CWE-426: Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Also known as Untrusted Path.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- douroshisetu kihon data sakusei system, national institute for land and infrastructure management douroshisetu kihon data sakusei system +1 moreUntrusted search path vulnerability in Douroshisetu Kihon Data Sakusei System Ver1.0.2 and...7.8 High
- charamin omp, charamin steering committee the installer of charamin omp +1 moreUntrusted search path vulnerability in The installer of Charamin OMP Version 1.1.7.4 and earlier,...7.8 High
- national tax agency setup file of advance preparation for e-tax software (web version), nta e-tax +1 moreUntrusted search path vulnerability in Setup file of advance preparation for e-Tax software (WEB...7.8 High
- mext ebidsettingchecker, ministry of education, culture, sports, science and technology (mext) ebidsettingchecker.exe +1 moreUntrusted search path vulnerability in EbidSettingChecker.exe (version 1.0.0.0) allows an...9.8 Critical
- ipa casl ii simulator, information-technology promotion agency, japan (ipa) installer of casl ii simulator(self-extract format) +1 moreUntrusted search path vulnerability in Installer of CASL II simulator (self-extract format)...7.8 High
- apple installer of quicktime for windows, quicktime +1 moreUntrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to...7.8 High
- e-tax.nta e-tax, national tax agency installer of "setup file of advance preparation" (jizen setup.exe) +1 moreUntrusted search path vulnerability in Installer of "Setup file of advance preparation" ...7.8 High
- acquisition, technology & logistics agency installer of electronic tendering and bid opening system, acquisition technology and logistics agency installer of electronic tendering +1 moreUntrusted search path vulnerability in Installer of Electronic tendering and bid opening system...7.8 High
- maff denshinouhin check system, ministry of agreculture, foresty and fishery installer of denshinouhin check system (for ministry of agriculture, forestry and fisheries nouson seibi jigyou) 2014 march edition +1 moreUntrusted search path vulnerability in Installer of Denshinouhin Check System (for Ministry of...7.8 High
- ibm websphere message broker, integration bus +1 moreIBM WebSphere Message Broker could allow a local user with specialized access to prevent the...2.5 Low
- mozilla firefox, firefox esr, thunderbird +2 moreThe Firefox installer on Windows can be made to load malicious DLL files stored in the same...7.8 High
- apache rangerApache Ranger policy engine incorrectly matches paths in certain conditions5.9 Medium
- baidu simejiUntrusted search path vulnerability in the [Simeji for Windows] installer (simeji.exe) allows an...7.8 High
- jiransoft appcheck, appcheck pro +1 moreUntrusted search path vulnerability in AppCheck and AppCheck Pro prior to version 2.0.1.15 allows...8.4 High
- geospatial information authority of japan (gsi) semidynaexe (semidynaexe2008.exe), gsi semidynaexe +1 moreUntrusted search path vulnerability in SemiDynaEXE (SemiDynaEXE2008.EXE) ver. 1.0.2 allows an...7.8 High
- geospatial information authority of japan (gsi) tky2jgd (tky2jgd1379.exe), gsi tky2jgd +1 moreUntrusted search path vulnerability in TKY2JGD (TKY2JGD1379.EXE) ver. 1.3.79 allows an attacker...7.8 High
- geospatial information authority of japan (gsi) patchjgd (hyoko) (patchjgdh101.exe), gsi patchjgd +1 moreUntrusted search path vulnerability in PatchJGD (Hyoko) (PatchJGDh101.EXE) ver. 1.0.1 allows an...7.8 High
- ministry of the environment installer of houkokusyo sakusei shien toolUntrusted search path vulnerability in the installer of Houkokusyo Sakusei Shien Tool ver3.0.2 ...7.8 High
- netmove corporation the installer of saat personal, saat personal +1 moreUntrusted search path vulnerability in the installer of SaAT Personal ver.1.0.10.272 and earlier...8.8 High
- netmove corporation the installer of saat netizen, saat netizen +1 moreUntrusted search path vulnerability in the installer of SaAT Netizen ver.1.2.10.510 and earlier...8.8 High
- tera term project term, teraterm project the installer of tera term +1 moreUntrusted search path vulnerability in the installer of Tera Term 4.94 and earlier allows an...7.8 High
- sharp rw-5100, sharp corporation rw-5100 tool to verify execution environment for windows 7, rw-5100 tool to verify execution environment for windows 8.1 +2 moreUntrusted search path vulnerability in RW-5100 tool to verify execution environment for Windows 7...7.8 High
- sharp rw-5100 driver installer for windows 7, rw-5100 driver installer for windows 8.1 +1 moreUntrusted search path vulnerability in RW-5100 driver installer for Windows 7 version 1.0.0.9 and...7.8 High
