Lucene search
+L

7077 matches found

NVD
NVD
added 2026/02/24 3:16 a.m.22 views

CVE-2026-3091

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer...

7.3CVSS0.00145EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/24 2:31 a.m.11 views

CVE-2026-3091

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer...

6.7CVSS5.9AI score0.00145EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/24 2:31 a.m.18 views

EUVD-2026-7405

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files during installation by placing a malicious DLL in advance in the same directory as the installer...

6.7CVSS5.6AI score0.00145EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/24 2:31 a.m.38 views

CVE-2026-3091

The CVE-2026-3091 entry covers an Uncontrolled Search Path Element vulnerability in Synology Presto Client prior to 2.1.3-0672. The issue allows local users to read or write arbitrary files and can cause denial of service during installation by placing a malicious DLL in the same directory as the...

7.3CVSS5.9AI score0.00145EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
added 2026/02/24 2:31 a.m.7 views

CVE-2026-3091

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer...

7.1CVSS5.9AI score0.00145EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/24 12:00 a.m.43 views

PT-2026-21657

Name of the Vulnerable Software and Affected Versions Synology Presto Client versions prior to 2.1.3-0672 Description A flaw exists in Synology Presto Client that allows local users to read or write arbitrary files during installation. This occurs because of an uncontrolled search path element. A...

7.3CVSS5.9AI score0.00145EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/02/24 12:00 a.m.23 views

Synology Presto Client 代码问题漏洞

Synology Presto Client is a high-speed transfer tool developed by the Chinese company Synology. Versions of Synology Presto Client prior to 2.1.3-0672 contained a code vulnerability. This vulnerability stemmed from uncontrolled search path elements during the installation process, which could all...

7.1CVSS6AI score0.00145EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/23 2:16 p.m.12 views

CVE-2026-21420

Dell Repository Manager DRM, versions prior to 3.4.8, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution and escalation of privileges...

7.8CVSS6.3AI score0.0013EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/23 2:16 p.m.21 views

CVE-2026-21420

Dell Repository Manager DRM, versions prior to 3.4.8, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution and escalation of privileges...

7.8CVSS0.0013EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/23 2:01 p.m.37 views

CVE-2026-21420

Dell Repository Manager DRM, versions prior to 3.4.8, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution and escalation of privileges...

7.3CVSS0.0013EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/23 2:01 p.m.11 views

CVE-2026-21420

Dell Repository Manager DRM, versions prior to 3.4.8, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution and escalation of privileges...

7.3CVSS6.2AI score0.0013EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2026/02/23 9:01 a.m.20 views

TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

...

7.8CVSS7AI score0.00262EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/02/23 12:00 a.m.20 views

Dell Repository Manager 代码问题漏洞

Dell Repository Manager is a repository manager developed by the American company Dell. Versions of Dell Repository Manager prior to 3.4.8 contained a code vulnerability caused by uncontrolled search path elements, which could allow local, low-privilege attackers to execute arbitrary code and gai...

7.8CVSS6.2AI score0.0013EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/23 12:00 a.m.16 views

PT-2026-21517

Name of the Vulnerable Software and Affected Versions Dell Repository Manager versions prior to 3.4.8 Description Dell Repository Manager DRM has an issue related to an uncontrolled search path element. A local attacker with limited privileges could potentially exploit this, leading to arbitrary...

7.8CVSS6AI score0.0013EPSS
SaveExploits0References7
NVD
NVD
added 2026/02/21 9:16 p.m.18 views

CVE-2026-2887

A security vulnerability has been detected in aardappel lobster up to 2025.4. This impacts the function lobster::TypeName in the library dev/src/lobster/idents.h. Such manipulation leads to uncontrolled recursion. The attack can only be performed from a local environment. The exploit has been...

5.5CVSS0.00187EPSS
SaveExploits1References9
Cvelist
Cvelist
added 2026/02/21 9:02 p.m.37 views

CVE-2026-2887 aardappel lobster idents.h TypeName recursion

A security vulnerability has been detected in aardappel lobster up to 2025.4. This impacts the function lobster::TypeName in the library dev/src/lobster/idents.h. Such manipulation leads to uncontrolled recursion. The attack can only be performed from a local environment. The exploit has been...

4.8CVSS0.00187EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
added 2026/02/21 7:29 p.m.16 views

CVE-2026-26098

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request...

8.4CVSS5.4AI score0.00113EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:29 p.m.17 views

CVE-2026-26099

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request...

8.4CVSS5.4AI score0.00113EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:29 p.m.14 views

CVE-2026-26097

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request...

8.4CVSS5.4AI score0.00113EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/21 12:00 a.m.22 views

Lobster 安全漏洞

Lobster is a programming language developed by Wouter van Oortmerssen. Versions of Lobster prior to 2.25 contain security vulnerabilities, which stem from uncontrolled recursion in the lobster::TypeName function...

5.5CVSS5.8AI score0.00187EPSS
SaveExploits1References10
Rows per page
Query Builder