CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- intel mpi libraryUncontrolled search path for some Intel(R) MPI Library Software before version 2021.11 may allow...6.7 Medium
- intel system support utilityUncontrolled search path element in some Intel(R) SSU software before version 3.0.0.2 may allow...6.7 Medium
- intel system usage report, system usage report for gameplay +1 moreUncontrolled search path in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may...6.7 Medium
- intel ispc, implicit spmd program compiler +1 moreUncontrolled search path in some Intel(R) ISPC software before version 1.21.0 may allow an...6.7 Medium
- intel field programmable gate array software development kit for opencl, software development kit for opencl +1 moreUncontrolled search path in some Intel(R) SDK for OpenCL(TM) Applications software may allow an...6.7 Medium
- intel battery life diagnostic toolUncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2...6.7 Medium
- intel qsfp\+ configuration utilityUncontrolled search path in Intel(R) QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.6.7 Medium
- intel binary configuration toolUncontrolled search path in some Intel(R) Binary Configuration Tool software before version 3.4.4...6.7 Medium
- intel computing improvement programUncontrolled search path in some Intel(R) CIP software before version 2.4.10577 may allow an...6.7 Medium
- intel oneapi, advisor, inspector +5 more +7 moreUncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before...6.7 Medium
- intel extreme tuning utilityUncontrolled search path in some Intel(R) XTU software before version 7.12.0.29 may allow an...6.7 Medium
- intel virtual raid on cpuUncontrolled search path element in some Intel(R) VROC software before version 8.0.8.1001 may...6.7 Medium
- intel thunderbolt dch driverUncontrolled search path element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before...6.7 Medium
- plone docker official imageAn issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for...9.8 Critical
- trend micro, inc. micro security (consumer) uiairsupport, trendmicro air support, antivirus \+ security +3 more +5 moreTrend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products,...7.8 High
- regify regipayAn issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking...7.8 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 code execution6.5 Medium
- intel nuc pro software suiteUncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software...7.9 High
- checkmkPrivilege escalation in jar_signature8.8 High
- ptc kepware kepserverex, thingworx industrial connectivity, thingworx kepware server +2 moreUncontrolled Search Path Element in PTC's Kepware KEPServerEX7.8 High
- ptc kepware kepserverex, thingworx industrial connectivity, thingworx kepware server +2 moreUncontrolled Search Path Element in PTC's Kepware KEPServerEX6.3 Medium
- zte zxcloud iraiDLL Hijacking Vulnerability in ZTE ZXCLOUD iRAI3.9 Low
- lenovo universal device client (udc), universal device client +1 moreUncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC...7.8 High
- zte zxcloud irai, zxcloud irai firmware +1 moreUnsafe DLL Loading Vulnerability in ZTE ZXCLOUD iRAI6.4 Medium
- ibm iIBM i code execution7.0 High
- peazipPeaZip Library dragdropfilesdll.dll uncontrolled search path5.3 Medium
- checkmkPrivilege escalation in agent via LD_LIBRARY_PATH8.8 High
- acronis cyber protect 16, cyber protect cloud agent, cyber protect home office +1 more +3 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...7.3 High
- enterprisedb postgres advanced serverAn issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x...8.8 High
- beyondtrust privilege management for windowsIn BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation...7.8 High
- baidu ttplayerDLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate...7.8 High
- ezviz studioEzViz Studio v2.2.0 is vulnerable to DLL hijacking.7.8 High
- huddly huddlycameraserviceDLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including...7.8 High
- notepad++, notepad-plus-plus notepad\+\+ +1 moreNotePad++ dbghelp.exe uncontrolled search path5.3 Medium
- 4d, 4d server, server.exe +1 more +3 moreUncontrolled Search Path Element Vulnerability in 4D and 4D Windows Server6.5 Medium
- netease cloudmusicAn Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 for Windows allows local...7.8 High
- sohu video playerAn Untrusted search path vulnerability in Sohu Video Player 7.0.15.0 allows local users to gain...7.8 High
- notepad-plus-plus notepad\+\+An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated...7.8 High
- plesk, plesk installer +1 moreUncontrolled search path element vulnerability in Plesk6.3 Medium
- artica pandora fms, pandora fms fms +1 moreTraversal Path on PHP file7.6 High
- artica pandora fms, pandora fms fms +1 moreArbitrary File Read6.0 Medium
- autodesk desktop connectorA maliciously crafted DLL file can be forced to install onto a non-default location, and attacker...7.8 High
- videolan vlc media playerA binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on...7.8 High
- duetdisplay duet display, duet display for windows 10+ +1 moreArbitrary code execution in Duet Display7.8 High
- sandisk security installer for windows, westerndigital sandisk security installer +1 moreMultiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows7.3 High
- intel qat drivers, quickassist technology, quickassist technology library +2 moreUncontrolled search path element in some Intel(R) QAT drivers for Windows - HW Version 2.0 before...6.7 Medium
- intel chipset device softwareUncontrolled search path element in some Intel(R) Chipset Device Software before version 10.1...6.7 Medium
- intel realsense d400 series dynamic calibration toolUncontrolled search path element in some Intel(R) RealSense(TM) Dynamic Calibration software...6.7 Medium
- intel server information retrieval utilityUncontrolled search path element in some Intel(R) Server Information Retrieval Utility software...6.7 Medium
- intel battery life diagnostic toolUncontrolled search path in some Intel Battery Life Diagnostic Tool software before version 2.2.1...6.7 Medium
- Show moreLoading…