CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- intel trace analyzer and collectorUncontrolled search path in the Intel(R) Trace Analyzer and Collector before version 2020 update...6.7 Medium
- soft-o free password managerA DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to...7.8 High
- autodesk infraworksA maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk...7.8 High
- intel wake up latency tracerUncontrolled search path in the WULT software maintained by Intel(R) before version 1.0.0 (commit...8.8 High
- intel dsp builderUncontrolled search path for the DSP Builder software installer before version 22.4 for Intel(R)...6.7 Medium
- intel quartus primeUncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22...6.7 Medium
- intel maccpuidUncontrolled search path in the Intel(R) MacCPUID software before version 3.2 may allow an...4.2 Medium
- intel iflashvUncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version...6.7 Medium
- intel uniteUncontrolled search path in the Intel(R) Unite(R) Plugin SDK before version 4.2 may allow an...6.7 Medium
- intel oneapi toolkit and component software installers, advisor, cpu runtime +26 more +28 moreUncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before...6.7 Medium
- intel data center managerUncontrolled search path in the Intel(R) DCM software before version 5.1 may allow an...6.7 Medium
- intel nuc pro software suiteUncontrolled search path for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow...6.7 Medium
- intel nuc hdmi firmware update toolUncontrolled search path for the Intel(R) HDMI Firmware Update tool for NUC before version 1.79.1...6.7 Medium
- intel pathfinder for risc-vUncontrolled search path in some Intel(R) Pathfinder for RISC-V software may allow an...6.7 Medium
- intel nuc p14e laptop elementUncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element...6.7 Medium
- intel vtune profilerUncontrolled search path element in the Intel(R) VTune(TM) Profiler software before version 2023...6.7 Medium
- cyberghostvpn cyberghostCyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection...7.8 High
- acronis snap deployLocal privilege escalation due to a DLL hijacking vulnerability. The following products are...6.7 Medium
- git-for-windows git, git for windows project for windows +1 moreGit CMD erroneously executes `doskey.exe` in the current directory, if it exists7.3 High
- git-for-windows git, git for windows project for windows +1 moreGit for Windows's config file of `connect.exe` is susceptible to malicious placing7.6 High
- schneider electric easergy builder installerA CWE-427 - Uncontrolled Search Path Element vulnerability exists that could allow an attacker...6.3 Medium
- qualys cloud agentExecutable Hijacking6.7 Medium
- sap sapsetup, sapsetup (software installation program) +1 moreDLL Hijacking vulnerability in SapSetup (Software Installation Program)6.7 Medium
- sap hcm fiori app my forms (fiori 2.0), hcm fiori app my forms +1 moreMissing Authorization check in SAP HCM Fiori App My Forms (Fiori 2.0)4.3 Medium
- gbgplc acuant acufill sdkAn issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is used to install drivers...7.3 High
- gbgplc acuant acufill sdkAn issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is installed with insecure...7.3 High
- gbgplc acuant acufill sdkAn issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK repair, certutil.exe...6.7 Medium
- gbgplc acuant acufill sdkAn issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK installation,...7.8 High
- pandora kmplayerKMPlayer SHFOLDER.dll uncontrolled search path5.3 Medium
- m-filesLocal Elevation of Privilege in M-Files8.8 High
- aveva edgeThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- aveva edgeThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- aveva edgeThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- zoom meetings, zoom video communications inc client for meetings for it admin macos installers +1 moreLocal Privilege Escalation in Zoom for macOS Installers7.8 High
- apache openofficeApache OpenOffice: Empty entry in Java class path7.8 High
- veritas netbackupAn issue was discovered in Veritas NetBackup before 10.0. A vulnerability in the way NetBackup...7.8 High
- onlyoffice document serverONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges...7.8 High
- uwamp project uwampAn issue found in UwAmp v.1.1, 1.2, 1.3, 2.0, 2.1, 2.2, 2.2.1, 3.0.0, 3.0.1, 3.0.2 allows a...7.8 High
- tenable nessus, plugin feed +1 moreA vulnerability was reported where through modifying the scan variables, an authenticated user in...8.8 High
- mcafee total protectionMcAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL...5.5 Medium
- trend micro apex one, trend micro, inc. micro apex one +1 moreAn issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired...6.7 Medium
- trend micro apex one, trend micro, inc. micro apex one +1 moreAn uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer...9.8 Critical
- ivm development group pg ivmUncontrolled search path element vulnerability exists in pg_ivm versions prior to 1.5.1. When...8.8 High
- afl\+\+ project afl\+\+In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute...7.3 High
- infoblox bloxone endpointInfoblox BloxOne Endpoint for Windows through 2.2.7 allows DLL injection that can result in local...7.8 High
- intel administrative tools for intel network adapters, non-volatile memory update utility +1 moreUncontrolled search path in some Intel(R) Network Adapter installer software may allow an...6.7 Medium
- intel quickassist technologyUncontrolled search path in some Intel(R) QAT drivers for Windows before version 1.6 may allow an...6.7 Medium
- intel fpga software development kit, quartus prime +1 moreUncontrolled search path in some Intel(R) Quartus(R) Prime Pro and Standard Edition software may...6.7 Medium
- intel battery life diagnostic toolUncontrolled search path in the Intel(R) Battery Life Diagnostic Tool software before version 2.2...6.7 Medium
- intel oneapi dpc\+\+\/c\+\+ compiler runtimeUncontrolled search path element in the Intel(R) oneAPI DPC++/C++ Compiler Runtime before version...6.7 Medium
- Show moreLoading…