CWE-426

High likelihood

Untrusted Search Path

Parent: CWE-642 - External Control of Critical State Data

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

657 vulnerabilities with CWE-426
CVE-2017-2269 HIGH
FileCapsule Deluxe Portable <2.0.9 - Privilege Escalation
CVSS 7.8
CVE-2017-2268 HIGH
FileCapsule Deluxe Portable <1.0.5.1 - Privilege Escalation
CVSS 7.8
CVE-2017-2267 HIGH
FileCapsule Deluxe Portable <1.0.5.1 - Privilege Escalation
CVSS 7.8
CVE-2017-2266 HIGH
FileCapsule Deluxe Portable <1.0.4.1 - Privilege Escalation
CVSS 7.8
CVE-2017-2265 HIGH
FileCapsule Deluxe Portable <1.0.4.1 - Privilege Escalation
CVSS 7.8
CVE-2017-2253 HIGH
Yahoo! Toolbar <8.0.0.6 - Privilege Escalation
CVSS 7.8
CVE-2017-2252 HIGH
File Compact <5.10-7.02 - Privilege Escalation
CVSS 7.8
CVE-2017-2249 HIGH
Lhaz+ <3.4.0 - Privilege Escalation
CVSS 7.8
CVE-2017-2248 HIGH
Lhaz+ <3.4.0 - Privilege Escalation
CVSS 7.8
CVE-2017-2247 HIGH
Chitora Lhaz < 2.4.0 - Untrusted Search Path via Trojan Horse DLL
CVSS 7.8
CVE-2017-2246 HIGH
Chitora Lhaz < 2.4.0 - Untrusted Search Path via Trojan Horse DLL
CVSS 7.8
CVE-2017-2233 HIGH
PDF Digital Signature Plugin G2.30 - Privilege Escalation
CVSS 7.8
CVE-2017-2232 HIGH
Shinseiyo Sogo Soft 4.8A - Privilege Escalation
CVSS 7.8
CVE-2017-2231 HIGH
MLIT DenshiSeikabutsuSakuseiShienKensa <3.02 - Privilege Escalation
CVSS 7.8
CVE-2017-2230 HIGH
Douro Kouji Kanseizutou Check Program <Ver3.1 - Privilege Escalation
CVSS 7.8
CVE-2017-2229 HIGH
Douroshisetu Kihon Data Sakusei System <= Ver1.0.2 - Untrusted Search Path
CVSS 7.8
CVE-2017-2227 HIGH
Charamin OMP <1.1.7.4 & <1.2.0.0 - Privilege Escalation
CVSS 7.8
CVE-2017-2226 HIGH
advance preparation for e-Tax <1.17.1 - Privilege Escalation
CVSS 7.8
CVE-2017-2225 CRITICAL
EbidSettingChecker.exe <1.0.0.0 - Privilege Escalation
CVSS 9.8
CVE-2017-2220 HIGH
CASL II Simulator - Privilege Escalation
CVSS 7.8
CVE-2017-2218 HIGH
QuickTime for Windows - Privilege Escalation
CVSS 7.8
CVE-2017-2215 HIGH
Installer <2017-06-12 - Privilege Escalation
CVSS 7.8
CVE-2017-2208 HIGH
Installer of Electronic Tendering and Bid Opening System < 06112017 - Untrusted Search Path
CVSS 7.8
CVE-2017-2188 HIGH
Denshinouhin Check System <9.0.001.001 - Privilege Escalation
CVSS 7.8
CVE-2017-1144 LOW
IBM WebSphere Message Broker and Integration Bus - Denial of Service via Untrusted Search Path
CVSS 2.5
Details
Vulnerabilities 657
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits