, 30.1 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
GHSA-JQPQ-MGVM-F9R6 OpenClaw: Command hijacking via unsafe PATH handling (bootstrapping + node-host PATH overrides)
Command hijacking via PATH handling Discovered: 2026-02-04 Reporter: @akhmittra Summary OpenClaw previously accepted untrusted PATH sources in limited situations. In affected versions, this could cause OpenClaw to resolve and execute an unintended binary "command hijacking" when running host...
OpenClaw has an arbitrary transcript path file write via gateway sessionFile
Summary In OpenClaw versions prior to 2026.2.12, the gateway accepted an untrusted sessionFile path when resolving the session transcript file. This could allow an authenticated gateway client to create and append OpenClaw session transcript records at an arbitrary path on the gateway host...
CVE-2026-0662
A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the current process due to an Untrusted Search Path being utilized...
CVE-2026-0662
A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the current process due to an Untrusted Search Path being utilized...
MiracleLinux 4 : xorg-x11-apps-7.6-6.AXS4, xorg-x11-utils-7.5-6.AXS4, xorg-x11-server-utils-7.5-13.AXS4 (AXSA:2013-314:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-314:01 advisory. xorg-x11-apps A collection of common X Window System applications. xorg-x11-server-utils A collection of utilities used to tweak and query the runtime...
MiracleLinux 3 : python-2.4.3-43.0.1.AXS3 (AXSA:2011-10:01)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-10:01 advisory. Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme or Java. Python includes modules,...
MiracleLinux 3 : elinks-0.11.1-6AXS3.1 (AXSA:2009-406:01)
The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2009-406:01 advisory. Links is a text-based Web browser. Links does not display any images, but it does support frames, tables and most other HTML tags. Links' advantage...
Adobe Reader < 20.005.30838 / 25.001.20997 Multiple Vulnerabilities (APSB25-119)
The version of Adobe Reader installed on the remote Windows host is a version prior to 20.005.30838 or 25.001.20997. It is, therefore, affected by multiple vulnerabilities. - Out-of-bounds Read CWE-125 potentially leading to Arbitrary code execution CVE-2025-64899 - Untrusted Search Path CWE-426...
Adobe Acrobat < 20.005.30838 / 24.001.30307 / 25.001.20997 Multiple Vulnerabilities (APSB25-119)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 20.005.30838, 24.001.30307, or 25.001.20997. It is, therefore, affected by multiple vulnerabilities. - Out-of-bounds Read CWE-125 potentially leading to Arbitrary code execution CVE-2025-64899 - Untrusted Sear...
CVE-2025-12819
Untrusted search path in authquery connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious searchpath parameter in the StartupMessage...
EUVD-2025-201089
Untrusted search path in authquery connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious searchpath parameter in the StartupMessage...
Exploit for CVE-2024-32019
The ndsudo vulnerability allows an attacker to gain root permiss...
Oracle Siebel Server is prior to 25.10 (October 2025 CPU)
The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory. - Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through...
EUVD-2011-2948
Malware in sbrugna...
EUVD-2018-1408
Malware in sbrugna...
EUVD-2015-3922
Malware in sbrugna...
EUVD-2008-1810
Malware in sbrugna...