106 matches found
The vulnerability of the Windows Storage component in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Windows Storage component in operating systems involves the use of an insecure search path. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the amcheck extension in the PostgreSQL database management system allows a hacker to enhance their privileges and execute arbitrary code.
The vulnerability of the amcheck extension in the PostgreSQL database management system is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code by manipulating the searchpath parameter...
The vulnerability affects the update service for PDF document viewing software called Foxit PDF Reader (previously Foxit Reader) and the PDF file editing software called Foxit PDF Editor (previously Foxit PhantomPDF). This vulnerability allows attackers to escalate their privileges and execute arbitrary code.
The vulnerability of the PDF document viewing service in Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of an insecure search path. Exploiting this vulnerability can allow attackers to enhance their privileg...
Siemens COMOS permission licensing and access control vulnerabilities
Siemens Comos is a factory engineering software solution developed by the German company Siemens. Siemens COMOS has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from an insecure search path within the IAM Client SDK. Attackers can exploit these...
The vulnerability of Adobe Illustrator, related to the use of an insecure search path, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Illustrator graphic editor is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code...
The vulnerability of the aiven-extras extension of the PostgreSQL database management system allows a hacker to elevate their privileges to superuser and execute arbitrary code.
The vulnerability of the aiven-extras extension in the PostgreSQL database management system is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to elevate their privileges to superuser and execute arbitrary code...
CVE-2026-6645
The CVE-2026-6645 vulnerability affects the PaperCut Print Deploy Client for Windows, specifically the pc-printer-updater.exe component. The issue arises when the application performs an internal validation by invoking a secondary system utility without an absolute path, relying on the OS search ...
CVE-2026-6645 Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows
An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application, which typically operates with high-level system privileges, attempts to perform an internal validation check by invoking a secondary system...
CVE-2026-6645 Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows
An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application, which typically operates with high-level system privileges, attempts to perform an internal validation check by invoking a secondary system...
The vulnerability of the Windows Storage component in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Windows Storage component in operating systems involves the use of an insecure search path. Exploiting this vulnerability can allow attackers to gain increased privileges...
Amazon Web Services Advanced Go Wrapper 安全漏洞
Amazon Web Services Advanced Go Wrapper is an open-source extension to existing Go language drivers provided by Amazon Web Services. There is a security vulnerability in Amazon Web Services Advanced Go Wrapper, which stems from an insecure search path in the GlobalDatabasePlugin. This vulnerabili...
The vulnerability of the Azure Monitor Agent Metrics Extension lies in its use of an insecure search path, allowing attackers to escalate their privileges.
The vulnerability of the Azure Monitor Agent Metrics Extension is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to increase their privileges...
IP Setting Software may insecurely load Dynamic Link Libraries
Overview IP Setting Software provided by i-PRO Co., Ltd. contains the following vulnerability in the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2026-34488 i-PRO Co., Ltd. reported this vulnerability to IPA to notify...
The vulnerability of the Binary Handler component of the PDF viewing software, which supports formats such as EPUB, MOBI, FB2, CHM, XPS, and DjVu, as well as SumatraPDF, allows a hacker to execute arbitrary code.
The vulnerability of the BinaryHandler component in the PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu document viewing software, SumatraPDF, is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...
GreenShot 代码问题漏洞
GreenShot is a lightweight screenshot software tool for Windows developed by GreenShot Inc. Versions of Greenshot 1.3.312 and earlier contained a code vulnerability that stemmed from an insecure search path for executable files. This vulnerability could allow local attackers to execute arbitrary...
The vulnerability of the Adobe Illustrator graphic editor lies in the use of an insecure search path, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Illustrator graphic editor is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code...
The vulnerability of Notepad++, a text editor, is related to the use of an insecure search path, allowing attackers to execute arbitrary code.
The vulnerability of the Notepad++ text editor is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially crafted executable file...
ROS-20260209-73-0039
A vulnerability in the Agent component of the Zabbix IT infrastructure monitoring system is related to the use of an insecure search path. Exploitation of the vulnerability could allow an attacker to gain write access to arbitrary system files in the /home/cecuser directory...
ROS-20260209-73-0040
A vulnerability in the Agent component of the Zabbix IT infrastructure monitoring system is related to the use of an insecure search path. Exploitation of the vulnerability could allow an attacker to gain write access to arbitrary system files in the /home/cecuser directory...