Search Vulnerabilities

Openshift-controller-manager: openshift container platform: information disclosure via environment variable injection

uutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) Injection

Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows

Mobatek MobaXterm Home Edition msimg32.dll uncontrolled search path

Yubico libfido2 before 1

Adobe Framemaker | Untrusted Search Path (CWE-426)

PraisonAI has RCE via Automatic tools.py Import

PraisonAI Affected by Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading

OpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijacking

omd: Local privilege escalation when executing omd commands as root

Hirschmann Industrial HiVision External Application Path Hijacking Leading to Arbitrary Code Execution

Foxit PDF Editor/Reader Installer Uncontrolled Search Path Privilege Escalation

UltraVNC Service version.dll uncontrolled search path

Flos Freeware Notepad2 TextShaping.dll uncontrolled search path

Flos Freeware Notepad2 PROPSYS.dll uncontrolled search path

DLL Sideloading in ScreenToGif

Greenshot Vulnerable to OS Command Injection via ExternalCommand Plugin

OpenClaw < 2026.2.22 - Arbitrary Shell Execution via Unvalidated SHELL Environment Variable

OpenClaw < 2026.2.22 - Path Traversal via Basename-Only Allowlist Matching on macOS

OpenClaw 2026.1.21 < 2026.2.19 - PATH Hijacking Bypass in tools.exec.safeBins Allowlist Validation