CWE-426: Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Also known as Untrusted Path.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- woodybells jtrimUntrusted search path vulnerability in Jtrim 1.53c and earlier (Installer) allows an attacker to...7.8 High
- purevpnAn issue was discovered in PureVPN through 5.19.4.0 on Windows. The client installation grants...7.8 High
- trend micro user-mode hooking (umh) module, trendmicro deep security, endpoint sensor +3 more +5 moreA DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an...7.0 High
- flets address selection tool, nippon telegraph and telephone west corporation flet's v4 / v6 address selection tool +1 moreUntrusted search path vulnerability in FLET'S v4 / v6 address selection tool allows an attacker...7.8 High
- flets azukeru backup tool, nippon telegraph and telephone east corporation "flet's azukeru backup tool" +1 moreUntrusted search path vulnerability in "FLET'S Azukeru Backup Tool" version 1.5.2.6 and earlier...7.8 High
- hcl software notes, ibm client application access +1 moreIBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL...7.8 High
- kddi anshin net security, kddi corporation anshin net security for windows +1 moreUntrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and...7.8 High
- march-hare wincvsMarch Hare WINCVS before 2.8.01 build 6610, and CVS Suite before 2009R2 build 6610, contains an...7.8 High
- sophos testerIn Sophos Tester Tool 3.2.0.7 Beta, the driver loads (in the context of the application used to...7.8 High
- superantispywareIn SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking,...7.8 High
- nippon telegraph and telephone east corporation flet's virus clear easy setup & application tool, flet's virus clear v6 easy setup & application tool, ntt-east flet\'s virus clear easy setup \& application tool +1 more +3 moreUntrusted search path vulnerability in FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.11...7.8 High
- yandex browser, yandex n.v. browser for desktop +1 moreYandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an...7.8 High
- intel graphics driverUntrusted search path in Intel Graphics Driver 15.40.x.x, 15.45.x.x, and 21.20.x.x allows...7.8 High
- navercorp whaleThe Installer in Whale allows DLL hijacking.7.8 High
- sony content manager assistant, sony interactive entertainment inc. content manager assistant for playstation +1 moreUntrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55...7.8 High
- sony music center, sony video & sound products inc. music center for pc +1 moreUntrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an...7.8 High
- goldenfrog vyprvpnIn Golden Frog VyprVPN before 2.15.0.5828 for macOS, the vyprvpnservice launch daemon has an...7.8 High
- gnu glibc, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreelf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and...7.8 High
- trend micro encryption for emailA service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below...7.8 High
- sap plant connectivityA malicious DLL preload attack possible on NwSapSetup and Installation self-extracting program...7.8 High
- huawei ec156 firmware, ec176 firmware, ec177 firmware +2 moreHuawei EC156, EC176, and EC177 USB Modem products with software before UTPS...7.8 High
- qnap qsync, qsync for windows (exe) +1 moreA DLL Hijacking vulnerability in QNAP Qsync for Windows (exe) version 4.2.2.0724 and earlier...7.8 High
- j-lis the public certification service for individuals, japan agency for local authority information systems the public certification service for individuals "the jpki user's software" +1 moreUntrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI...7.8 High
- amazon audibleActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute...7.8 High
- sony music center, sony video & sound products inc. music center for pc +1 moreUntrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to...7.8 High
- sony media goUntrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker...7.8 High
- huawei hedex liteHedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability...7.8 High
- vmware workstationVMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due...7.8 High
- book walker co.,ltd. walker for windows, bookwalker book walker +1 moreUntrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an...7.8 High
- cisco packet tracerAn untrusted search path (aka DLL Preload) vulnerability in the Cisco Network Academy Packet...6.7 Medium
- cisco advanced malware protection for endpointsAn untrusted search path (aka DLL Preloading) vulnerability in the Cisco Immunet antimalware...6.7 Medium
- sbi securities co.,ltd. hyper sbiUntrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier allows an attacker to gain...7.8 High
- apache openofficeAn installer defect known as an "unquoted Windows search path vulnerability" affected the Apache...7.8 High
- flets-w flets easy setup tool, nippon telegraph and telephone west corporation installer of flets easy setup tool +1 moreUntrusted search path vulnerability in Installer of Flets Easy Setup Tool Ver1.2.0 and earlier...7.8 High
- schedmd slurmInsecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before...7.8 High
- beyondtrust remote supportThe agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before...7.8 High
- hitachi solutions, ltd. hibun confidential file decryption program, hitachi-solutions confidential file decryption +1 moreUntrusted search path vulnerability in HIBUN Confidential File Decryption program prior to 10.50...7.8 High
- hitachi solutions, ltd. installer of hibun confidential file viewer, hitachi-solutions confidential file viewer +1 moreUntrusted search path vulnerability in Installer of HIBUN Confidential File Viewer prior to 11.20...7.8 High
- hitachi solutions, ltd. hibun confidential file decryption program, hitachi-solutions confidential file decryption +1 moreUntrusted search path vulnerability in HIBUN Confidential File Decryption program prior to 10.50...7.8 High
- proxychains-ng project proxychains-ngUntrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain...7.8 High
- cisco findit network discovery utilityA vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local...7.8 High
- digital arts inc. "i-filter 6.0 installer", daj i-filter installer +1 moreUntrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is...7.8 High
- digital arts inc. "i-filter 6.0 installer", daj i-filter installer +1 moreUntrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is...7.8 High
- digital arts inc. "i-filter 6.0 install program", daj i-filter installer +1 moreUntrusted search path vulnerability in "i-filter 6.0 install program" file version 1.0.8.1 and...7.8 High
- fujitsu fence-explorer, fujitsu limited fence-explorer for windows +1 moreUntrusted search path vulnerability in FENCE-Explorer for Windows V8.4.1 and earlier allows an...7.8 High
- fuji xerox co.,ltd. installer for contentsbridge utility for windows, fujixerox contentsbridge utility +1 moreUntrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and...7.8 High
- fujifilm apeosport-vi, docucentre-vi, fuji xerox co.,ltd. installer of art ex direct fax driver for apeosport-vi c7771/c6671/c5571/c4471/c3371/c2271 +9 more +11 moreUntrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671...7.8 High
- fuji xerox co.,ltd. self-extracting document generated by docuworks, fujixerox docuworks +1 moreUntrusted search path vulnerability in Self-extracting document generated by DocuWorks 8.0.7 and...7.8 High
- fujixerox docuworks, docuworks viewer light, fuji xerox co.,ltd. installer for docuworks +1 more +3 moreUntrusted search path vulnerability in Installers for DocuWorks 8.0.7 and earlier and DocuWorks...7.8 High
- nippon telegraph and telephone east corporation remote support tool (enkaku support tool), ntt enkaku support tool +1 moreUntrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions...7.8 High
- Show moreLoading…