CVE-2025-21127

Adobe Photoshop Desktop (Windows/macOS) is affected by CVE-2025-21127: Uncontrolled Search Path Element. Versions 25.12, 26.1 and earlier may load a malicious library if the user runs the vulnerable app, due to improper handling of the search PATH. The underlying root cause is an uncontrolled sea...

CVE-2025-21127 Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)

Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution. An attacker could manipulate the search path environment variable to point to a malicious library, resulting in the execution of...

PT-2025-1290 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 25.12, 26.1 and earlier Description: The issue is related to an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution. An attacker could manipulate the search path environment...

Adobe Photoshop 25.x < 25.12.1 / 26.x < 26.2 Multiple Vulnerabilities (macOS APSB25-02)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 25.12.1/26.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-02 advisory. - Integer Underflow Wrap or Wraparound CWE-191 potentially leading to Arbitrary code execution...

PT-2025-1225 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an uncontrolled resource consumption vulnerability in the upnphost.dll library of the Windows operating system. This can be exploited by a remote attacker to cause a...

Adobe Photoshop 25.x < 25.12.1 / 26.x < 26.2 Multiple Vulnerabilities (APSB25-02)

The version of Adobe Photoshop installed on the remote Windows host is prior to 25.12.1/26.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-02 advisory. - Integer Underflow Wrap or Wraparound CWE-191 potentially leading to Arbitrary code execution CVE-2025-211...

The vulnerability of the INF-file utility for Intel chipset and circuit boards, known as the Intel Chipset INF Utility (previously called Intel Chipset Device Software or Intel Chipset Software Installation Utility), is related to an uncontrolled search path element. This allows a malicious user to gain elevated privileges.

The vulnerability of the INF-file utility for Intel chipset and circuit boards is related to an uncontrolled search path element. Exploiting this vulnerability can allow a hacker to gain increased privileges...

The vulnerability of the Intel MPI Library’s parallel programming library, related to an uncontrolled element in the search process, allows attackers to increase their privileges.

The vulnerability of the Intel MPI Library, which is related to parallel programming, lies in its uncontrolled search path. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-47239

Dell PowerScale OneFS versions 8.2.2.x through 9.9.0.0 contain an uncontrolled resource consumption vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-47239

Dell PowerScale OneFS versions 8.2.2.x through 9.9.0.0 contain an uncontrolled resource consumption vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-47239

Dell PowerScale OneFS versions 8.2.2.x through 9.9.0.0 contain an uncontrolled resource consumption vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-47239

CVE-2024-47239 affects Dell PowerScale OneFS 8.2.2.x–9.9.0.0. The issue is an uncontrolled resource consumption that enables a remote, low-privilege attacker to cause a denial of service. The root cause is described as a Resource Management Error; no exploit details are provided in the documents....

CVE-2024-47239

Dell PowerScale OneFS versions 8.2.2.x through 9.9.0.0 contain an uncontrolled resource consumption vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to denial of service...

Qualcomm Chipsets 权限许可和访问控制问题漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets have a Privilege Permission and Access Control Issue vulnerability that arises from uncontrolled resource consumption when a driver, application, or SMMU client attempts to access global registers via...

ZenML < 0.57.1 DoS (CVE-2024-4460)

The version of ZenML installed on the remote host is prior to 0.57.1. It is, therefore, affected by a denial of service DoS vulnerability exists in zenml-io/zenml version due to improper handling of line feed \n characters in component names. When a low-privileged user adds a component through th...

QNAP QuTScloud DoS Vulnerability (QSA-23-09)

QNAP QuTScloud is prone to denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutscloud";...

QNAP QuTS hero DoS Vulnerability (QSA-23-09)

QNAP QuTS hero is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero";...

CVE-2024-53850 The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation

The Addressing GLPI plugin enables you to create IP reports for visualize IP addresses used and free on a given network.. Starting with 3.0.0 and before 3.0.3, a poor security check allows an unauthenticated attacker to determine whether data exists by name in GLPI...

CVE-2024-53850

The CVE-2024-53850 entry maps to the Addressing GLPI plugin vulnerability. The connected PT-2024-9988 advisory specifies affected versions 3.0.0 through 3.0.3 and attributes the issue to a poor security check that allows an unauthenticated attacker to determine whether data exists by name in GLPI...

CVE-2024-56200 Uncontrolled Recursion and Asymmetric Resource Consumption in Altair media/file proxy

Altair is a fork of Misskey v12. Affected versions lack of request validation and lack of authentication in the image proxy for compressing and resizing remote files could allow attacks that could affect availability, such as by abnormally increasing the CPU usage of the server on which this...