CVE-2023-39374: Uncontrolled Search Path Element

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element...

USN-6330-1: Linux kernel (GCP) vulnerabilities

Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 Tavis Ormandy discovered that some AMD processors...

PTC Kepware KepServerEX (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : PTC Equipment : Kepware KepServerEX Vulnerabilities : Uncontrolled Search Path Element, Improper Input Validation, Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of...

SUSE CVE-2023-39615

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support...

Joplin AREA XSS

The vulnerability of the AREA element in the Joplin note-taking application is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

(Pwn2Own) HP Color LaserJet Pro M479fdw Serial_Number Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of the SerialNumber element. The issue...

(Pwn2Own) HP Color LaserJet Pro M479fdw NotifyTo Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the NotifyTo element. The issue results from th...

AI Development Software Privilege Escalation

The vulnerabilities of the software used in the development and optimization of Intel AI systems are related to an uncontrollable element in the search process. Exploiting these vulnerabilities can allow attackers, who operate remotely, to enhance their privileges...

Server Board M10JNP2SB BMC Video Driver Code Execution

The vulnerability of the microprogramming software integrated into the Server Board M10JNP2SB BMC Video Driver for Windows and Linux lies in its uncontrolled search path mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2022-4894

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element...

CVE-2022-4894: Uncontrolled Search Path Element

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element...

Oracle Linux 8 : postgresql:13 (ELSA-2023-4527)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4527 advisory. pgaudit pgrepack postgres-decoderbufs postgresql 13.11-1.0.1 - Update to 13.11 - Resolves: 2212815 - Update postgresql-setup to 8.7...

svelecte-element (>=1.0.0, <=1.4.1) potentially affected by CVE-2023-38687 via svelecte (>=1.1.0, <=1.4.1)

svelecte NPM version =1.1.0, =1.0.0, =1.4.1 Source cves: CVE-2023-38687 Source advisory: MEND:CVE-2023-38687...

Texas Instruments WiLink WL18xx MCP driver security vulnerability

Texas Instruments WiLink WL18xx MCP driver is a single-band combo module MCP driver from Texas Instruments. A security vulnerability exists in WILINK8-WIFI-MCP8 8.5SP3 and prior versions, which stems from the WiLink WL18xx MCP driver not limiting the number of Information Elements IEs of...

CVE-2023-34355

Uncontrolled search path element for some IntelR Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft Windows and before version 1.13.4 for linux may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel NUC Security Vulnerability

Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in Intel NUC. An attacker could exploit this vulnerability to obtain sensitive information. The following products are affected: IntelR NUC 13 Extreme Compute Element, IntelR NUC 13 Extreme Kit, IntelR N...

CVE-2023-32617: Improper Input Validation

Improper input validation in some IntelR NUC Rugged Kit, IntelR NUC Kit and IntelR Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2023-22171 · Intel · Intel Psr Sdk

Name of the Vulnerable Software and Affected Versions: IntelR PSR SDK versions prior to 1.0.0.20 Description: The issue is related to an uncontrolled search path element that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For Intel...

SAP BusinessObjects Business Intelligence Auth Bypass

The vulnerability of the SAP BusinessObjects Business Intelligence platform installer is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to influence the confidentiality, integrity, and accessibility of the protected information by...

HP Printer Software Elevation of Privilege (HPSBPI03857)

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...