CWE:

	Tytuł	Data	Autor
Med.	SentinelOne sentinelagent 22.3.2.5 Privilege Escalation	07.12.2022	ouch_this_hurts
Med.	Microsoft SAFER Bypass	30.04.2021	Stefan Kanthak
Med.	Progea Movicon 11.5.1181 Search Path Issues	01.11.2017	Karn Ganeshen
Med.	ArcServe UDP - Download Manager/Setup - DLL Hijacking	06.09.2016	sh4d0wman
High	ArcServe UDP - Unquoted Service Path Privilege Escalation	06.09.2016	sh4d0wman
Med.	Corel Software DLL Hijacking	14.01.2015	CORE
Med.	Karotz Smart Rabbit 12.07.19.00 Hijacking & Cleartext Token	02.08.2013	Daniel Crowley

---

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2024-07-08

CVE-2024-38330

Updating...

IBM System Management for i 7.2, 7.3, and 7.4 could allow a local user to gain elevated privileges due to an unqualified library program call. A malicious actor could cause user-controlled code to run with administrator privilege. IBM X-Force ID: 295227.

2024-07-04

CVE-2024-1182

Updating...

Uncontrolled Search Path Element vulnerability in ICONICS GENESIS64 all versions, Mitsubishi Electric GENESIS64 all versions and Mitsubishi Electric MC Works64 all versions allows a local attacker to execute a malicious code by storing a specially crafted DLL in a specific folder when GENESIS64 and MC Works64 are installed with the Pager agent in the alarm multi-agent notification feature.

2024-06-13

CVE-2024-34116

Updating...

Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leading to arbitrary file delete. Exploitation of this issue requires user interaction.

2024-06-11

CVE-2024-37130

Updating...

Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and escalate their privilege to the admin user and gain full control of the machine. Exploitation may lead to a complete system compromise.

2024-05-14

CVE-2024-2637

Updating...

An authenticated local attacker who successfully exploited this vulnerability could insert and run arbitrary code using legitimate B&R software's. An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial  Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R Industrial Automation VC4 could allow an authenticated local attacker to execute malicious code by placing specially crafted files in the loading search path. This issue affects Scene Viewer: before 4.4.0; Automation Runtime: before J4.93; mapp Vision: before 5.26.1; mapp View: before 5.24.2; mapp Cockpit: before 5.24.2; mapp Safety: before 5.24.2; VC4: before 4.73.2.

2024-04-28

CVE-2024-25050

Updating...

IBM i 7.2, 7.3, 7.4, 7.5 and IBM Rational Development Studio for i 7.2, 7.3, 7.4, 7.5 networking and compiler infrastructure could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privileges. IBM X-Force ID: 283242.

2024-04-10

CVE-2024-22450

Updating...

Dell Alienware Command Center, versions prior to 6.2.7.0, contain an uncontrolled search path element vulnerability. A local malicious user could potentially inject malicious files in the file search path, leading to system compromise.

2024-03-01

CVE-2023-39254

Updating...

Dell Update Package (DUP), Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin.

2024-02-29

	CVE-2023-6132	Updating...	The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.
	CVE-2024-1595	Updating...	Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed.

 

---

Copyright 2024, cxsecurity.com