CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- adobe creative cloud desktop, creative cloud desktop application +1 moreAdobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation7.1 High
- dell openmanage server administratorDell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege...7.3 High
- luxion keyshot, keyshot network rendering, keyshot viewer +2 moreLuxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability7.8 High
- d-link network assistantD-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.3 High
- intel graphics performance analyzer, graphics performance analyzers framework +1 moreUncontrolled search path in some Intel(R) GPA Framework software before version 2023.3 may allow...6.7 Medium
- intel graphics performance analyzersUncontrolled search path in some Intel(R) GPA software before version 2023.3 may allow an...6.7 Medium
- intel graphics windows dch driver softwareUncontrolled search path in Intel(R) Graphics Command Center Service bundled in some Intel(R)...6.7 Medium
- intel libvaUncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may...6.7 Medium
- intel context sensing technologyUncontrolled search path for some Intel(R) CST software before version 2.1.10300 may allow an...6.7 Medium
- intel dsa software uninstallers, driver \& support assistant +1 moreUncontrolled search path in some Intel(R) DSA software uninstallers before version 23.4.39.10 may...6.7 Medium
- intel chipset device softwareUncontrolled search path for some Intel(R) Chipset Device Software before version 10.1.19444.8378...6.7 Medium
- intel vtune profilerUncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024...6.7 Medium
- intel pcmUncontrolled search path in some Intel(R) PCM software before version 202311 may allow an...6.7 Medium
- intel gdb softwareUncontrolled search path for some Intel(R) Distribution for GDB software before version 2024.0...6.7 Medium
- intel inspector, hpc toolkit +1 moreUncontrolled search path in some Intel(R) Inspector software before version 2024.0 may allow an...6.7 Medium
- intel advisor, oneapi base toolkit +1 moreUncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an...6.7 Medium
- No product listedUncontrolled search path in some Intel(R) Processor Identification Utility software before...6.7 Medium
- intel quartus prime, quartus prime standard edition design software +1 moreUncontrolled search path in some Intel(R) Quartus(R) Prime Standard Edition Design software...6.7 Medium
- intel quartus prime, quartus prime pro +1 moreUncontrolled search path in some Intel(R) Quartus(R) Prime Pro Edition Design software before...6.7 Medium
- intel prime pro edition design, quartus prime, quartus prime lite edition design software +1 more +3 moreUncontrolled search path in some Intel(R) Quartus(R) Prime Lite Edition Design software before...6.7 Medium
- intel computing improvement programUncontrolled search path for some Intel(R) Computing Improvement Program software before version...6.7 Medium
- intel graphics performance analyzer, graphics performance analyzers framework +1 moreUncontrolled search path in some Intel(R) GPA Framework software before version 2023.4 may allow...6.7 Medium
- intel graphics performance analyzer, graphics performance analyzers +1 moreUncontrolled search path in some Intel(R) GPA software before version 2023.4 may allow an...6.7 Medium
- intel processor diagnostic toolUncontrolled search path in some Intel(R) Processor Diagnostic Tool software before version 4.1.9...6.7 Medium
- cisco network services orchestratorA vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of...7.8 High
- b&r industrial automation automation studioDLL Hijacking Vulnerability in Automation Studio7.2 High
- b&r industrial automation adi .net sdk, adi development kit, adi driver universal +22 more +24 moreInsecure Loading of Code in B&R Products7.2 High
- ashlar lithiumAshlar-Vellum Lithium Uncontrolled Search Path Element Remote Code Execution Vulnerability7.8 High
- ashlar xenonAshlar-Vellum Xenon Uncontrolled Search Path Element Remote Code Execution Vulnerability7.8 High
- ashlar argonAshlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt Uncontrolled Search Path Element Remote Code Execution Vulnerability7.8 High
- 3cx3CX Uncontrolled Search Path Local Privilege Escalation Vulnerability7.0 High
- oracle ens sql managerEMS SQL Manager 3.6.2 (build 55333) for Oracle allows DLL hijacking: a user can trigger the...4.2 Medium
- ibm i, rational development studio for i, rational developer for i +2 moreIBM i privilege escalation8.4 High
- veritas netbackupAn issue was discovered in Veritas NetBackup before 10.4. The Multi-Threaded Agent used in...7.7 High
- keyence vt studioVT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to...7.8 High
- dell alienware command center, alienware command center (awcc) +1 moreDell Alienware Command Center, versions prior to 6.2.7.0, contain an uncontrolled search path...7.4 High
- fujidenolo solutions co., ltd. sonicdicom media viewerUncontrolled search path element issue exists in SonicDICOM Media Viewer 2.3.2 and earlier, which...7.8 High
- okta verify for windows, verify +1 moreThe Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in...7.1 High
- sira easyrangeEasyRange Ver 1.41 contains an issue with the executable file search path when displaying an...7.8 High
- claris pro, filemaker pro +1 moreClaris International has fixed a dylib hijacking vulnerability in the FileMaker Pro.app and...7.8 High
- ibm iIBM i privilege escalation8.4 High
- westerndigital sandisk privateaccess, sandisk privateaccess windows app +1 moreSanDisk PrivateAccess DLL Hijacking Vulnerability7.9 High
- checkmkPrivilege escalation in windows agent8.8 High
- cisco secure clientA vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could...7.3 High
- electron electron-builderelectron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)7.3 High
- dell dup framework, update package framework +1 moreDell Update Package (DUP), Versions prior to 4.9.10 contain an Uncontrolled Search Path...6.7 Medium
- delta electronics cncsoft-b, deltaww dopsoft, delta electronics cncsoft-b v1.0.0.4 dopsoft +2 moreDelta Electronics CNCSoft-B DOPSoft Uncontrolled Search Path Element7.8 High
- aveva edge, platform common services +1 moreAVEVA Edge products Uncontrolled Search Path Element7.3 High
- hexagon qognify vms client viewer, qognify vms client viewer +1 moreLocal Privilege Escalation via DLL Hijacking6.7 Medium
- Show moreLoading…