#cwe-427

共收录 126 条相关情报。

← 返回所有主题
漏洞预警2026-09-22 发布INFO

Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powershell.exe runs as SYSTEM without -NoProfile and loads %U...

CVE-2026-83598

Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powe

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair

CVE-2026-83598

Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powe

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布INFO

Privilege escalation due to weak configuration during package extraction process.

CVE-2026-25264

Privilege escalation due to weak configuration during package extraction process.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py and the lack of --import-mode=import...

CVE-2026-54916

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The abse

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially...

CVE-2026-56795

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A lo

历史摘要 · 未重新核验 · NVD

安全公告2026-09-17 发布INFO

A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The...

CVE-2026-92838

A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-17 发布INFO

A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search ...

CVE-2026-92838

A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to ...

CVE-2026-92180

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanning Engine (wvsc.exe) that allows low-privileged local att...

CVE-2026-6958

Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanni

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary

CVE-2026-78680

Two NLTK sites executed the Graphviz `dot` program by bare name, so process creation resolved it via the search path — a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-01 发布INFO

Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL con...

CVE-2026-45221

Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If...

CVE-2026-19590

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations

历史摘要 · 未重新核验 · NVD

安全公告2026-08-30 发布INFO

SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an...

CVE-2026-82649

SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an uncontrolled search path element

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-30 发布INFO

SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an uncontrolled search path element vulnerability in its NSIS installer, which invokes syste...

CVE-2026-82649

SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an uncontrolled search path element

历史摘要 · 未重新核验 · NVD

安全公告2026-08-30 发布INFO

SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path

CVE-2026-82649

SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an uncontrolled search path element

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-25 发布INFO

NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, esca...

CVE-2026-65093

NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to a...

CVE-2024-58377

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. No

历史摘要 · 未重新核验 · NVD

安全公告2026-08-21 发布INFO

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny...

CVE-2026-55015

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to...

CVE-2026-55013

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locall

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-20 发布INFO

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.

CVE-2026-55015

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.

历史摘要 · 未重新核验 · NVD