Browse CVEs

HIGH 7.8 CVE-2023-47453 An Untrusted search path vulnerability in Sohu Video Player 7.0.15.0 allows local users to gain escalated privileges through the version.dll file in … Video Player No fix yet Fix from $1,9502023-11-30 HIGH 7.8 CVE-2023-47454 An Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 for Windows allows local users to gain escalated privileges through the urlmon.dl… Cloudmusic No fix yet Fix from $1,9502023-11-30 HIGH 7.8 CVE-2023-6401 A vulnerability classified as problematic was found in NotePad++ up to 8.1. Affected by this vulnerability is an unknown functionality of the file db… Notepad\+\+ after 8.1 Fix from $1,9502023-11-30 HIGH 7.8 CVE-2023-4770 An uncontrolled search path element vulnerability has been found on 4D and 4D server Windows executables applications, affecting version 19 R8 100218… 4d Mitigation only Fix from $1,9502023-11-30 HIGH 7.8 CVE-2023-4931 Uncontrolled search path element vulnerability in Plesk Installer affects version 3.27.0.0. A local attacker could execute arbitrary code by injectin… Plesk Mitigation only Fix from $1,9502023-11-27 HIGH 7.5 CVE-2023-41787 Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File Search Paths. This vulnerabili… Pandora Fms 773+ Fix from $1,9502023-11-23 CRITICAL 9.8 CVE-2023-41790 Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File Search Paths. This vulnerabili… Pandora Fms after 773 Fix from $2,3002023-11-23 HIGH 7.8 CVE-2023-29069 A maliciously crafted DLL file can be forced to install onto a non-default location, and attacker can overwrite parts of the product with malicious D… Desktop Connector after 16.2.1.2016 Fix from $1,9502023-11-22 HIGH 7.8 CVE-2023-46814 A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with … Vlc Media Player 3.0.19+ Fix from $1,9502023-11-22 HIGH 7.8 CVE-2023-6235 An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an a… Duet Display Mitigation only Fix from $1,9502023-11-21 HIGH 7.8 CVE-2023-22818 Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for Windows that could allow attackers with local a… Sandisk Security Installer 1.0.0.25+ Fix from $1,9502023-11-15 HIGH 7.8 CVE-2023-34350 Uncontrolled search path element in some Intel(R) XTU software before version 7.12.0.15 may allow an authenticated user to potentially enable escalat… Extreme Tuning Utility 7.12.0.15+ Fix from $1,9502023-11-14 HIGH 7.8 CVE-2023-34430 Uncontrolled search path in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authenticated user to potentially enab… Battery Life Diagnostic Tool 2.2.1+ Fix from $1,9502023-11-14 HIGH 7.3 CVE-2023-33874 Uncontrolled search path in some Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software before version … Hid Event Filter Driver 2.2.2.1+ Fix from $1,9502023-11-14 HIGH 7.3 CVE-2023-32660 Uncontrolled search path in some Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool installation software before version 46 may allow … Thunderbolt 3 Controller Firmware 46+ Fix from $1,9502023-11-14 HIGH 7.8 CVE-2023-29504 Uncontrolled search path element in some Intel(R) RealSense(TM) Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user … Realsense D400 Series Dynamic Calibration Tool 2.13.1.0+ Fix from $1,9502023-11-14 HIGH 7.8 CVE-2023-28740 Uncontrolled search path element in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to po… Quickassist Technology Library 1.10 / 2.04+ Fix from $1,9502023-11-14 HIGH 7.8 CVE-2023-29161 Uncontrolled search path in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of pri… One Boot Flash Update 14.1.31+ Fix from $1,9502023-11-14 HIGH 7.8 CVE-2023-28388 Uncontrolled search path element in some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potential… Chipset Device Software 10.1.19444.8378+ Fix from $1,9502023-11-14 HIGH 7.8 CVE-2023-27513 Uncontrolled search path element in some Intel(R) Server Information Retrieval Utility software before version 16.0.9 may allow an authenticated user… Server Information Retrieval Utility 16.0.9+ Fix from $1,9502023-11-14 HIGH 7.8 CVE-2023-4632 An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with el… System Update 5.08.02.25+ Fix from $1,9502023-11-08 HIGH 7.3 CVE-2023-47113 BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijacking vulnera… Bleachbit after 4.4.2 Fix from $1,9502023-11-08 HIGH 7.3 CVE-2023-0898 General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the applicat… Micom S1 Agile Mitigation only Fix from $1,9502023-11-07 HIGH 7.3 CVE-2023-31027 NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an … Virtual Gpu 13.9 / 15.4+ Fix from $1,9502023-11-02 HIGH 7.8 CVE-2023-31016 NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary c… Virtual Gpu 13.9 / 15.4+ Fix from $1,9502023-11-02 HIGH 7.3 CVE-2023-44220 SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-u… Netextender after 10.2.336 Fix from $1,9502023-10-27 MEDIUM 6.7 CVE-2023-4936 It is possible to sideload a compromised DLL during the installation at elevated privilege. Displaylink 11.2+ Fix from $1,6002023-10-11 HIGH 7.8 CVE-2023-5463 A vulnerability was found in XINJE XDPPro up to 3.7.17a. It has been rated as critical. Affected by this issue is some unknown functionality in the l… Xdppro after 3.7.17a Fix from $1,9502023-10-09 HIGH 7.3 CVE-2023-45248 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) befor… Agent Mitigation only Fix from $1,9502023-10-09 HIGH 7.8 CVE-2023-35897 IBM Spectrum Protect Client and IBM Storage Protect for Virtual Environments 8.1.0.0 through 8.1.19.0 could allow a local user to execute arbitrary c… Storage Protect after 8.1.19.0 Fix from $1,9502023-10-06