Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 746

Export CSV
CVE-2024-5623

Untrusted search path vulnerability in B&R APROL

An untrusted search path vulnerability in B&R APROL <= R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges.

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Br-automation
Products
Industrial Automation Aprol
CVE-2024-6473

DLL Hijacking in Yandex Browser

Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Yandex
Products
Yandex Browser
CVE-2024-42439

Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS - Untrusted Search Path

Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Zoom
Products
Meeting Software Development Kit Workplace Desktop
CVE-2024-6975

Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file

Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file. This issue affects SDP Client before 5.10.34.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Catonetworks
Products
Cato Client Sdp Client
CVE-2024-6974

Cato Networks Windows SDP Client Local Privilege Escalation via self-upgrade

Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Catonetworks
Products
Cato Client Sdp Client
CVE-2024-41865

Adobe Dimension Untrusted Search Path lead to load malicious DLL swift.dll

Dimension versions 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur if the application uses a search path to locate executables or libraries. Exploitation of this issue requires user interaction.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Adobe
Products
Dimension