PT-2025-7901 · Esri · Esri Arcgis Allsource

Name of the Vulnerable Software and Affected Versions: Esri ArcGIS AllSource versions 1.2 through 1.3 Description: There is an untrusted search path vulnerability that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the...

CVE-2025-24831

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...

CVE-2025-24831

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...

CVE-2025-24831

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...

CVE-2025-24831

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...

CVE-2025-24831

CVE-2025-24831 affects Acronis Cyber Protect Cloud Agent on Windows (pre-build 39378). The local privilege escalation stems from an unquoted search path vulnerability in the agent executable. CVSSv3.0 indicates LOCAL access, LOW attack complexity, and LOW privileges required, with HIGH impact on ...

Acronis Cyber Protect Cloud Agent 代码问题漏洞

Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A code issue vulnerability exists in Acronis Cyber Protect Cloud Agent that stems from a local elevation of privilege due to an unreferenced search path vulnerability...

CVE-2025-0145

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access...

CVE-2025-0145 Zoom Workplace Apps for Windows - Untrusted Search Path

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access...

CVE-2025-0145

CVE-2025-0145 affects Zoom Workplace Desktop App for Windows. Vulnerability: untrusted search path in the installer could allow an authorized local user to escalate privileges. Public details consistently reference installations prior to version 6.2.5 as affected (e.g., Nessus ZSB-25004 notes). R...

CVE-2025-0145 Zoom Workplace Apps for Windows - Untrusted Search Path

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access...

CVE-2025-21107

Dell NetWorker, versions prior to 19.11.0.3, all versions of 19.10 & prior versions contains an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-21107

Dell NetWorker, versions prior to 19.11.0.3, all versions of 19.10 & prior versions contains an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-21107

CVE-2025-21107 relates to an Unquoted Search Path or Element vulnerability in Dell NetWorker. Public sources in the connected documents show that Dell NetWorker versions prior to 19.11.0.3, and all 19.10 and earlier, are affected. The underlying issue is a path quoting flaw that could allow a low...

CVE-2025-21107

Dell NetWorker, versions prior to 19.11.0.3, all versions of 19.10 & prior versions contains an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

PT-2025-4193 · Dell · Dell Networker

Name of the Vulnerable Software and Affected Versions: Dell NetWorker versions prior to 19.11.0.3 Dell NetWorker versions 19.10 and earlier Description: The issue is related to an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit...

CVE-2025-0732

A vulnerability, which was classified as problematic, has been found in Discord up to 1.0.9177 on Windows. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to untrusted search path. The attack needs to be approached locally. The complexity of...

CVE-2025-0733

A vulnerability, which was classified as problematic, was found in Postman up to 11.20 on Windows. This affects an unknown part in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The...

CVE-2025-0733 Postman profapi.dll untrusted search path

A vulnerability, which was classified as problematic, was found in Postman up to 11.20 on Windows. This affects an unknown part in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The...

CVE-2025-0733

CVE-2025-0733 pertains to Postman (Windows) up to version 11.20, affecting an unspecified part of profapi.dll. The issue enables an untrusted search path via local access, with attack complexity described as high and exploitability deemed difficult. Public documentation notes a denial of a confir...