CVE-2025-57716

An Uncontrolled Search Path Element vulnerability CWE-427 in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder...

CVE-2025-57716

An Uncontrolled Search Path Element vulnerability CWE-427 in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder...

CVE-2025-57716

FortiClient on Windows is affected by an Uncontrolled Search Path Element (CWE-427) vulnerability across FortiClient versions 7.0–7.2.11 and 7.4.0–7.4.3. The issue enables local, low-privilege users to perform a DLL hijacking attack by placing a malicious DLL in the FortiClient Online Installer i...

Windows Search Service Denial of Service Vulnerability

Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

Windows Search Service Denial of Service Vulnerability

Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

Windows Search Service Denial of Service Vulnerability

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally...

CVE-2025-10558

A stored Cross-site Scripting XSS vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-11664

A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /admin/search-appointment.php. Such manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...

CVE-2025-59889: Uncontrolled Search Path Element

Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the access to the software package. This security issue has been fixed in the latest version of IPP which is available on the Eaton download center...

Microsoft Windows Access Control Error Vulnerability

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An access control error vulnerability exists in Microsoft Windows Search Service, which can be exploited by an attacker to cause a denial of service on the system...

PT-2025-41961

Name of the Vulnerable Software and Affected Versions FortiClient versions 7.0 through 7.2.11 and 7.4.0 through 7.4.3 Description An uncontrolled search path element issue exists in FortiClient on Windows. A local, low-privileged user could potentially perform a DLL hijacking attack by placing a...

PT-2025-42090

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A flaw exists in the Microsoft Windows Search Component due to improper input validation. This issue could allow a local attacker to cause a denial of service. Recommendations At th...

PT-2025-42082

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An issue with input validation in the Microsoft Windows Search Component can allow a local attacker to cause a denial of service. Recommendations At the moment, there is no...

CVE-2025-59190: Improper Input Validation

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally...

CVE-2025-59198: Improper Input Validation

Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

Fortinet FortiClientWindows code issue vulnerabilities

Fortinet FortiClientWindows is a Windows-based mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance. A code issue vulnerability exists ...

Microsoft Windows Input Validation Vulnerability

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An input validation error vulnerability exists in Microsoft Windows Search Service, which can be exploited by an attacker to cause a denial of service on the system...

CVE-2025-59253: Improper Access Control

Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

PT-2025-42131

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An improper access control issue exists in the Microsoft Windows Search Component. This can allow an authorized attacker to cause a denial of service locally. Recommendations At the...

OpenJDK Insecure Search Path

The vulnerability of the OpenJDK library for desktop applications in JetBrains Runtime relates to the use of an insecure search path. Exploiting this vulnerability could allow attackers to compromise the confidentiality and integrity of the protected information...