Lucene search
+L

304 matches found

CVE
CVE
•added 2026/09/17 3:24 p.m.•35 views

CVE-2026-56795

Dell Server Update Utility versions prior to 26.07.01 are affected by an Uncontrolled Search Path Element vulnerability. A low-privileged attacker with local access could exploit this to achieve code execution , with a CVSS 3.1 score of 8.2 (HIGH) and a changed scope impacting confidentiality, in...

8.2CVSS5.9AI score0.00188EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/17 3:24 p.m.•13 views

CVE-2026-56795

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

8.2CVSS5.9AI score0.00188EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 3:24 p.m.•18 views

EUVD-2026-81691

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

8.2CVSS5.9AI score0.00188EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•4 views

CVE-2026-56795: Uncontrolled Search Path Element

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

8.2CVSS5.9AI score0.00188EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•1 views

CVE-2026-92180: Uncontrolled Search Path Element

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker must first obtain the ability to...

7.8CVSS7.5AI score0.00195EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•19 views

PT-2026-92195

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker must first obtain the ability to...

7.8CVSS7.4AI score0.00195EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/09 1:17 a.m.•7 views

DEBIAN-CVE-2026-87530

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

8.1CVSS6.8AI score0.00144EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 7:32 p.m.•21 views

CVE-2026-76199

Photoshop Desktop is affected by an Uncontrolled Search Path Element (CWE-427) vulnerability that could allow an attacker to achieve arbitrary code execution in the context of the current user. Exploitation requires user interaction , specifically that a victim opens a malicious file. The CVSS 3....

8.6CVSS8.6AI score0.00293EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-76199: Uncontrolled Search Path Element

Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that...

8.6CVSS8.5AI score0.00293EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•20 views

PT-2026-87891

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

4.4CVSS5.7AI score0.00574EPSS
SaveExploits0References2
Talos
Talos
•added 2026/08/26 12:00 a.m.•13 views

Adobe Photoshop Installation privilege escalation vulnerability

Summary A privilege escalation vulnerability exists in the Installation functionality of Photoshop versions: PhotoshopSet-Up.exe version 2.11.0.30. A specially crafted malformed file can lead to privilege escalation. An attacker can replace with a malicious file to trigger this vulnerability...

8.6CVSS6.1AI score0.00305EPSS
SaveExploits0
Snyk
Snyk
•added 2026/08/25 4:35 p.m.•10 views

Uncontrolled Search Path Element

Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Uncontrolled Search Path Element through the bundled xmllint tool in the underlying dependency. An attacker can potentially influence the search path used for external libraries ...

9.8CVSS5.9AI score0.00122EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/20 12:00 a.m.•1 views

CVE-2026-55013: Uncontrolled Search Path Element

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...

7.1CVSS5.6AI score0.00463EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/17 1:44 p.m.•30 views

CVE-2026-56090

Dell ObjectScale versions before 4.3.0.1 have an Uncontrolled Search Path Element flaw exploitable by a low-privileged local attacker to elevate privileges; no exploitation or in-the-wild activity is documented in the provided documents.

7.3CVSS5.8AI score0.00173EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/08/17 1:44 p.m.•9 views

CVE-2026-56090

Dell ObjectScale, versions prior to 4.3.0.1, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.3CVSS5.8AI score0.00173EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/17 1:44 p.m.•40 views

CVE-2026-56090

Dell ObjectScale, versions prior to 4.3.0.1, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.3CVSS5.3AI score0.00173EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•2 views

CVE-2026-56090: Uncontrolled Search Path Element

Dell ObjectScale, versions prior to 4.3.0.1, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.3CVSS5.8AI score0.00173EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/05 4:25 a.m.•17 views

CVE-2026-66344

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerability CWE-427. An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges...

6.7CVSS7.4AI score0.0017EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/08/05 12:00 a.m.•20 views

The vulnerability of the FileZilla Client’s FTP client, related to an uncontrolled search path element, allows a hacker to execute arbitrary code and gain full control over the system.

The vulnerability of the FileZilla Client FTP client is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain full control over the system...

10CVSS6AI score0.00853EPSS
SaveExploits1References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•1 views

CVE-2026-66344: Uncontrolled Search Path Element

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerability CWE-427. An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges...

6.7CVSS7.4AI score0.0017EPSS
SaveExploits0References2
Rows per page
Query Builder