CVE-2024-9325 Intelbras InControl incontrol-service-watchdog.exe unquoted search path

A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Program Files x86\Intelbras\Incontrol Cliente\incontrolwebcam\incontrol-service-watchdog.exe. The manipulation leads to unquoted search path. It is possible to...

PT-2024-39574 · Intelbras · Intelbras Incontrol

Name of the Vulnerable Software and Affected Versions: Intelbras InControl versions up to 2.21.56 Description: A critical vulnerability has been found in Intelbras InControl, affecting an unknown part of the file C:Program Files x86IntelbrasIncontrol Clienteincontrol...

GHSA-CHQX-36RM-RF8H Grafana Alloy on Windows has Unquoted Search Path or Element vulnerability

Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM. This issue affects Alloy: before 1.3.4, from 1.4.0-rc.0 and prior to 1.4.1...

Grafana Agent (Flow mode) on Windows has Unquoted Search Path or Element vulnerability

Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows allows Privilege Escalation from Local User to SYSTEM. This issue affects Agent Flow before 0.43.3...

CVE-2024-8996

Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2...

CVE-2024-8975

Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1...

CVE-2024-8996

Grafana Agent (Flow mode) on Windows is affected by CVE-2024-8996 (Unquoted Search Path or Element), allowing Privilege Escalation from Local User to SYSTEM. Affected versions: Agent Flow prior to 0.43.2. The issue is addressed in Grafana Agent v0.43.3 (and related security release). Exploitation...

CVE-2024-8975

Technical details about CVE-2024-8975 (Grafana Alloy Unquoted Search Path) are not provided in the connected documents. The initial description offers some context, but no product versions, root cause, or remediation specifics beyond public advisories. Monitor for updates.

CVE-2024-8975 Grafana Alloy on Windows Unquoted service path

Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1...

Grafana Agent 安全漏洞

Grafana Agent is an OpenTry Collector distribution of Grafana open source. A security vulnerability exists in Grafana Agent versions prior to 0.43.2 that stems from an unquoted search path or element vulnerability that allows elevation of privilege...

Grafana Alloy 安全漏洞

Grafana Alloy is an open source OpenTetry Collector distribution of Grafana Open Source. A security vulnerability exists in Grafana Alloy versions prior to 1.3.3 that stems from an unquoted search path or element vulnerability that allows elevation of privilege...

PT-2024-6557 · Grafana +1 · Grafana Agent +1

Name of the Vulnerable Software and Affected Versions: Grafana Agent versions prior to 0.43.2 Grafana Agent versions prior to 0.43.3 Description: The issue is related to an Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows, which allows Privilege Escalation from...

CVE-2024-34153

Uncontrolled search path element in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34153

Uncontrolled search path element in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34153

CVE-2024-34153 affects Intel(R) RAID Web Console software (all versions). Root cause: an uncontrolled search path element that can let an authenticated, locally privileged user escalate privileges. Explanations from NVD/Red Hat Intel advisory confirm local access attack vector with HIGH impact to...

GHSA-WJ4J-QC2M-FGH7 Mattermost Desktop App Uncontrolled Search Path Vulnerability

Mattermost Desktop App versions =5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able to put an cmd.exe file in the Downloads folder of a user's machine to cause remote code execution on that machine...

Mattermost Desktop App Uncontrolled Search Path Vulnerability

Mattermost Desktop App versions =5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able to put an cmd.exe file in the Downloads folder of a user's machine to cause remote code execution on that machine...

PT-2024-7677 · Intel · Intel Raid Web Console

Name of the Vulnerable Software and Affected Versions: IntelR RAID Web Console software for all versions Description: The issue is related to an uncontrolled search path element in the IntelR RAID Web Console software. This may allow an authenticated user to potentially enable escalation of...

Intel Raid Web Console 代码问题漏洞

Intel Raid Web Console is a web-based, Intel Corporation USA application that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. Intel Raid Web Console has a code issue vulnerability that stems from the inclusion of an uncontrolled search pa...

ROS-20240916-03

A vulnerability in the Node.js software platform is related to insufficient data authentication. Exploitation of the vulnerability could allow an attacker acting remotely to disable the validation of the integrity A vulnerability in the APIgenerateKeys function of the Node.js software platform is...