CVE-2020-24447

Adobe Lightroom Classic version 10.0 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Warns Windows, macOS Users of Critical-Severity Flaws

Adobe Systems has stomped out critical-severity flaws across its Adobe Prelude, Adobe Experience Manager and Adobe Lightroom applications. If exploited, the serious vulnerabilities could lead to arbitrary code execution. Overall, Adobe issued patches for flaws tied to one important-rated and thre...

Adobe Lightroom Classic 代码问题漏洞

Adobe Lightroom is an image organization and image processing software. An uncontrolled search path element vulnerability exists in Adobe Lightroom Classic 10.0 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...

Adobe Prelude 代码问题漏洞

Adobe Prelude is a video recording and capture tool designed for intuitive and efficient media organization and metadata entry, quickly tagging and transcoding video footage and creating rough cuts on the fly. An uncontrolled search path vulnerability exists in Adobe Prelude 9.0.1 and earlier...

The vulnerability of the Intel VTune Profiler performance analyzer lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of the Intel VTune Profiler performance analyzer is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-5674

Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2020-5674

Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2020-5674

Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2020-5674

Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Exploit for Uncontrolled Search Path Element in Git_Large_File_Storage_Project Git_Large_File_Storage

CVE-2020-27955 Thanks h...

The vulnerability of the Intel Setup and Configuration Software (SCS) data collection tool for the System Center Configuration Manager software platform, related to an uncontrolled search element, allows a perpetrator to increase their privileges.

The vulnerability of the Intel Setup and Configuration Software SCS data collection tool for the System Center Configuration Manager IT infrastructure management software is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileg...

CVE-2020-28209

A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1 that could cause any local Windows user who has write permission on at least one of the subfolders of the Connect Agen...

CVE-2020-28209

A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1 that could cause any local Windows user who has write permission on at least one of the subfolders of the Connect Agen...

Design/Logic Flaw

A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1 that could cause any local Windows user who has write permission on at least one of the subfolders of the Connect Agen...

CVE-2020-28209

A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1 that could cause any local Windows user who has write permission on at least one of the subfolders of the Connect Agen...

CVE-2020-28209

Schneider Electric’s EcoStruxure Building Operation suite is affected by CVE-2020-28209 (CWE-428: Windows Unquoted Search Path). The ICSA-21-063-02 advisory ties this CVE to the Unquoted Search Path vulnerability in the Enterprise Server installer (V1.9–V3.1) and Enterprise Central installer (V2....

postgresql: Uncontrolled search path element in CREATE EXTENSION

A flaw was found in PostgreSQL, where some PostgreSQL extensions did not use the searchpath safely in their installation script. This flaw allows an attacker with sufficient privileges to trick an administrator into executing a specially crafted script during the extension's installation or updat...

The vulnerability of the Adobe Photoshop graphic editor lies in its uncontrolled search path, which allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Adobe Photoshop graphic editor is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially crafted file...

The vulnerability of the Adobe Media Encoder application, related to an uncontrolled search path element, allows a perpetrator to execute arbitrary code in the context of the current user.

The vulnerability of the Adobe Media Encoder application relates to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...