CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- rdflib project rdflib, canonical ubuntu linux, debian linux +2 moreThe Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load...9.8 Critical
- ntt-west fall creators update, nippon telegraph and telephone west corporation the installer of windows10 fall creators update modify module for security measures tool +1 moreUntrusted search path vulnerability in The installer of Windows 10 Fall Creators Update Modify...7.8 High
- exiftool project exiftoolExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache...7.8 High
- cisco advanced malware protection for endpoints, amp for endpoints +1 moreCisco Advanced Malware Protection for Endpoints on Windows DLL Preloading Vulnerability5.5 Medium
- schneider electric se electric software update (sesu), all versions prior to v2.2.0, schneider-electric software update utility +1 moreA DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions...7.8 High
- fuji electric energy savings estimatorAn uncontrolled search path element (DLL Hijacking) vulnerability has been identified in Fuji...7.8 High
- adobe technical communications suiteAdobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading ...7.8 High
- dell digital deliveryDell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local...7.8 High
- intel iot developers kitA DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an...4.8 Medium
- intel data migration software, intel corporation intel(r) data migration software +1 moreDLL injection vulnerability in software installer for Intel Data Center Migration Center Software...5.3 Medium
- siemens td keypad designerA vulnerability has been identified in SIEMENS TD Keypad Designer (All versions). A DLL hijacking...7.8 High
- emerson deltav, deltav dcs +1 moreEmerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file...7.8 High
- symantec norton power eraser, symdiag +1 moreNorton Power Eraser (prior to 5.3.0.24) and SymDiag (prior to 2.1.242) may be susceptible to a...7.8 High
- symantec norton utilitiesNorton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which...6.0 Medium
- quickheal antivirus pro, internet security, total security +2 moreQuick Heal Total Security 64 bit 17.00 (QHTS64.exe), (QHTSFT64.exe) - Version 10.0.1.38; Quick...7.8 High
- adobe connectAdobe Connect versions 9.7.5 and earlier have an Insecure Library Loading vulnerability....9.8 Critical
- emc rsa identity governance and lifecycle, rsa via lifecycle and governance, emc rsa identity management and governance +1 more +3 moreRSA Identity Governance and Lifecycle Uncontrolled Search Path Vulnerability7.3 High
- rust-lang rustThe Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427:...7.8 High
- mozilla firefoxThe "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of...7.8 High
- adobe coldfusionAdobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have...7.8 High
- intel corporation dual band wireless-ac, tri-band wireless-ac and wireless-ac family of products, intel dual band wireless-ac 3160, dual band wireless-ac 3165 +16 more +18 moreDLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel...7.8 High
- advantech webaccess, ics-cert advantech webaccess versions 8.1 and prior. +1 moreAdvantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an...7.8 High
- spidercontrol microbrowser, scada microbrowser +1 moreIn SpiderControl MicroBrowser Windows XP, Vista 7, 8 and 10, Versions 1.6.30.144 and prior, an...7.8 High
- swisscom tvmediahelperSwisscom TVMediaHelper 1.1.0.50 contains a vulnerability that could allow an unauthenticated,...7.8 High
- swisscom myswisscomassistantSwisscom MySwisscomAssistant 2.17.1.1065 contains a vulnerability that could allow an...7.8 High
- vyaire carefusion upgrade utilityA uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade...7.0 High
- moxa softnvr-ia live viewAn Uncontrolled Search Path Element issue was discovered in Moxa SoftNVR-IA Live Viewer, Version...7.2 High
- hashicorp vagrantIf HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but...7.8 High
- cisco findit network discovery utilityA vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local...7.8 High
- cisco packet tracerAn untrusted search path (aka DLL Preload) vulnerability in the Cisco Network Academy Packet...6.7 Medium
- automationdirect c-more micro (part number ea-pgmsw), c-more programming software (part number ea9-pgmsw), click programming software (part number c0-pgmsw) +9 more +11 moreIn AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C...7.8 High
- trihedral vtscadaAn Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior....7.8 High
- progea moviconAn Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and...7.8 High
- hashicorp vagrant vmware fusionAn insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware...7.8 High
- cisco meeting appA vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow...4.2 Medium
- i-sens smartlog diabetes management softwareAn Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes...7.8 High
- azeotech daqfactoryAn Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to...5.3 Medium
- synology cloud station driveMultiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive...7.8 High
- advantech webaccessAn Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to...7.8 High
- corel coreldraw, painter, pdf fusion +2 more +4 moreDLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel...7.8 High
- synology photo station uploaderMultiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader...7.8 High
- bmc patrolmcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the...7.8 High
- symantec vip access for desktopSymantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading...7.8 High
- simplight scadaAn Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3...7.0 High
- solarcontrols wattconfig mAn Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software...7.8 High
- solarcontrols heating control downloaderAn Uncontrolled Search Path Element issue was discovered in Solar Controls Heating Control...7.8 High
- 360totalsecurity 360 total security360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse...7.8 High
- claybird lhaforgeUntrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain...7.8 High
- sony nfc port software removerUntrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows...7.8 High
- sony nfc net installer, sfcard viewer 2, sony corporation pc/sc activator for type b +4 more +6 moreUntrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310...7.8 High
- Show moreLoading…