CVE-2022-36034 Possible Regular Expression Denial of Service (ReDoS) used on uncontrolled data in nitrado.js

nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of and with many repetitions of |. This issue has been patched in all versions above 0.2.5. There are currently no known workarounds...

SUSE-SU-2022:2909-1 Security update for libcroco

This update for libcroco fixes the following issues: - CVE-2020-12825: Fixed an uncontrolled recursion issue bsc1171685...

GHSA-MFPJ-3QHM-976M Uncontrolled Resource Consumption in asyncua and opcua

All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited numb...

GHSA-8MX2-GQX9-RM7F Uncontrolled Resource Consumption in opcua

The package opcua from 0.0.0 are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks e.g. 2GB each...

The vulnerability of Adobe Premiere Elements’ video editing software lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of Adobe Premiere Elements’ video editing software is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Outbyte PC Repair program for cleaning temporary files and checking security settings is related to an uncontrolled search path element, allowing attackers to increase their privileges.

The vulnerability of Outbyte PC Repair’s file cleaning and security settings checking function is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

(Pwn2Own) AVEVA Edge Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of APP...

(Pwn2Own) AVEVA Edge Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of APP...

(Pwn2Own) AVEVA Edge Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of APP...

The vulnerability of the AVEVA Edge SCADA system, related to the uncontrolled element in the search process, allows a intruder to execute arbitrary commands or increase their privileges.

The vulnerability of the AVEVA Edge SCADA system is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a hacker to execute arbitrary code or increase their privileges...

The vulnerability of the njs_string_offset function (src/njs_string.c) in the njs interpreter of the nginx server allows a hacker to increase their privileges.

The vulnerability of the njsstringoffset function in the njsstring.c file of the nginx njs interpreter involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to increase their privileges...

The vulnerability of the AVEVA Edge SCADA system, related to the uncontrolled element in the search process, allows a intruder to execute arbitrary commands or increase their privileges.

The vulnerability of the AVEVA Edge SCADA system is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code or increase their privileges...

The vulnerability of the AVEVA Edge SCADA system, related to the uncontrolled element in the search process, allows a intruder to execute arbitrary commands or increase their privileges.

The vulnerability of the AVEVA Edge SCADA system is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to execute arbitrary code or increase their privileges...

PT-2022-4346 · Aveva · Aveva Edge

Name of the Vulnerable Software and Affected Versions: AVEVA Edge versions 2020 SP2 Patch 04201.2111.1802.0000 Description: The issue is related to an uncontrolled search path element in the AVEVA Edge SCADA system, which can be exploited to execute arbitrary code or elevate privileges. Remote...

PT-2022-4415 · Outbyte · Outbyte Pc Repair

Name of the Vulnerable Software and Affected Versions: Outbyte PC Repair version 1.7.112.7856 Description: The issue is related to an uncontrolled search path element, which can be exploited to elevate privileges. Specifically, the iertutil.dll is missing, allowing an attacker to use a malicious...

CVE-2022-26374

Uncontrolled search path in the installation binaries for IntelR SEAPI all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-28696

Uncontrolled search path in the IntelR Distribution for Python before version 2022.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-28696

Uncontrolled search path in the IntelR Distribution for Python before version 2022.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21807

Uncontrolled search path elements in the IntelR VTuneTM Profiler software before version 2022.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21807

Uncontrolled search path elements in the IntelR VTuneTM Profiler software before version 2022.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...