8994 matches found
Intel Ethernet Port Configuration Tool 代码问题漏洞
Intel Ethernet Port Configuration Tool Intel EPCT is a command line utility from Intel Corporation that allows users to change the link type of a device. A code issue vulnerability exists in Intel Ethernet Port Configuration Tool versions prior to 1.42.8.0 that stems from the presence of an...
Intel Chipset Software Installation Utility 代码问题漏洞
Intel Chipset Software Installation Utility is a chipset software installation utility from Intel Corporation USA. A code issue vulnerability exists in versions prior to Intel Chipset Software Installation Utility 10.1.19867.8574, which stems from the presence of an uncontrolled search path that...
Intel High Level Synthesis Compiler 代码问题漏洞
Intel High Level Synthesis Compiler is a High Level Synthesis HLS tool from Intel Corporation. A code issue vulnerability exists in Intel High Level Synthesis Compiler prior to version 24.2, which stems from the presence of an uncontrolled search path that could allow an authenticated user to...
PT-2025-6626 · Intel · Intel Ethernet Adapter Complete Driver Pack
Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Adapter Complete Driver Pack versions prior to 29.1 Description: The issue is related to an uncontrolled search path in some installations of the IntelR Ethernet Adapter Complete Driver Pack. This could potentially allow an...
PT-2025-6660
Name of the Vulnerable Software and Affected Versions: IntelR Advisor versions prior to 2024.2 Description: The issue concerns an uncontrolled search path in some IntelR Advisor software, which may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2025-6640 · Intel · Intel Mpi Library
Name of the Vulnerable Software and Affected Versions: IntelR MPI Library for Windows versions prior to 2021.13 Description: The issue concerns an uncontrolled search path in some IntelR MPI Library for Windows software. This could potentially allow an authenticated user to enable escalation of...
PT-2025-6633
Name of the Vulnerable Software and Affected Versions IntelR QuickAssist Technology software versions prior to 2.2.0 Description The issue is related to an uncontrolled search path in some IntelR QuickAssist Technology software. This could potentially allow an authenticated user to enable...
PT-2025-6649 · Intel · Intel Thread Director Visualizer
Name of the Vulnerable Software and Affected Versions: IntelR Thread Director Visualizer version 1.0.0 Description: The issue concerns an uncontrolled search path in the IntelR Thread Director Visualizer software. This could potentially allow an authenticated user to enable escalation of privileg...
PT-2025-6683 · Intel · Intel Server M50Fcp
Name of the Vulnerable Software and Affected Versions: IntelR Server M50FCP family versions prior to R01.02.0002 Description: The issue is related to an uncontrolled search path element in some BIOS and System Firmware Update Packages. This could potentially allow a privileged user to enable...
PT-2025-6298 · Microsoft · Visual Studio
Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Visual Studio installer, which is associated with an uncontrolled search path element. Exploitation of this issu...
The vulnerability of the profapi.dll library in the Discord messaging system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the profapi.dll library in the Discord instant messaging system is related to the use of an unreliable search path. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...
PT-2025-6648 · Intel · Intel High Level Synthesis Compiler
Name of the Vulnerable Software and Affected Versions: IntelR High Level Synthesis Compiler versions prior to 24.2 Description: The issue is related to an uncontrolled search path in some IntelR High Level Synthesis Compiler software. This may allow an authenticated user to potentially enable...
CVE-2021-26738
Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be able to execute code with root privileges...
CVE-2025-0707
A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally...
The vulnerability of Fortinet FortiClient Windows security devices, related to the use of an insecure search path, allows attackers to execute arbitrary code.
The vulnerability of Fortinet FortiClient Windows protection devices is related to the use of an insecure lookup path. Exploiting this vulnerability allows attackers to execute arbitrary code...
CVE-2022-1824
An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local attacker to perform a sideloading attack by using a specific file name. This could result in the user gaining elevated permissions and being able to execute arbitrary co...
CVE-2022-4258
In multiple versions of HIMA PC based Software an unquoted Windows search path vulnerability might allow local users to gain privileges via a malicious .exe file and gain full access to the system...
CVE-2022-4956
A vulnerability classified as critical has been found in Caphyon Advanced Installer 19.7. This affects an unknown part of the component WinSxS DLL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may ...
CVE-2017-20123
A vulnerability was found in Viscosity 1.6.7. It has been classified as critical. This affects an unknown part of the component DLL Handler. The manipulation leads to untrusted search path. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...