Vulnerabilities > Untrusted Search Path

DATE CVE VULNERABILITY TITLE RISK
2023-02-14 CVE-2023-23618 Untrusted Search Path vulnerability in GIT for Windows Project GIT for Windows
Git for Windows is the Windows port of the revision control system Git.
local
low complexity
git-for-windows-project CWE-426
7.8
2023-02-14 CVE-2022-35868 Untrusted Search Path vulnerability in Siemens TIA Multiuser Server and TIA Project-Server
A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions < V15.1 Update 8), TIA Project-Server  (All versions < V1.1), TIA Project-Server V16 (All versions), TIA Project-Server V17 (All versions < V17 Update 6).
local
high complexity
siemens CWE-426
6.7
2023-02-07 CVE-2022-4883 Untrusted Search Path vulnerability in X.Org Libxpm
A flaw was found in libXpm.
network
low complexity
x-org CWE-426
8.8
2023-01-17 CVE-2022-41953 Untrusted Search Path vulnerability in Git-Scm GIT
Git GUI is a convenient graphical tool that comes with Git for Windows.
local
low complexity
git-scm CWE-426
7.8
2022-12-21 CVE-2022-38060 Untrusted Search Path vulnerability in Openstack Kolla
A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618.
local
low complexity
openstack CWE-426
7.8
2022-11-17 CVE-2022-23748 Untrusted Search Path vulnerability in Audinate Dante Application Library
mDNSResponder.exe is vulnerable to DLL Sideloading attack.
local
low complexity
audinate CWE-426
7.8
2022-11-09 CVE-2022-31253 Untrusted Search Path vulnerability in Opensuse Openldap2
A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root.
local
low complexity
opensuse CWE-426
7.8
2022-10-28 CVE-2022-3734 Untrusted Search Path vulnerability in Redis
A vulnerability was found in a port or fork of Redis.
network
low complexity
redis CWE-426
critical
9.8
2022-10-27 CVE-2022-0074 Untrusted Search Path vulnerability in Litespeedtech Openlitespeed
Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation.
network
low complexity
litespeedtech CWE-426
8.8
2022-10-18 CVE-2021-3305 Untrusted Search Path vulnerability in Feishu 3.40.3/3.41.3
Beijing Feishu Technology Co., Ltd Feishu v3.40.3 was discovered to contain an untrusted search path vulnerability.
local
low complexity
feishu CWE-426
7.8