https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:16:45 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-101683 cnvd-2021-101683 https://cve.radiocsirt.org/vuln/cnvd-2021-101683 https://cve.radiocsirt.org/vuln/euvd-2026-173308 EUVD-2026-173308 https://cve.radiocsirt.org/vuln/euvd-2026-173308 https://cve.radiocsirt.org/vuln/fkie_cve-2021-4007 <p>Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent versions 3.0.1 to 3.1.2.34 start, the Python interpreter attempts to load python3.dll at &#34;C:\DLLs\python3.dll,&#34; which normally is writable by locally authenticated users. Because of this, a malicious local user could use Insight Agent&#39;s startup conditions to elevate to SYSTEM privileges. This issue was fixed in Rapid7 Insight Agent 3.1.2.35. This vulnerability is a regression of CVE-2019-5629.</p> <p>Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent versions 3.0.1 to 3.1.2.34 start, the Python interpreter attempts to load python3.dll at &#34;C:\DLLs\python3.dll,&#34; which normally is writable by locally authenticated users. Because of this, a malicious local user could use Insight Agent&#39;s startup conditions to elevate to SYSTEM privileges. This issue was fixed in Rapid7 Insight Agent 3.1.2.35. This vulnerability is a regression of CVE-2019-5629.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-4007 https://cve.radiocsirt.org/vuln/ghsa-r3vg-939c-2mrm <p>Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent versions 3.0.1 to 3.1.2.34 start, the Python interpreter attempts to load python3.dll at &#34;C:\DLLs\python3.dll,&#34; which normally is writable by locally authenticated users. Because of this, a malicious local user could use Insight Agent&#39;s startup conditions to elevate to SYSTEM privileges. This issue was fixed in Rapid7 Insight Agent 3.1.2.35. This vulnerability is a regression of CVE-2019-5629.</p> <p>Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent versions 3.0.1 to 3.1.2.34 start, the Python interpreter attempts to load python3.dll at &#34;C:\DLLs\python3.dll,&#34; which normally is writable by locally authenticated users. Because of this, a malicious local user could use Insight Agent&#39;s startup conditions to elevate to SYSTEM privileges. This issue was fixed in Rapid7 Insight Agent 3.1.2.35. This vulnerability is a regression of CVE-2019-5629.</p> https://cve.radiocsirt.org/vuln/ghsa-r3vg-939c-2mrm https://cve.radiocsirt.org/vuln/gsd-2021-4007 gsd-2021-4007 https://cve.radiocsirt.org/vuln/gsd-2021-4007