The vulnerability of the net/sched component in the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the net/sched component in the Linux operating system’s kernel is related to an uncontrolled recursion. Exploiting this vulnerability allows an attacker to cause a service failure...

PT-2025-50783

Name of the Vulnerable Software and Affected Versions Soda PDF Desktop affected versions not specified Description A local privilege escalation issue exists in Soda PDF Desktop due to an uncontrolled search path element. This allows for potential exploitation, leading to privilege escalation...

PT-2025-50782

Name of the Vulnerable Software and Affected Versions PDFsam Enhanced affected versions not specified Description A local privilege escalation issue exists in PDFsam Enhanced. A physically-present attacker can exploit this by mounting a malicious drive onto the target system and leveraging a flaw...

CVE-2025-5470

Uncontrolled Search Path Element vulnerability in Yandex Disk on MacOS allows Search Order Hijacking.This issue affects Disk: before 3.2.45.3275...

CVE-2025-5471

Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.19.1...

PT-2025-50491

Windscribe Uncontrolled Search Path Element Local Privilege Escalation Vulnerability...

Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vim for Windows. User interaction is required to exploit this vulnerability in that the target must open a malicious file and perform one of a set of specific actions in the editor. The specific flaw...

PT-2025-50560

Name of the Vulnerable Software and Affected Versions TradingView Desktop affected versions not specified Description A local privilege escalation issue exists in TradingView Desktop due to an uncontrolled search path within the Electron framework. An attacker with low-privileged code execution c...

Security Bulletin: IBM® Db2® is vulnerable to a denial of service using a specially crafted SQL statement (CVE-2025-33143).

Summary IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a denial of service using a specially crafted SQL statement that performs uncontrolled recursion. Vulnerability Details CVEID:CVE-2025-33143 DESCRIPTION: IBM Db2 for Linux, UNIX and...

CVE-2025-5470

Uncontrolled Search Path Element vulnerability in Yandex Disk on MacOS allows Search Order Hijacking.This issue affects Disk: before 3.2.45.3275...

CVE-2025-5471

Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.19.1...

CVE-2025-5471 Dylib Hijacking in Yandex Telemost

Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.19.1...

CVE-2025-5471 Dylib Hijacking in Yandex Telemost

Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.19.1...

CVE-2025-5470

The CVE-2025-5470 entry details an Uncontrolled Search Path Element vulnerability in Yandex Disk for MacOS, enabling Search Order Hijacking. Affected: Yandex Disk on macOS prior to 3.2.45.3275. Root cause: improper control of the search path element. Impact is described as high across confidentia...

PT-2025-50090

Name of the Vulnerable Software and Affected Versions Yandex Telemost versions prior to 2.19.1 Description An uncontrolled search path element issue exists in Yandex Telemost on MacOS, enabling search order hijacking. This allows an attacker to potentially manipulate the system's search path to...

PT-2025-50089

Name of the Vulnerable Software and Affected Versions Telemost versions prior to 2.245 Description An uncontrolled search path element issue exists in Yandex Messenger on MacOS, enabling search order hijacking. This affects Telemost. Recommendations Update Telemost to version 2.245 or later...

Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

...

CVE-2025-33208

NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an uncontrolled search path. A successful exploit of this vulnerability may lead to escalation of privileges, data tampering, denial of service, information disclosure...

Linux Distros Unpatched Vulnerability : CVE-2025-66476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious...

EUVD-2025-201095

NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an uncontrolled search path. A successful exploit of this vulnerability may lead to escalation of privileges, data tampering, denial of service, information disclosure...