CVE-2015-4173

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE%...

CVE-2015-4173

Dell SonicWall NetExtender is affected by CVE-2015-4173, a local privilege-escalation due to an unquoted Windows search path in the autorun value. Affected as: NetExtender before 7.5.227 and 8.0.x before 8.0.238, used with SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv. Root cause: ...

Remote code execution

Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a...

CVE-2015-2369

Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a...

CVE-2015-2368

CVE-2015-2368 is a Windows untrusted search path vulnerability that allows local privilege escalation by placing a Trojan DLL in the current working directory. Affected: Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, Windows RT 8.1. Root cause: DLL hijack when a p...

Path traversal

Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the imagepath parameter in a cancel action...

Path traversal

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows remote attackers to read arbitrary files via a full pathname in the requrl parameter...

FreeBSD : proxychains-ng -- current path as the first directory for the library search path (9471ec47-05a2-11e5-8fda-002590263bf5)

Mamoru TASAKA reports : proxychains4 sets LDPRELOAD to dlopen libproxychains4.so and execvp the arbitrary command user has specified. proxychains4 sets the current directory as the first path to search libproxychains4.so %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

DLA-235-1 ruby1.9.1 - security update

Bulletin has no description...

CVE-2015-3409

Module::Signature prior to 0.75 is vulnerable to an untrusted search path, enabling local privilege escalation by placing a Trojan horse module in the current working directory. The issue stems from loading modules from relative paths in @INC during signature verification, leading to arbitrary co...

Code injection

Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming SWS 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as...

CVE-2015-1484

Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming SWS 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as...

Design/Logic Flaw

Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2015-2789

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder...

CVE-2015-2789

Summary : CVE-2015-2789 is an unquoted Windows search path vulnerability in Foxit Reader’s Cloud plugin (Foxit Cloud Safe Update Service) affecting Foxit Reader 6.1–7.0.6.1126. This local privilege-escalation flaw can allow a non-privileged, local attacker to gain elevated privileges via a Trojan...

Telerik Analytics Monitor Library Search Path Vulnerability

Telerik Analytics Monitor Library is a library for third-party application analytics services to collect information about applications. A search path vulnerability in Telerik Analytics Monitor Library allows local attackers to exploit the vulnerability to execute in the context of an application...

Various Siemens products have search path vulnerabilities

Siemens SIMATIC ProSave; SIMATIC CFC 8 SP4 upd9 8.1 upd1; SIMATIC STEP 7 5.5 SP1 Hf2 5.5 SP2 5.5 SP4 HF4 HF7 sp35.5; SIMOTION Scout 4.4 Starter 4.4 HF3 are all Siemens Siemens Germany company in Germany. A search path vulnerability exists in several Siemens products, allowing local users to gain...

CVE-2015-0884

CVE-2015-0884 describes an unquoted Windows search path privilege-escalation vulnerability in Toshiba Bluetooth Stack for Windows (before 9.10.32(T)) and Toshiba Service Station (before 2.2.14). A local attacker can exploit the issue by delivering a Trojan horse application whose name is an initi...

KLA10464 Multiple vulnerabilities in Mozilla products

Multiple serious vulnerabilities have been found in Mozilla products. Malicious users can exploit these vulnerabilities to cause denial of service, gain privilleges, obtain sensitiv information, execute arbitrary code, spoof user interface or read local files. Below is a complete list of...

CVE-2014-9646

Unquoted Windows search path vulnerability in the GoogleChromeDistribution::DoPostUninstallOperations function in installer/util/googlechromedistribution.cc in the uninstall-survey feature in Google Chrome before 40.0.2214.91 allows local users to gain privileges via a Trojan horse program in the...