9034 matches found
Adobe Fixes 16 Critical Code-Execution Bugs Across Portfolio
Adobe has released 18 out-of-band security patches in 10 different software packages, including fixes for critical vulnerabilities that stretch across its product suite. Adobe Illustrator was hit the hardest. There are 16 critical bugs, all of which allow arbitrary code execution in the context o...
CVE-2020-8345
A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege...
CVE-2020-8338
A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system...
CVE-2020-8345
A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege...
Path traversal
A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system...
CVE-2020-8338
CVE-2020-8338 affects Lenovo Diagnostics. A DLL search path vulnerability in Lenovo Diagnostics prior to version 4.35.4 could allow a local attacker to execute code with elevated privileges. Lenovo’s advisory confirms privilege escalation potential and recommends upgrading to Lenovo Diagnostics 4...
CVE-2020-8345
A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege...
CVE-2020-8345
The CVE-2020-8345 issue affects the Lenovo HardwareScan Plugin used by Lenovo Vantage. A DLL search path vulnerability in the plugin before version 1.0.46.11 could allow privilege escalation. Connected sources specify affected component (Lenovo HardwareScan Plugin DLL), root cause (DLL search pat...
CVE-2020-24422
Adobe Creative Cloud Desktop Application version 5.2 and earlier and 2.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that ...
Flexera InstallShield
1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low skill level to exploit Vendor: Flexera Equipment: InstallShield Vulnerability: Untrusted Search Path 2. RISK EVALUATION Successful exploitation of this vulnerability could allow execution of a malicious DLL. 3. TECHNICAL DETAILS 3.1 AFFECTED...
PostgreSQL < 9.5.23, 9.6.x < 9.6.19, 10.x < 10.14, 11.x < 11.9, 12.x < 12.4 Search Path Vulnerability - Linux
PostgreSQL is prone to an uncontrolled search path element vulnerability in CREATE EXTENSION. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...
PostgreSQL 10.x < 10.14, 11.x < 11.9, 12.x < 12.4 Search Path Vulnerability - Windows
PostgreSQL is prone to an uncontrolled search path element vulnerability in logical replication. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
PostgreSQL 10.x < 10.14, 11.x < 11.9, 12.x < 12.4 Search Path Vulnerability - Linux
PostgreSQL is prone to an uncontrolled search path element vulnerability in logical replication. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
PostgreSQL < 9.5.23, 9.6.x < 9.6.19, 10.x < 10.14, 11.x < 11.9, 12.x < 12.4 Search Path Vulnerability - Windows
PostgreSQL is prone to an uncontrolled search path element vulnerability in CREATE EXTENSION. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...
Lenovo Vantage HardwareScan Plugin Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-44421 Potential Impact: Privilege escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8345 Summary Description: A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature...
qt: files placed by attacker can influence the working directory and lead to malicious code execution
Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access...
The vulnerability of the Control Center-I, related to improper handling of the search path, allows a perpetrator to elevate their privileges.
The vulnerability of Control Center-I is related to incorrect processing of the search path. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Intel Graphics Driver lies in the lack of commas in the syntax of elements or search paths, which allows an attacker to trigger a service failure.
The vulnerability of the Intel Graphics Driver lies in the lack of commas in the syntax of elements or search paths. Exploiting this vulnerability can allow an attacker to cause a service failure...