- sharp rw-4040, sharp corporation rw-4040 tool to verify execution environment for windows 7 +1 moreUntrusted search path vulnerability in RW-4040 tool to verify execution environment for Windows 7...7.8 High
- sharp rw-4040, sharp corporation rw-4040 driver installer for windows 7 +1 moreUntrusted search path vulnerability in RW-4040 driver installer for Windows 7 version 2.27 allows...7.8 High
- acquisition, technology & logistics agency installer of electronic tendering and bid opening system, atla electronic tendering and bid opening system +1 moreUntrusted search path vulnerability in Installer of electronic tendering and bid opening system...8.8 High
- ministry of justice installer of shogyo touki denshi ninsho software, shogyo touki denshi +1 moreUntrusted search path vulnerability in Installer of Shogyo Touki Denshi Ninsho Software Ver 1.7...8.8 High
- japan air self defense force, ministry of defense clock 01 setup.exe, clock 02 setup.exe, jasdf 01.exe +6 more +8 moreUntrusted search path vulnerability in screensaver installers (jasdf_01.exe, jasdf_02.exe,...7.8 High
- winsparkleUntrusted search path vulnerability in WinSparkle versions prior to 0.5.3 allows remote attackers...7.8 High
- japan agency for local authority information systems the public certification service for individuals "the jpki user's software (for windows 7 and later)", the public certification service for individuals "the jpki user's software (for windows vista)", the public certification service for individuals "the jpki user's software" +3 more +5 moreUntrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI...7.8 High
- information-technology promotion agency, japan (ipa) empirical project monitor - extendedUntrusted search path vulnerability in Empirical Project Monitor - eXtended all versions allows...7.8 High
- igor pavlov 7 zip for windows, 7-zip +1 moreUntrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote...7.8 High
- national tax agency the installer of e-tax software, e-tax +1 moreUntrusted search path vulnerability in The installer of e-Tax Software all versions allows remote...7.8 High
- evernote, evernote for windows +1 moreUntrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote...7.8 High
- softbank primedrive desktop application, softbank corporation installer for primedrive desktop application +1 moreUntrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4...7.8 High
- jpki the public certification service for individuals, japan agency for local authority information systems installer for the public certification service for individuals "the jpki user's software (for windows 7 and later)", installer for the public certification service for individuals "the jpki user's software (for windows vista)" +1 more +3 moreUntrusted search path vulnerability in installers for The Public Certification Service for...7.3 High
- rapid7 appspider proEditions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading...7.8 High
- vivaldi installer for windowsUntrusted search path vulnerability in Vivaldi installer for Windows prior to version 1.7.735.48...7.8 High
- toshiba flashair, toshiba corporation installer for sdhc memory card with embedded transferjettm functionality configuration software, installer for sdhc memory card with embedded transferjettm functionality software update tool +5 more +7 moreUntrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with...8.8 High
- securebrain phishwall client, securebrain corporation the installer of phishwall client internet explorer version +1 moreUntrusted search path vulnerability in the installer of PhishWall Client Internet Explorer...7.8 High
- softbank primedrive desktop applicationUntrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows...7.8 High
- akky 7-zip32.dll, self-extracting archive files created by 7-zip32.dll +1 moreUntrusted search path vulnerability in Self-extracting archive files created by 7-ZIP32.DLL 9.22...7.8 High
- securebrain phishwall clientUntrusted search path vulnerability in the installer of PhishWall Client Internet Explorer before...7.8 High
- adobe creative cloudAdobe Thor versions 3.9.5.353 and earlier have a vulnerability in the directory search path used...7.8 High
- amazon kindle for pcUntrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to...7.3 High
- adobe shockwave playerAdobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading (DLL hijacking)...7.8 High
- trendmicro endpoint sensorTrend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote...7.8 High
- rapid7 metasploit, metasploit pro +1 moreRapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading...7.8 High
- rapid7 insight collectorRapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading...7.8 High
- rapid7 appspider proRapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability,...7.8 High
- Show moreLoading…