Lucene search
+L

11334 matches found

Patchstack
Patchstack
•added 2026/07/24 2:00 p.m.•18 views

NPM: electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`

NPM: electron-updater: Uncontrolled search path elements within AppImage built by app-builder-lib vulnerability discovered by ? in WordPress Npm app-builder-lib versions 26.15.0...

7.8CVSS5.9AI score0.00186EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2026/07/24 8:16 a.m.•23 views

CVE-2026-16519

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

7.3CVSS0.00173EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/24 7:05 a.m.•20 views

CVE-2026-16519

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

7.3CVSS5.9AI score0.00173EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/24 7:05 a.m.•28 views

CVE-2026-16519 GeoVision GV-IP Device Utility DLL Search Order Hijacking Vulnerability

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

7.3CVSS5.9AI score0.00173EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/24 7:05 a.m.•20 views

EUVD-2026-48512

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

7.3CVSS5.9AI score0.00173EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/24 12:00 a.m.•6 views

CVE-2026-16519: Uncontrolled Search Path Element

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

7.3CVSS5.9AI score0.00173EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/24 12:00 a.m.•37 views

PT-2026-64253

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

7.3CVSS5.9AI score0.00173EPSS
SaveExploits0References2
CNVD
CNVD
•added 2026/07/21 12:00 a.m.•26 views

Siemens COMOS permission licensing and access control vulnerabilities

Siemens Comos is a factory engineering software solution developed by the German company Siemens. Siemens COMOS has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from an insecure search path within the IAM Client SDK. Attackers can exploit these...

8.5CVSS5.5AI score0.00164EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/07/20 12:00 a.m.•20 views

The vulnerability of the Content Credentials SDK libraries, related to the use of an unreliable search path, allows a perpetrator to execute arbitrary code.

The vulnerability of Content Credentials SDK library libraries is related to the use of an unreliable search path. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

7.4CVSS5.9AI score0.00225EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/07/20 12:00 a.m.•15 views

The vulnerability of Adobe Illustrator, related to the use of an insecure search path, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Illustrator graphic editor is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code...

8.6CVSS5.9AI score0.00293EPSS
SaveExploits0References2Affected Software2
OSV
OSV
•added 2026/07/17 6:40 p.m.•25 views

GHSA-MHWW-P97M-3368 AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance

Aurora PostgreSQL is a fully managed relational database engine that's compatible with PostgreSQL. The team has identified CVE-2026-11400, an issue in Aurora PostgreSQL using the AWS Advanced JDBC Wrapper Impact An issue in AWS Wrappers for Amazon Aurora PostgreSQL will allow for privilege...

8.6CVSS5.7AI score0.00396EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/17 6:40 p.m.•70 views

EUVD-2026-34900

AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance...

8.6CVSS5.8AI score0.00396EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/07/17 12:00 a.m.•15 views

Siemens’ vulnerabilities in engineering and industrial software, related to the use of an unreliable search path, allow attackers to escalate their privileges.

The vulnerability of Siemens’ engineering and industrial software is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.3AI score0.00164EPSS
SaveExploits0References2Affected Software9
BDU FSTEC
BDU FSTEC
•added 2026/07/16 12:00 a.m.•15 views

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element, allowing attackers to escalate their privileges.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS7.2AI score0.00227EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/07/16 12:00 a.m.•14 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its use of an unreliable search path, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to the use of an unreliable search path. Exploiting this vulnerability allows a hacker to execute arbitrary code...

7.9CVSS7.3AI score0.00262EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/07/15 12:31 a.m.•22 views

EUVD-2026-44524

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must...

7.4CVSS6.5AI score0.00225EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/15 12:31 a.m.•22 views

EUVD-2026-44560

Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed...

8.6CVSS6.5AI score0.00293EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/15 12:00 a.m.•4 views

CVE-2026-42936: Uncontrolled Search Path Element

The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer...

8.4CVSS7.5AI score0.00177EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/07/15 12:00 a.m.•13 views

The vulnerability of the aiven-extras extension of the PostgreSQL database management system allows a hacker to elevate their privileges to superuser and execute arbitrary code.

The vulnerability of the aiven-extras extension in the PostgreSQL database management system is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to elevate their privileges to superuser and execute arbitrary code...

9.1CVSS7.1AI score0.00487EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2026/07/15 12:00 a.m.•12 views

Adobe Creative Cloud AdobeUpdateService Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7CVSS7.8AI score0.00227EPSS
SaveExploits0References1
Rows per page
Query Builder