CVE-2023-39374

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element...

CVE-2023-39374

CVE-2023-39374 affects ForeScout NAC SecureConnector 11.2. The issue is described as CWE-427: Uncontrolled Search Path Element, attributed to an uncontrolled search path element in the affected software. According to NVD/NVD-derived metrics, the vulnerability is rated CVSS v3.1 base score 7.8 (HI...

CVE-2023-39374 ForeScout NAC SecureConnector – CWE-427: Uncontrolled Search Path Element

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element...

USN-6330-1: Linux kernel (GCP) vulnerabilities

Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 Tavis Ormandy discovered that some AMD processors...

PTC Kepware KepServerEX (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : PTC Equipment : Kepware KepServerEX Vulnerabilities : Uncontrolled Search Path Element, Improper Input Validation, Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of...

SUSE CVE-2023-39615

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support...

The vulnerability of the AREA element in the Joplin note-taking application allows a attacker to perform XSS attacks.

The vulnerability of the AREA element in the Joplin note-taking application is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

(Pwn2Own) HP Color LaserJet Pro M479fdw Serial_Number Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of the SerialNumber element. The issue...

(Pwn2Own) HP Color LaserJet Pro M479fdw NotifyTo Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the NotifyTo element. The issue results from th...

The vulnerability of the microprogramming software used by the embedded video driver on the Server Board M10JNP2SB BMC Video Driver for Windows and Linux lies in an uncontrolled search path element, allowing a hacker to execute arbitrary code.

The vulnerability of the microprogramming software integrated into the Server Board M10JNP2SB BMC Video Driver for Windows and Linux lies in its uncontrolled search path mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of software for developing and optimizing Intel AI systems is related to an uncontrolled element in the search process, allowing attackers to enhance their privileges.

The vulnerabilities of the software used in the development and optimization of Intel AI systems are related to an uncontrollable element in the search process. Exploiting these vulnerabilities can allow attackers, who operate remotely, to enhance their privileges...

CVE-2022-4894

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element...

Oracle Linux 8 : postgresql:13 (ELSA-2023-4527)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4527 advisory. pgaudit pgrepack postgres-decoderbufs postgresql 13.11-1.0.1 - Update to 13.11 - Resolves: 2212815 - Update postgresql-setup to 8.7...

Texas Instruments WiLink WL18xx MCP driver security vulnerability

Texas Instruments WiLink WL18xx MCP driver is a single-band combo module MCP driver from Texas Instruments. A security vulnerability exists in WILINK8-WIFI-MCP8 8.5SP3 and prior versions, which stems from the WiLink WL18xx MCP driver not limiting the number of Information Elements IEs of...

CVE-2023-34355

Uncontrolled search path element for some IntelR Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft Windows and before version 1.13.4 for linux may allow an authenticated user to potentially enable escalation of privilege via local access...

HP Printer Software Elevation of Privilege (HPSBPI03857)

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

Intel NUC Security Vulnerability

Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in Intel NUC. An attacker could exploit this vulnerability to obtain sensitive information. The following products are affected: IntelR NUC 13 Extreme Compute Element, IntelR NUC 13 Extreme Kit, IntelR N...

PT-2023-22171 · Intel · Intel Psr Sdk

Name of the Vulnerable Software and Affected Versions: IntelR PSR SDK versions prior to 1.0.0.20 Description: The issue is related to an uncontrolled search path element that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For Intel...

The vulnerability of the platform installer for SAP BusinessObjects Business Intelligence allows a perpetrator to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SAP BusinessObjects Business Intelligence platform installer is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to influence the confidentiality, integrity, and accessibility of the protected information by...

postgresql: schema_element defeats protective search_path changes

A flaw was found in PostgreSQL. Certain database calls could permit an attacker with elevated database-level privileges to execute arbitrary code...