40545 matches found
CVE-2025-20050
Uncontrolled search path for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...
CVE-2025-20050
Intel CIP software prior to WIN_DCA_2.4.0.11001 is affected by an Uncontrolled search path issue in Ring 3 User Applications that can lead to privilege escalation and local code execution. The vulnerability arises from improper/unsafe path handling, enabling an unprivileged, authenticated user wi...
Windows Administrator Protection Elevation of Privilege Vulnerability
Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally...
EUVD-2025-74038
AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escalation within Microsoft Windows operating system. This vulnerability can only be exploited if the attacker has access to the local Windows machine and sufficient access rights...
CVE-2025-10714
AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escalation within Microsoft Windows operating system. This vulnerability can only be exploited if the attacker has access to the local Windows machine and sufficient access rights...
CVE-2025-10714
AXIS Optimizer is affected by an unquoted search path vulnerability that could enable privilege escalation on Windows. Exploitation requires local access and administrator rights to write in the AXIS Optimizer installation directory. CVSSv3.1 base metrics indicate a HIGH severity (8.4) with LOCAL...
CVE-2025-10714
AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escalation within Microsoft Windows operating system. This vulnerability can only be exploited if the attacker has access to the local Windows machine and sufficient access rights...
CVE-2025-10714
AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escalation within Microsoft Windows operating system. This vulnerability can only be exploited if the attacker has access to the local Windows machine and sufficient access rights...
CVE-2025-12928
A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument username/phone results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and ma...
PT-2025-46400
Name of the Vulnerable Software and Affected Versions IntelR One Boot Flash Update IntelR OFU versions prior to 14.1.31 Description An uncontrolled search path issue exists in some IntelR One Boot Flash Update IntelR OFU software. This issue, present within Ring 3: User Applications, may allow an...
PT-2025-46421
Name of the Vulnerable Software and Affected Versions Instrumentation and Tracing Technology API ITT API versions prior to 3.25.4 Description The Instrumentation and Tracing Technology API ITT API software contains an uncontrolled search path issue within Ring 3: User Applications. This may allow...
AXIS OS security vulnerabilities
AXIS OS is an edge device operating system from the Swedish company Axis AXIS. AXIS OS has a security vulnerability that stems from an unquoted search path vulnerability that could lead to elevation of privilege in Microsoft Windows operating systems...
CVE-2025-32449: Unquoted Search Path or Element
Unquoted search path for some PRI Driver software before version 03.03.1002 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...
Intel CIP code issues and vulnerabilities
Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from an uncontrolled search path, which can be exploited by an attacker to cause elevation of...
PT-2025-46431
Name of the Vulnerable Software and Affected Versions PRI Driver software versions prior to 03.03.1002 Description An unquoted search path in some PRI Driver software before version 03.03.1002 within Ring 3: User Applications may allow an escalation of privilege. An unprivileged software adversar...
PT-2025-46427
Name of the Vulnerable Software and Affected Versions Intel oneAPI DPC++C++ Compiler FPGA Support Package versions prior to 2025.0.1 Description An uncontrolled search path issue exists in the FPGA Support Package for the Intel oneAPI DPC++C++ Compiler software. This issue, occurring within Ring ...
PT-2025-46394
Name of the Vulnerable Software and Affected Versions IntelR System Support Utility versions prior to 4.1.0 Description An uncontrolled search path exists in the IntelR System Support Utility. This issue, present within Ring 3: User Applications, may allow an escalation of privilege. A local,...
CVE-2025-20065: Uncontrolled Search Path Element
Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...
CVE-2025-20050: Uncontrolled Search Path Element
Uncontrolled search path for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...