Lucene search
+L

6876 matches found

BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.10 views

The vulnerability of the Adobe Photoshop graphic editor lies in its uncontrolled search path, which allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Adobe Photoshop graphic editor is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially crafted file...

7.8CVSS7.6AI score0.00796EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.12 views

The vulnerability of the professional video editing software Adobe Premiere Pro, related to an uncontrolled search element, allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in its uncontrolled search process. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially crafted file...

7.8CVSS7.6AI score0.01159EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.12 views

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element, allowing a malicious actor to execute arbitrary code within the context of the current user.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

9.3CVSS7.6AI score0.03079EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.12 views

The vulnerability of the Adobe Media Encoder application, related to an uncontrolled search path element, allows a perpetrator to execute arbitrary code in the context of the current user.

The vulnerability of the Adobe Media Encoder application relates to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

7.8CVSS7.6AI score0.01159EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.8 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its uncontrolled search path, allowing attackers to execute arbitrary code within the context of the current user.

The vulnerability of Adobe After Effects video and dynamic image editing software is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

7.8CVSS7.6AI score0.0071EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.11 views

The vulnerability of Adobe Dreamweaver’s HTML editor lies in the uncontrolled search path element, which allows attackers to escalate their privileges.

The vulnerability of the Adobe Dreamweaver HTML editor is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00676EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2020/11/16 12:11 p.m.7 views

postgresql: Uncontrolled search path element in logical replication

A flaw was found in PostgreSQL, where it did not properly sanitize the searchpath during logical replication. This flaw allows an authenticated attacker to use this flaw in an attack similar to CVE-2018-1058 to execute an arbitrary SQL command in the user's context for replication. The highest...

7.1CVSS7.3AI score0.02235EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2020/11/16 1:15 a.m.4 views

CVE-2020-5666

Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/120ENCPU Firmware versions from '35' to '51' allows a remote attacker to cause an error in a CPU unit via a specially crafted HTTP packet, which may...

7.5CVSS7.1AI score0.08754EPSS
SaveExploits0References5
CVE
CVE
added 2020/11/16 12:49 a.m.86 views

CVE-2020-5666

CVE-2020-5666 affects Mitsubishi Electric MELSEC iQ-R Series CPU Modules. A remote attacker can trigger a denial-of-service by sending specially crafted HTTP packets, causing uncontrolled resource consumption in affected CPU modules. Affected firmware ranges are: R00/01/02 CPU firmware 05–19; R04...

7.5CVSS7.4AI score0.08754EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2020/11/12 7:15 p.m.8 views

CVE-2020-12329

Uncontrolled search path in the IntelR VTuneTM Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.1AI score0.00323EPSS
SaveExploits0References1
NVD
NVD
added 2020/11/12 7:15 p.m.31 views

CVE-2020-12329

Uncontrolled search path in the IntelR VTuneTM Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.8AI score0.00323EPSS
SaveExploits0References1
NVD
NVD
added 2020/11/12 7:15 p.m.29 views

CVE-2020-12320

Uncontrolled search path in IntelR SCS Add-on for Microsoft SCCM before version 2.1.10 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.8AI score0.00326EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/12 7:15 p.m.12 views

CVE-2020-12320

Uncontrolled search path in IntelR SCS Add-on for Microsoft SCCM before version 2.1.10 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.1AI score0.00326EPSS
SaveExploits0References1
Prion
Prion
added 2020/11/12 7:15 p.m.22 views

Design/Logic Flaw

Uncontrolled search path in the IntelR VTuneTM Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access...

4.6CVSS7.7AI score0.00323EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/11/12 7:15 p.m.24 views

Privilege escalation

Uncontrolled search path in IntelR SCS Add-on for Microsoft SCCM before version 2.1.10 may allow an authenticated user to potentially enable escalation of privilege via local access...

4.6CVSS7.8AI score0.00326EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/11/12 6:24 p.m.52 views

CVE-2020-12329

The vulnerability CVE-2020-12329 affects Intel VTune Profiler prior to 2020 Update 1. The issue is an uncontrolled search path that could allow an authenticated local user to escalate privileges. Affected component: Intel VTune Profiler (pre-2020 Update 1). Impact is described as local privilege ...

7.8CVSS7.7AI score0.00323EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/11/12 6:24 p.m.46 views

CVE-2020-12329

Uncontrolled search path in the IntelR VTuneTM Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8AI score0.00323EPSS
SaveExploits0References1
CVE
CVE
added 2020/11/12 6:15 p.m.56 views

CVE-2020-12320

Intel SCS Add-on for Microsoft SCCM (pre-2.1.10) is affected by an uncontrolled search path issue that may enable local privilege escalation for authenticated users. The vulnerability affects Intel’s SCS Add-on prior to version 2.1.10. Remediation: upgrade to 2.1.10 or later, per Intel advisory I...

7.8CVSS7.7AI score0.00326EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/11/12 6:15 p.m.41 views

CVE-2020-12320

Uncontrolled search path in IntelR SCS Add-on for Microsoft SCCM before version 2.1.10 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8AI score0.00326EPSS
SaveExploits0References1
NVD
NVD
added 2020/11/12 6:15 p.m.29 views

CVE-2020-24573

BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow denial of service Uncontrolled Resource Consumption via requests to the lighttpd component...

7.5CVSS7.5AI score0.01373EPSS
SaveExploits1References1
Rows per page
Query Builder