PT-2022-17639 · Intel · Intel Vtune Profiler

Name of the Vulnerable Software and Affected Versions: IntelR VTuneTM Profiler versions prior to 2022.2.0 Description: The issue is related to an uncontrolled search path in the IntelR VTuneTM Profiler software. This may allow an authenticated user to potentially enable escalation of privilege vi...

PT-2022-17658 · Unknown · Presentmon

Name of the Vulnerable Software and Affected Versions: PresentMon versions prior to 1.7.1 Description: The issue is related to an uncontrolled search path element in the PresentMon software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2022-5484 · Unknown · Vport P06-1Mp-M12 +1

Name of the Vulnerable Software and Affected Versions: VPort P16-1MP-M12, VPort P16-1MP-M12-IR, VPort P06-1MP-M12 affected versions not specified Description: The issue is related to the use of uncontrolled format strings in the RTSP service of the IP camera microprogram. Exploitation of this iss...

Intel System Studio 代码问题漏洞

Intel System Studio is a versatile, cross-platform tool suite from Intel Corporation. It is designed to simplify system startup and improve the performance of system and IoT device applications on Intel platforms. A security vulnerability exists in Intel System Studio, which originates from an...

Intel Quartus Prime 代码问题漏洞

Intel Quartus Prime is a programmable logic device tool for the design and development of Fpga from Intel Corporation. A security vulnerability exists in Intel Quartus Prime Standard and Intel Quartus Prime Pro that originates from an uncontrolled search path element that could allow an...

Intel Glorp 代码问题漏洞

Intel Glorp is a U.S. Intel Intel application. Intel Glorp version 1.0.0 contains an elevation of privilege vulnerability, which originates from an uncontrolled search path element in the IntelR Glorp software and can be exploited by attackers for local elevation of privilege...

Intel VTune Profiler 代码问题漏洞

Intel VTune Profiler is a performance testing tool for optimized software from Intel USA. The software performs performance testing of IoT embedded applications, media software, Java applications, and high-performance computing applications. A security vulnerability exists in Intel VTune Profiler...

PT-2022-18276 · Intel · Intel Quartus Prime Standard

Name of the Vulnerable Software and Affected Versions: IntelR Quartus Prime Standard edition software versions prior to 21.1 Patch 0.02std Description: The issue is related to an uncontrolled search path element, which may allow an authenticated user to potentially enable escalation of privilege...

PT-2022-23340 · Intel · Intel Nuc Kit Wireless Adapter Drivers

Name of the Vulnerable Software and Affected Versions: Intel NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue is related to an uncontrolled search path in the installer software for some Intel NUC Kit Wireless Adapter drivers. This may allow an...

PT-2022-18542 · Intel · Intel Advanced Link Analyzer Standard +1

Name of the Vulnerable Software and Affected Versions: IntelR Advanced Link Analyzer Pro versions prior to 22.2 IntelR Advanced Link Analyzer Standard edition software versions prior to 22.1.1 STD Description: The issue is related to an uncontrolled search path element, which may allow an...

PT-2022-20171 · Intel · Intel Glorp

Name of the Vulnerable Software and Affected Versions: IntelR Glorp software affected versions not specified Description: The issue is related to an uncontrolled search path element in the IntelR Glorp software, which may allow an authenticated user to potentially enable escalation of privilege v...

PT-2022-20235 · Intel · Intel(R) Support Android

Name of the Vulnerable Software and Affected Versions: IntelR Support Android application versions prior to 22.02.28 Description: The issue is related to uncontrolled resource consumption, which may allow an authenticated user to potentially enable denial of service via local access...

Design/Logic Flaw

An uncontrolled resource consumption issue when parsing URLs in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to cause performance issues and potentially a denial of service on the GitLab instance...

CVE-2022-43310

An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path...

CVE-2022-43310

Foxit Reader v11.2.118.51569 is affected by CVE-2022-43310 due to an Uncontrolled Search Path Element when searching for DLL libraries without an absolute path. This local privilege-escalation vulnerability can allow an attacker to gain high impact on confidentiality, integrity, and availability....

The vulnerability of the Client Server Run-Time Subsystem (CSRSS) in the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Client Server Run-Time Subsystem CSRSS in the Windows operating system is related to an uncontrolled DLL search process. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

PT-2022-24260 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 15.3.5 GitLab CE/EE version 15.4 prior to 15.4.4 GitLab CE/EE version 15.5 prior to 15.5.2 Description: An uncontrolled resource consumption issue when parsing URLs allows an attacker to cause performance issues...

CVE-2022-34825

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrit...

Code injection

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrit...

CVE-2022-34825

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrit...