CVE-2024-37127

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege...

CVE-2024-37127

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege...

CVE-2024-37142

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege...

CVE-2024-37142

Dell Peripheral Manager is affected in versions prior to 1.7.6 by an uncontrolled search path element vulnerability. The underlying issue is exposure to preloading malicious DLLs or symbolic links, which could enable arbitrary code execution and privilege escalation locally. Affected software: De...

CVE-2024-37142

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege...

IObit Driver Booster 代码问题漏洞

IObit Driver Booster is a driver updater from IObit. A code issue vulnerability exists in IObit Driver Booster version 11.0.0.0, which stems from an unknown operation in the VCL120.BPL library that can lead to uncontrolled search paths...

PT-2024-5611 · Iobit · Iobit Dualsafe Password Manager

Name of the Vulnerable Software and Affected Versions: IObit DualSafe Password Manager version 1.4.0.3 Description: The issue is related to an uncontrolled search path element in the BPL Handler component of the IObit DualSafe Password Manager. This could allow an attacker to execute arbitrary...

IObit iTop Data Recovery Pro 代码问题漏洞

IObit iTop Data Recovery Pro is a data recovery software from IObit. A code issue vulnerability exists in IObit iTop Data Recovery Pro version 4.4.0.687, which stems from an unknown operation in the madbasic.bpl library that can result in an uncontrolled search path...

PT-2024-5613 · Iobit · Iobit Itop Data Recovery Pro

Name of the Vulnerable Software and Affected Versions: IObit iTop Data Recovery Pro version 4.4.0.687 Description: The issue is related to an uncontrolled search path element in the BPL Handler component of the IObit iTop Data Recovery Pro. This can be exploited to execute arbitrary commands. Loc...

IObit DualSafe Password Manager 代码问题漏洞

IObit DualSafe Password Manager is a password manager from IObit. A code issue vulnerability exists in IObit DualSafe Password Manager version 1.4.0.3, which stems from an unknown operation in the RTL120.BPL library that can lead to uncontrolled search paths...

CVE-2024-42145

In the Linux kernel, the following vulnerability has been resolved: IB/core: Implement a limit on UMAD receive List The existing behavior of ibumad, which maintains received MAD packets in an unbounded list, poses a risk of uncontrolled growth. As user-space applications extract packets from this...

CVE-2024-42145 IB/core: Implement a limit on UMAD receive List

In the Linux kernel, the following vulnerability has been resolved: IB/core: Implement a limit on UMAD receive List The existing behavior of ibumad, which maintains received MAD packets in an unbounded list, poses a risk of uncontrolled growth. As user-space applications extract packets from this...

Zoom Workplace Desktop App For MacOS < 6.0.10 Uncontrolled Search Path Element (ZSB-24027)

The version of Zoom Workplace Desktop App for MacOS installed on the remote host is prior to 6.0.10. It is, therefore, affected by a uncontrolled search path element vulnerability that allow a local authenticated attacker to conduct a denial of service via local access. Note that Nessus has not...

CVE-2024-7193

A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library takdecolib.dll of the component DLL Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The...

CVE-2024-7193 Mp3tag DLL tak_deco_lib.dll uncontrolled search path

A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library takdecolib.dll of the component DLL Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The...

CVE-2024-7193 Mp3tag DLL tak_deco_lib.dll uncontrolled search path

A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library takdecolib.dll of the component DLL Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The...

CVE-2024-7193

Summary of CVE-2024-7193 (Mp3tag): Affected software is Mp3tag up to version 3.26d, with the vulnerability located in the DLL Handler’s tak_deco_lib.dll. The issue is an uncontrolled search path resulting from code in tak_deco_lib.dll, enabling local-host exploitation. Public exploit information ...

PT-2024-38155 · Mp3Tag · Mp3Tag

Name of the Vulnerable Software and Affected Versions: Mp3tag versions up to 3.26d Description: A vulnerability has been found in the library tak deco lib.dll of the component DLL Handler, leading to an uncontrolled search path. The manipulation can be launched on the local host. It is possible t...

The vulnerability of the JOSE component in Apache CXF web services allows a attacker to cause a service failure.

The vulnerability of the JOSE component in Apache CXF web services is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ROS-20240729-15

A vulnerability in the django.utils.text.Truncator.words function of the Django web application software platform is associated with uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service...