CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- audacityteam audacityAudacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting...7.8 High
- adobe digital editionsAdobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading...9.8 Critical
- adobe digital editionsAdobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading...9.8 Critical
- adobe digital editionsAdobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading...9.8 Critical
- emc vnx1 firmware, vnx2 firmware +1 moreIn EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80...7.3 High
- apcupsd apc ups daemonIn Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD...8.4 High
- geospatial information authority of japan (gsi) patchjgd (patchjgd101.exe), gsi patchjgd +1 moreUntrusted search path vulnerability in PatchJGD (PatchJGD101.EXE) ver. 1.0.1 allows an attacker...7.8 High
- schneider-electric somachine, schneider electric se somachine hvac programming software +1 moreA DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC...8.8 High
- rockwellautomation connected components workbenchA DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW)....7.0 High
- blftech visualview hmiAn Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9...7.0 High
- adobe acrobat, reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and...7.8 High
- adobe acrobat, reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and...7.8 High
- schneider-electric interactive graphical scada systemA DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System ...7.8 High
- microsoft skypeMicrosoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote...9.8 Critical
- avira free security suite, internet security suite, optimization suite +1 more +3 moreCode injection vulnerability in Avira Total Security Suite 15.0 (and earlier), Optimization Suite...6.7 Medium
- avast free antivirus, internet security, premier +1 more +3 moreCode injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and...6.7 Medium
- avg internet security, ultimate, anti-virus +2 moreCode injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security 17.1 (and...6.7 Medium
- trendmicro internet security, maximum security, antivirus\+ +1 more +3 moreCode injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet...6.7 Medium
- sielcosistemi winlog lite, winlog pro +1 moreAn issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3...7.2 High
- trane tracer scABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file...7.5 High
- tavis rudd cheetahCheetah Path Search Order Hijacking7.2 High
- opera browserOpera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local...7.2 High