The vulnerability of the OLE mechanism in the Windows operating system, related to an uncontrolled search path element, allows a perpetrator to execute arbitrary code.

The vulnerability of the OLE mechanism in the Windows operating system is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Adobe Lightroom graphic editor, related to the use of an insecure search path, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Lightroom graphic editor is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code...

The vulnerability of the software for adjusting Intel XTU performance lies in the uncontrolled search path element, which allows a hacker to increase their privileges.

The vulnerability of the software for adjusting Intel XTU performance is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow a perpetrator to enhance their privileges...

CVE-2024-20754

Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, then an attacker could modify...

CVE-2024-20754

Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, then an attacker could modify...

CVE-2024-20754 Lightroom Desktop | Untrusted Search Path (CWE-426)

Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, then an attacker could modify...

CVE-2024-20754

Adobe Lightroom Desktop

Adobe Lightroom Desktop 代码问题漏洞

Adobe Lightroom Desktop is a professional photo management and editing software from the American company Audobee Adobe, designed to provide photographers and image editors with powerful workflow and editing tools. A code issue vulnerability exists in Adobe Lightroom Desktop version 7.1.2 and pri...

The vulnerability of the SanDisk PrivateAccess data storage and protection software for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the SanDisk PrivateAccess data storage and protection software for Windows operating systems is related to an uncontrolled search path during the loading of DLL libraries. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

PT-2024-10077 · Intel · Intel Mpi Library

Name of the Vulnerable Software and Affected Versions: Intel MPI Library versions prior to 2021.12 Description: The issue is related to an uncontrolled search path element in the Intel MPI Library, which may allow an authenticated user to potentially enable escalation of privilege via local acces...

The vulnerability of Microsoft Exchange Server’s mail server, related to an uncontrolled search path element, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to an uncontrolled element in the loading process for DLL libraries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Arm DS for Intel® SoC FPGA Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00930.html...

PT-2024-21285 · Intel · Intel Simics Package Manager

Name of the Vulnerable Software and Affected Versions: IntelR Simics Package Manager versions prior to 1.8.3 Description: The issue is related to an uncontrolled search path in some IntelR Simics Package Manager software, which may allow an authenticated user to potentially enable escalation of...

CVE-2024-1618

A search path or unquoted item vulnerability in Faronics Deep Freeze Server Standard, which affects versions 8.30.020.4627 and earlier. This vulnerability affects the DFServ.exe file. An attacker with local user privileges could exploit this vulnerability to replace the legitimate DFServ.exe...

PT-2024-2211 · Adobe · Lightroom Desktop

Name of the Vulnerable Software and Affected Versions: Lightroom Desktop versions 7.1.2 and earlier Description: The issue is related to an Untrusted Search Path vulnerability. This could result in arbitrary code execution in the context of the current user. If the application uses a search path ...

PT-2024-2718 · Doctor Web · Dr.Web Anti-Rootkit Api

Name of the Vulnerable Software and Affected Versions: Dr.Web Anti-rootkit API affected versions not specified Description: The issue is related to the use of a fixed or uncontrolled path for resource search in the Dr.Web Anti-rootkit API module. Exploitation of this issue may allow an attacker t...

PT-2024-2288 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an uncontrolled search path element in the Windows OLE mechanism. It allows a remote attacker to execute arbitrary code. There is no information about the estimated...

PT-2024-2627

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.2.0p23 Checkmk versions prior to 2.1.0p40 Checkmk version 2.0.0 Description The issue is related to an uncontrolled search path element in the Checkmk software, which can be exploited to escalate privileges. This...

CVE-2024-20338

A vulnerability in the ISE Posture System Scan module of Cisco Secure Client for Linux could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to the use of an uncontrolled search path element. An attacker could exploit this vulnerabilit...

CVE-2024-20338

A vulnerability in the ISE Posture System Scan module of Cisco Secure Client for Linux could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to the use of an uncontrolled search path element. An attacker could exploit this vulnerabilit...