Base de CVEs

CVE-2025-9016 Alta · 7.0 CWE-426 15/08/2025

Mechrevo Control Center GX V2 Powershell Script Command uncontrolled search path

A vulnerability has been found in Mechrevo Control Center GX V2 5.56.51.48. Affected is an unknown function of the file C:\Program Files\OEM\机械革命控制中心\AiStoneService\MyControlCenter\Command of the component Powershell Script Handler. Such manipulation leads to uncontrolled search path. The attack needs to be performed locally. Attacks of this nature are highly complex. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.

CVE-2025-9000 Alta · 7.0 CWE-426 14/08/2025

Mechrevo Control Center GX V2 reg File uncontrolled search path

A vulnerability was detected in Mechrevo Control Center GX V2 5.56.51.48. Impacted is an unknown function of the component reg File Handler. The manipulation results in uncontrolled search path. The attack needs to be approached locally. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit is now public and may be used.

CVE-2024-3220 Baixa · 2.3 CWE-426 14/02/2025

Default mimetype known files writeable on Windows

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the incorrect file type. This defect is caused by the default locations of Linux and macOS platforms (such as “/etc/mime.types”) also being used on Windows, where they are user-writable locations (“C:\etc\mime.types”). To work-around this issue a user can call mimetypes.init() with an empty list (“[]”) on Windows platforms to avoid using the default list of known file locations.

CVE-2022-23748 Alta · 7.8 KEV Alta · 55 CWE-426 17/11/2022

Dante Discovery Process Control Vulnerability

mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.

CVE-2022-22047 Alta · 7.8 KEV Alta · 56 CWE-426 12/07/2022

Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVE-2022-26488 Alta · 7.0 CWE-426 10/03/2022

In Python before 3.10.3 on Windows, local users can gain privileges because the search path is...

In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabled PATH entries. A non-administrative user can trigger a repair that incorrectly adds user-writable paths into PATH, enabling search-path hijacking of other users and system services. This affects Python (CPython) through 3.7.12, 3.8.x through 3.8.12, 3.9.x through 3.9.10, and 3.10.x through 3.10.2.

CVE-2020-0570 Alta · 7.3 CWE-426 14/09/2020

Untrusted Search Path em Qt

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.

CVE-2020-15801 Crítica · 9.8 CWE-426 17/07/2020

In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing...

In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name>._pth file (e.g., the python._pth file) is not affected.

CVE-2020-9290 Alta · 7.8 CWE-426 15/03/2020

Untrusted Search Path em Fortinet Forticlient

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

CVE-2020-9287 Alta · 7.8 CWE-426 15/03/2020

Untrusted Search Path em Fortinet Forticlient Emergency Management Server

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

CVE-2019-5589 Alta · 8.8 CWE-426 28/05/2019

Untrusted Search Path em Fortinet Forticlient

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

CVE-2018-16156 Alta · 7.8 Exploit público CWE-426 17/05/2019

Untrusted Search Path em Fujitsu Paperstream Ip (twain)

In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkic_Fjicube_32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes an exported function named ChangeUninstallString. The default install does not contain this library and therefore if any DLL with that name exists in any directory listed in the PATH variable, it can be used to escalate to SYSTEM level privilege.

CVE-2016-10009 Alta · 7.3 CWE-426 05/01/2017

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows...

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.

CVE-2012-1854 Alta · 7.8 KEV Alta · 56 CWE-426 10/07/2012

Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Visual Basic for Applications Insecure Library Loading Vulnerability," as exploited in the wild in July 2012.