Vulnerabilities > Uncontrolled Search Path Element

DATE CVE VULNERABILITY TITLE RISK
2024-08-14 CVE-2024-24977 Uncontrolled Search Path Element vulnerability in Intel License Manager for Flexim
Uncontrolled search path for some Intel(R) License Manager for FLEXlm product software before version 11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-427
7.8
2024-08-14 CVE-2024-26027 Uncontrolled Search Path Element vulnerability in Intel Simics Package Manager
Uncontrolled search path for some Intel(R) Simics Package Manager software before version 1.8.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-427
7.8
2024-08-14 CVE-2024-28046 Uncontrolled Search Path Element vulnerability in Intel Graphics Performance Analyzers 21.2
Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-427
7.8
2024-08-14 CVE-2024-28172 Uncontrolled Search Path Element vulnerability in Intel Oneapi HPC Toolkit and Trace Analyzer and Collector
Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-427
7.3
2024-08-14 CVE-2024-28876 Uncontrolled Search Path Element vulnerability in Intel MPI Library and Oneapi HPC Toolkit
Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-427
7.3
2024-08-14 CVE-2024-28887 Uncontrolled Search Path Element vulnerability in Intel products
Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-427
7.8
2024-08-14 CVE-2024-29015 Uncontrolled Search Path Element vulnerability in Intel Vtune Profiler 2017/2018/2019
Uncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-427
7.8
2024-08-13 CVE-2023-31348 Uncontrolled Search Path Element vulnerability in AMD Uprof
A DLL hijacking vulnerability in AMD µProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
local
low complexity
amd CWE-427
7.8
2024-08-07 CVE-2024-7061 Uncontrolled Search Path Element vulnerability in Okta Verify
Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking.
local
low complexity
okta CWE-427
7.8
2024-08-07 CVE-2024-5290 Uncontrolled Search Path Element vulnerability in W1.Fi WPA Supplicant
An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root). Membership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.
local
low complexity
w1-fi CWE-427
7.8