The vulnerability of Acronis Cyber Protect 16’s data protection software lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of Acronis Cyber Protect 16 data protection software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2025-1804

A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity...

CVE-2025-1804 Blizzard Battle.Net profapi.dll uncontrolled search path

A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity...

CVE-2025-1804

CVE-2025-1804 affects Blizzard Battle.Net (Windows) up to version 2.39.0.15212. The vulnerability resides in an unknown function of profapi.dll and causes an uncontrolled search path, enabling local exploitation. The initial descriptions indicate a locally approached attack with high complexity a...

CVE-2025-1804 Blizzard Battle.Net profapi.dll uncontrolled search path

A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion due to a missing maximum tree depth check in emitter functions. Remediation Upgrade rapidyaml to version 0.7.0 or higher. References - GitHub Commit - GitHub PR...

PT-2025-9186 · Blizzard · Blizzard Battle.Net

Name of the Vulnerable Software and Affected Versions: Blizzard Battle.Net versions up to 2.39.0.15212 Description: A critical issue was found in Blizzard Battle.Net, affecting some unknown functionality in the library profapi.dll. The manipulation leads to an uncontrolled search path. The attack...

CVE-2025-1804: Uncontrolled Search Path Element

A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity...

Blizzard Battle.Net 代码问题漏洞

Blizzard Battle.Net is a multiplayer online gaming service provided by Blizzard Entertainment, Inc. for its games. A code issue vulnerability exists in Blizzard Battle.Net 2.39.0.15212 and prior versions, which stems from the presence of an uncontrolled search path that could lead to local code...

The vulnerability of the Intel QuickAssist Technology (QAT) driver package lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of the Intel QuickAssist Technology QAT driver package is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Intel Ethernet Adapter Complete Driver Pack driver package lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of the Intel Ethernet Adapter Complete Driver Pack driver package is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Microsoft Message Queuing (MSMQ) queue service on Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2024-34036: Uncontrolled Resource Consumption

An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp...

CVE-2024-34035: Uncontrolled Resource Consumption

An issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with a significant quantity of E2 Subscription Requests originating from an xApp...

CVE-2024-45417: Incorrect Ownership Assignment

Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access...

Siemens SCALANCE Devices Uncontrolled Resource Consumption (CVE-2023-6237)

Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications that use the function EVPPKEYpubliccheck to check RSA public keys may experience long delays. Where the key that is being checked has been obtained from an untrusted source this may...

The vulnerability of the OpenSSH server, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the OpenSSH server security tool is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Siemens SCALANCE W700 Uncontrolled Resource Consumption (CVE-2024-23814)

The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re- assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service...

CVE-2022-28339

Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user privileges to create a malicious DLL that could lead to escalated privileges...

CVE-2022-28339

Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user privileges to create a malicious DLL that could lead to escalated privileges...