#cwe-427

共收录 126 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布HIGH

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execu...

CVE-2026-62847

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences. In server mode the binary path was refused only when it lay under ...

CVE-2026-116243

pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences. In server

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布HIGH

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is launched in a directory ...

CVE-2026-103665

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Librari

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-p...

CVE-2026-104349

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary c

来源摘录 · NVD

安全公告2026-10-23 发布INFO

A potential security vulnerability has been identified in HP One Agent for certain HP PC products...

CVE-2026-91093

A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might allow for

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-23 发布INFO

A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might allow for escalation of privilege and/or arbitrary ...

CVE-2026-91093

A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might allow for

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on aff...

CVE-2026-92202

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability

来源摘录 · NVD

安全公告2026-10-20 发布INFO

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to...

CVE-2026-102438

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code wit

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-20 发布INFO

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link lib...

CVE-2026-102438

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code wit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit t...

CVE-2026-71170

Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileg

历史摘要 · 未重新核验 · NVD

安全公告2026-10-14 发布INFO

Metalama allows local code execution through DLL planting in shared temporary directories

CVE-2026-62847

## Summary Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemb

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path...

CVE-2026-108693

ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscrip

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-11 发布INFO

ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghost...

CVE-2026-108693

ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscrip

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outsi...

CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a l

历史摘要 · 未重新核验 · NVD

安全公告2026-10-06 发布INFO

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

CVE-2026-86540

## Overview A critical **Arbitrary Code Execution (ACE)** vulnerability exists in the Knowns Language Server Protocol (

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-05 发布INFO

DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The l...

CVE-2026-104809

DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled

历史摘要 · 未重新核验 · NVD

安全公告2026-09-24 发布INFO

An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on...

CVE-2026-89325

An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, l

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying...

CVE-2026-6935

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequatel

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an att...

CVE-2026-6935

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequatel

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during...

CVE-2026-91803

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dyn

历史摘要 · 未重新核验 · NVD