9027 matches found
CVE-2023-36540
Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...
Design/Logic Flaw
Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...
CVE-2023-36540
Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...
postgresql: schema_element defeats protective search_path changes
A flaw was found in PostgreSQL. Certain database calls could permit an attacker with elevated database-level privileges to execute arbitrary code...
postgresql: schema_element defeats protective search_path changes
A flaw was found in PostgreSQL. Certain database calls could permit an attacker with elevated database-level privileges to execute arbitrary code...
postgresql: schema_element defeats protective search_path changes
A flaw was found in PostgreSQL. Certain database calls could permit an attacker with elevated database-level privileges to execute arbitrary code...
Siemens Software Center 代码问题漏洞
Siemens Software Center allows the download, installation and activation of purchased software. A DLL hijacking vulnerability exists in Siemens Software Center, which can be exploited by an attacker to execute code with elevated privilege by placing a malicious DLL in a directory on the DLL searc...
PT-2023-5571 · Siemens · Siemens Software Center
Name of the Vulnerable Software and Affected Versions: Siemens Software Center versions prior to V3.0 Description: A DLL Hijacking issue could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path. This is relat...
PT-2023-5323 · Microsoft +1 · Powershell +2
Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.003.20244 and earlier Adobe Acrobat Reader versions 20.005.30467 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Description: The issue is related to an Untrusted Search Path vulnerability and imprope...
​Siemens Software Center
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services ...
The vulnerability of the libxpc library in iOS, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura allows attackers to elevate their privileges to the root level.
The vulnerability of the libxpc library in iOS, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura systems is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to elevate their privileges to the root level...
Zoom Client Code Issue Vulnerability
Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.14.5, which stemmed from an untrusted search path issue in the installer...
PT-2023-4391 · Intel · Intel(R) Ai Hackathon
Name of the Vulnerable Software and Affected Versions: IntelR AI Hackathon software versions prior to 2.0.0 Description: The issue is related to an uncontrolled search path in the IntelR AI Hackathon software, which may allow an unauthenticated user to potentially enable escalation of privilege v...
CVE-2023-36344
An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature...
PT-2023-4692 · Zoom · Zoom Desktop Client For Windows
Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.14.5 Description: The issue is related to an untrusted search path in the installer, which may allow an authenticated user to enable an escalation of privilege via local access. This could...
Zoom Rooms Code Issue Vulnerability
Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability previously existed in Zoom Rooms for Windows version 5.15.5, which stemmed from an untrusted sear...
Important: openssh
Issue Overview: The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if the target user's ssh-agent is forwarded to an attacker-controlled system the code in /usr/lib is not necessarily safe for loading into...
openssh: Remote code execution in ssh-agent PKCS#11 support
A vulnerability was found in OpenSSH. The PKCS11 feature in the ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system the code in /usr/lib is not necessarily safe for loading into ssh-agent...
Certain HP and Samsung printer software - Potential elevation of privileges
Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element. Update the printer software...
AlmaLinux 8 : openssh (ALSA-2023:4419)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:4419 advisory. - The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded ...