CWE-426

High likelihood

Untrusted Search Path

Parent: CWE-642 - External Control of Critical State Data

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

657 vulnerabilities with CWE-426
CVE-2017-10826 HIGH
Security Kinou Mihariban <= 1.0.21 - Untrusted Search Path
CVSS 7.8
CVE-2017-10812 HIGH
Photo Collection PC Software < 4.0.2 - Untrusted Search Path
CVSS 7.8
CVE-2017-11159 HIGH
Synology Photo Station Uploader < 1.4.2-084 - Untrusted Search Path via DLL Hijacking
CVSS 7.8
CVE-2017-11160 HIGH
Synology Assistant < 6.1-15030 - Untrusted Search Path via DLL Hijacking
CVSS 7.8
CVE-2017-2289 HIGH
Qua station connection tool <1.00.03 - Privilege Escalation
CVSS 7.8
CVE-2017-2228 HIGH
Teikihoukokusho Sakuseishien Tool <4.0 - Privilege Escalation
CVSS 7.8
CVE-2017-10824 HIGH
TDB CA TypeA use software <= 5.2 - Untrusted Search Path
CVSS 7.8
CVE-2017-10823 HIGH
Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program - Untrusted Search Path
CVSS 7.8
CVE-2017-10822 HIGH
Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program - Untrusted Search Path
CVSS 7.8
CVE-2017-10821 HIGH
Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program - Untrusted Search Path
CVSS 7.8
CVE-2017-6768 HIGH
Cisco Application Policy Infrastructure Controller Privilege Escalation via Untrusted Library Search Path
CVSS 7.8
CVE-2017-12892 HIGH
Foxit PDF Compressor 7.0.0.183-7.7.2.10 - DLL Preloading via Installer Current Working Directory
CVSS 7.8
CVE-2017-12480 HIGH
Sandboxie Installer 5071703 - Untrusted Search Path via Trojan Horse DLL in Temp Directory
CVSS 7.8
CVE-2017-2221 HIGH
Baidu IME <3.6.1.6 - Privilege Escalation
CVSS 7.8
CVE-2017-10820 HIGH
IP Messenger for Win <= 4.60 - Untrusted Search Path
CVSS 7.8
CVE-2017-11657 HIGH
Dashlane - Untrusted Search Path Privilege Escalation via WINHTTP.dll
CVSS 7.3
CVE-2017-12414 CRITICAL
Format Factory 4.1.0 - Code Injection
CVSS 9.8
CVE-2017-7642 HIGH
HashiCorp Vagrant VMware Fusion <4.0.21 - Privilege Escalation
CVSS 7.8
CVE-2017-2279 HIGH
Tween <1.6.6.0 - Privilege Escalation
CVSS 7.8
CVE-2017-11749 HIGH
InternetSoft FTP Commander <8.02 - DLL Hijacking
CVSS 7.8
CVE-2017-11748 HIGH
VIT Spider Player <2.5.3 - Buffer Overflow
CVSS 7.8
CVE-2017-11742 HIGH
Expat 2.2.1-2.2.2 - Privilege Escalation
CVSS 7.8
CVE-2017-2272 HIGH
AttacheCase <3.2.2.6 - Privilege Escalation
CVSS 7.8
CVE-2017-2271 HIGH
AttacheCase <2.8.3.0 - Privilege Escalation
CVSS 7.8
CVE-2017-2270 HIGH
FileCapsule Deluxe Portable <2.0.9 - Privilege Escalation
CVSS 7.8
Details
Vulnerabilities 657
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits