Lucene search
+L

262 matches found

Snyk
Snyk
added 2025/09/09 5:44 p.m.6 views

Uncontrolled Search Path Element

Overview Affected versions of this package are vulnerable to Uncontrolled Search Path Element via the DLL loading process. An attacker can execute arbitrary code by placing a malicious DLL in a user-writable directory that is included in the system PATH. Remediation Upgrade LizardByte/Sunshine to...

8.4CVSS7.8AI score0.00218EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/05 6:30 a.m.46 views

GHSA-PH2W-CX28-VHRQ TkEasyGUI Affected by Uncontrolled Search Path Element Issue

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

8.5CVSS7.5AI score0.00163EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/09/05 5:24 a.m.35 views

CVE-2025-55671

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

8.5CVSS0.00163EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/02 8:15 p.m.11 views

CVE-2025-8614

NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

7.8CVSS6.2AI score0.00265EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/02 8:09 p.m.27 views

CVE-2025-9330

CVE-2025-9330 affects Foxit PDF Reader Update Service. The flaw: the Update Service loads a library from an unsecured location, enabling a local attacker who can execute low-privileged code to escalate to SYSTEM and execute code. Impact details aligned with the NVD/NZD entries indicate local priv...

7.8CVSS7.6AI score0.00178EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2025/08/13 12:00 a.m.16 views

PT-2025-33074

Name of the Vulnerable Software and Affected Versions: NoMachine affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system to exploi...

7.8CVSS7.5AI score0.00265EPSS
SaveExploits0References5
NVD
NVD
added 2025/08/12 9:15 p.m.9 views

CVE-2025-49571

Substance3D - Modeler versions 1.22.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses an uncontrolled search path to locate critical resources such as programs, ...

7.8CVSS0.00222EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/12 8:36 p.m.16 views

CVE-2025-49571 Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)

Substance3D - Modeler versions 1.22.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses an uncontrolled search path to locate critical resources such as programs, ...

7.8CVSS0.00222EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/08 7:18 p.m.21 views

CVE-2025-5480

Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Action1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to explo...

7.8CVSS7.5AI score0.00257EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 6:49 p.m.7 views

CVE-2025-5480 Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Action1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to explo...

7.8CVSS8AI score0.00257EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/22 12:00 a.m.25 views

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software lies in an uncontrollable search path element, which allows attackers to exploit their privileges.

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software relates to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.0015EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/05/22 12:00 a.m.11 views

The vulnerability of Intel graphics processor microsoftware is related to an uncontrolled search path element, which allows a hacker to increase their privileges.

The vulnerability of Intel graphics processor microsoftware is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.0015EPSS
SaveExploits0References2Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/22 12:00 a.m.10 views

The vulnerability of Intel graphics processor microsoftware is related to an uncontrolled search path element, which allows a hacker to increase their privileges.

The vulnerability of Intel graphics processor microsoftware is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.0015EPSS
SaveExploits0References2Affected Software6
NVD
NVD
added 2025/05/13 9:16 p.m.17 views

CVE-2025-43553

Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or...

7.8CVSS0.0024EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/13 8:24 p.m.9 views

CVE-2025-43553 Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)

Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or...

7.8CVSS7.8AI score0.0024EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/15 12:00 a.m.9 views

Microsoft Power Automate 安全漏洞

Microsoft Power Automate is a low-code automation platform from Microsoft Corporation USA that allows users to create automated workflows that connect and integrate various applications and services. A security vulnerability exists in Microsoft Power Automate that stems from insufficient control...

5.7CVSS6.1AI score0.00826EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.14 views

The vulnerability of the Microsoft Visual Studio software development tool, related to an uncontrolled search path element, allows a hacker to escalate their privileges.

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.3CVSS7.6AI score0.00908EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:00 a.m.14 views

The vulnerability of the Microsoft Visual Studio software development tool, related to an uncontrolled search path element, allows a hacker to escalate their privileges.

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.3CVSS7.6AI score0.00447EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:00 a.m.12 views

The vulnerability of the Microsoft Visual Studio software development tool, related to an uncontrolled search path element, allows a hacker to escalate their privileges.

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.3CVSS7.6AI score0.00447EPSS
SaveExploits0References2Affected Software2
RedhatCVE
RedhatCVE
added 2025/03/06 5:46 p.m.13 views

CVE-2024-10930

An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges...

7.1CVSS7.9AI score0.00367EPSS
SaveExploits0References1
Rows per page
Query Builder