Vulnerabilities > Uncontrolled Search Path Element

DATE CVE VULNERABILITY TITLE RISK
2023-09-03 CVE-2023-39374 Uncontrolled Search Path Element vulnerability in Forescout Secureconnector 11.2
ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element
local
low complexity
forescout CWE-427
7.8
2023-08-30 CVE-2023-40596 Uncontrolled Search Path Element vulnerability in Splunk
In Splunk Enterprise versions earlier than 8.2.12, 9.0.6, and 9.1.1, a dynamic link library (DLL) that ships with Splunk Enterprise references an insecure path for the OPENSSLDIR build definition.
local
low complexity
splunk CWE-427
8.8
2023-08-21 CVE-2023-40352 Uncontrolled Search Path Element vulnerability in Mcafee Safe Connect
McAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs.
network
low complexity
mcafee CWE-427
7.2
2023-08-17 CVE-2023-3078 Uncontrolled Search Path Element vulnerability in Lenovo Universal Device Client
An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.
local
low complexity
lenovo CWE-427
7.8
2023-08-16 CVE-2022-4894 Uncontrolled Search Path Element vulnerability in multiple products
Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element.
local
low complexity
hp samsung CWE-427
7.3
2023-08-11 CVE-2022-25864 Uncontrolled Search Path Element vulnerability in Intel Oneapi Math Kernel Library
Uncontrolled search path in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-427
7.8
2023-08-11 CVE-2023-22841 Uncontrolled Search Path Element vulnerability in Intel Server Firmware Update Utility
Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-427
7.3
2023-08-11 CVE-2023-23577 Uncontrolled Search Path Element vulnerability in Intel ITE Tech Consumer Infrared Driver
Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-427
7.3
2023-08-11 CVE-2023-24016 Uncontrolled Search Path Element vulnerability in Intel Quartus Prime
Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-427
7.3
2023-08-11 CVE-2023-25182 Uncontrolled Search Path Element vulnerability in Intel Unite
Uncontrolled search path element in the Intel(R) Unite(R) Client software for Mac before version 4.2.11 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-427
7.8