CWE-426: Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Also known as Untrusted Path.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- synology cloud station driveMultiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive...7.8 High
- synology cloud station backupMultiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Backup...7.8 High
- nippon telegraph and telephone west corporation flets setsuzoku tool for windows, ntt flets setsuzoku tool +1 moreUntrusted search path vulnerability in Flets Setsuzoku Tool for Windows all versions allows an...7.8 High
- optim optimal guardUntrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to...7.8 High
- moj.go commercial registration electronic authentication softwareUntrusted search path vulnerability in The electronic authentication system based on the...7.8 High
- nippon telegraph and telephone west corporation security setup toolUntrusted search path vulnerability in Security Setup Tool all versions allows an attacker to...7.8 High
- nippon telegraph and telephone west corporation flets install toolUntrusted search path vulnerability in Flets Install Tool all versions distributed through the...7.8 High
- nippon telegraph and telephone west corporation flets azukeru for windows auto backup tool, ntt flets azukuu pc automatic backup tool +1 moreUntrusted search path vulnerability in Flets Azukeru for Windows Auto Backup Tool v1.0.3.0 and...7.8 High
- nippon telegraph and telephone west corporation security kinou miharibanUntrusted search path vulnerability in Security Kinou Mihariban v1.0.21 and earlier allows an...7.8 High
- ntt docomo, inc. photo collection pc softwareUntrusted search path vulnerability in Photo Collection PC Software Ver.4.0.2 and earlier allows...7.8 High
- mobilis mobiconnectUntrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain...7.8 High
- synology photo station uploaderMultiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader...7.8 High
- synology assistantMultiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1...7.8 High
- kddi corporation installer of qua station connection tool for windows, kddi qua station firmware +1 moreUntrusted search path vulnerability in Installer of Qua station connection tool for Windows...7.8 High
- agency for natural resources and energy of ministry of economy,trade and industry (meti) teikihoukokusho sakuseishien toolUntrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker...7.8 High
- teikoku databank, ltd. tdb ca typea use software, teikoku databank type a +1 moreUntrusted search path vulnerability in TDB CA TypeA use software Version 5.2 and earlier,...7.8 High
- agency for natural resources and energy of ministry of economy,trade and industry (meti) installer for shin kinkyuji houkoku data nyuryoku program (program released on 2011 march 10), enecho.meti shin kinkyuji houkoku data nyuryoku program +1 moreUntrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program ...7.8 High
- agency for natural resources and energy of ministry of economy,trade and industry (meti) installer for shin sekiyu yunyu chousa houkoku data nyuryoku program (program released on 2013 september 30), enecho.meti shin sekiyu yunyu chousa houkoku data nyuryoku program +1 moreUntrusted search path vulnerability in Installer for Shin Sekiyu Yunyu Chousa Houkoku Data...7.8 High
- agency for natural resources and energy of ministry of economy,trade and industry (meti) installer for shin kikan toukei houkoku data nyuryokuyou program (program released on 2013 september 30), enecho.meti shin kikan toukei houkoku data nyuryokuyou program +1 moreUntrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou...7.8 High
- cisco application policy infrastructure controller, cisco systems, inc. application policy infrastructure controller (apic) +1 moreA vulnerability in the build procedure for certain executable system files installed at boot time...7.8 High
- foxitsoftware pdf compressorFoxit PDF Compressor installers from versions from 7.0.0.183 to 7.7.2.10 contain a DLL preloading...7.8 High
- sandboxie installerSandboxie installer 5071703 has a DLL Hijacking or Unsafe DLL Loading Vulnerability via a Trojan...7.8 High
- baidu ime, baidu japan inc. installer of baidu ime +1 moreUntrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an...7.8 High
- h.shirouzu / asahi net, inc. installer of ip messenger for win, ipa ip messenger +1 moreUntrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows...7.8 High
- dashlaneDashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the ...7.3 High
- pcfreetime format factoryFormat Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used...9.8 Critical
- hashicorp vagrant vmware fusionThe sudo helper in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before...7.8 High
- f-secure online scannerUntrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute...7.8 High
- kiri tweenUntrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain...7.8 High
- internet-soft ftp commanderInternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking...7.8 High
- softonic spider playerVIT Spider Player 2.5.3 has an untrusted search path, allowing DLL hijacking via a Trojan horse...7.8 High
- libexpat project libexpatThe writeRandomBytes_RtlGenRandom function in xmlparse.c in libexpat in Expat 2.2.1 and 2.2.2 on...7.8 High
- hibara attachecase, hibara software self-extracting encrypted files created by attachecase +1 moreUntrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver...7.8 High
- hibara attachecase, hibara software self-extracting encrypted files created by attachecase +1 moreUntrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver...7.8 High
- resume-next filecapsule deluxe portable, tomoki fuke encrypted files in self-decryption format created by filecapsule deluxe portable +1 moreUntrusted search path vulnerability in Encrypted files in self-decryption format created by...7.8 High
- resume-next filecapsule deluxe portableUntrusted search path vulnerability in FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows...7.8 High
- resume-next filecapsule deluxe portable, tomoki fuke encrypted files in self-decryption format created by filecapsule deluxe portable +1 moreUntrusted search path vulnerability in Encrypted files in self-decryption format created by...7.8 High
- resume-next filecapsule deluxe portableUntrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows...7.8 High
- resume-next filecapsule deluxe portable, tomoki fuke encrypted files in self-decryption format created by filecapsule deluxe portable +1 moreUntrusted search path vulnerability in Encrypted files in self-decryption format created by...7.8 High
- resume-next filecapsule deluxe portableUntrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows...7.8 High
- yahoo toolbar, yahoo japan corporation installer of yahoo! toolbar (for internet explorer) +1 moreUntrusted search path vulnerability in Installer of Yahoo! Toolbar (for Internet explorer) v8.0.0...7.8 High
- sourcenext file compact, sourcenext corporation self-extracting archive files created by file compact +1 moreUntrusted search path vulnerability in self-extracting archive files created by File Compact Ver...7.8 High
- chitora soft self-extracting archive files created by lhaz+, chitora lhaz\+ +1 moreUntrusted search path vulnerability in Self-extracting archive files created by Lhaz+ version 3.4...7.8 High
- chitora soft installer of lhaz+, chitora lhaz\+ +1 moreUntrusted search path vulnerability in Installer of Lhaz+ version 3.4.0 and earlier allows an...7.8 High
- chitora lhaz, chitora soft self-extracting archive files created by lhaz +1 moreUntrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4...7.8 High
- chitora lhaz, chitora soft installer of lhaz +1 moreUntrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an...7.8 High
- moj pdf digital signature, the ministry of justice installer of pdf digital signature plugin +1 moreUntrusted search path vulnerability in Installer of PDF Digital Signature Plugin (G2.30) and...7.8 High
- moj shinseiyo sogo soft, the ministry of justice installer of shinseiyo sogo soft +1 moreUntrusted search path vulnerability in Installer of Shinseiyo Sogo Soft (4.8A) and earlier allows...7.8 High
- ministry of land, infrastructure, transport and tourism, japan the installer of mlit denshiseikabutsusakuseishienkensa system, the self-extracting archive including the installer of mlit denshiseikabutsusakuseishienkensa system, mlit denshiseikabutsusakuseishienkensa +2 moreUntrusted search path vulnerability in The installer of MLIT DenshiSeikabutsuSakuseiShienKensa...7.8 High
- national institute for land and infrastructure management douro kouji kanseizutou check program, nilim road construction completion diagram check program +1 moreUntrusted search path vulnerability in Douro Kouji Kanseizutou Check Program Ver3.1 ...7.8 High
- Show moreLoading…