The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
1,191 vulnerabilities with CWE-427
CVE-2023-53937
HIGH
Hubstaff 1.6.14 - DLL Search Order Hijacking
CVSS 7.8
CVE-2023-31358
HIGH
AMD Manageability API - Privilege Escalation
CVSS 7.3
CVE-2023-31361
HIGH
AMD AIM-T >=4.0.0.722 - DLL Hijacking in Manageability Service
CVSS 7.3
CVE-2023-31348
HIGH
AMD Prof < 4.1.424, < 4.2.816, < 4.2.845 - DLL Hijacking
CVSS 7.3
CVE-2023-45743
MEDIUM
Intel Driver & Support Assistant < 23.4.39.10 - Authenticated Privilege Escalation via Uncontrolled Search Path
CVSS 6.7
CVE-2023-45320
MEDIUM
Intel VTune Profiler < 2024.0 - Authenticated Privilege Escalation via Uncontrolled Search Path
CVSS 6.7
CVE-2023-43751
MEDIUM
Intel(R) Graphics <31.0.101.3790/31.0.101.2114 - Privilege Escalation
CVSS 6.7
CVE-2023-41961
MEDIUM
Intel Graphics Performance Analyzers < 2023.3 - Authenticated Privilege Escalation via Uncontrolled Search Path
CVSS 6.7
CVE-2023-40155
MEDIUM
Intel(R) CST <2.1.10300 - Privilege Escalation
CVSS 6.7
CVE-2023-39929
MEDIUM
Libva <2.20.0 - Privilege Escalation
CVSS 6.7
CVE-2023-35192
MEDIUM
Intel GPA Framework < 2023.3 - Authenticated Privilege Escalation via Uncontrolled Search Path
CVSS 6.7
CVE-2023-44440
HIGH
Ashlar-Vellum Lithium - Remote Code Execution via Uncontrolled Search Path Element
CVSS 8.8
CVE-2023-44439
HIGH
Ashlar-Vellum Xenon - Remote Code Execution via Uncontrolled Search Path Element
CVSS 8.8
CVE-2023-44438
HIGH
Ashlar-Vellum Argon - Remote Code Execution via Uncontrolled Search Path Element
CVSS 8.8
CVE-2023-44437
HIGH
Ashlar-Vellum Cobalt < 12.0.1204.78 - Remote Code Execution via Uncontrolled Search Path Element
CVSS 7.8
CVE-2023-27362
HIGH
3CX 18.0.0.451-18.0.8.917 - Local Privilege Escalation via OpenSSL Configuration File
CVSS 7.8
CVE-2023-51710
MEDIUM
EMS SQL Manager 3.6.2 - Code Injection
CVSS 4.2
CVE-2023-42920
HIGH
Claris Pro and FileMaker Pro < 20.2 - Uncontrolled Search Path Element
CVSS 7.8
CVE-2023-39254
MEDIUM
Dell Update Package Framework < 4.9.10 - Uncontrolled Search Path Element
CVSS 6.7
CVE-2023-6132
HIGH
AVEVA Platform Common Services - Uncontrolled Search Path Element
CVSS 7.3
CVE-2023-49114
MEDIUM
Qognify VMS Client Viewer >=7.1 - RCE
CVSS 6.7
CVE-2023-41091
MEDIUM
Intel(R) MPI Library <2021.11 - Privilege Escalation
CVSS 6.7
CVE-2023-40156
MEDIUM
Intel System Support Utility < 3.0.0.2 - Authenticated Privilege Escalation via Uncontrolled Search Path
CVSS 6.7
CVE-2023-39932
MEDIUM
Intel System Usage Report for Gameplay < 2.0.1901 - Privilege Escalation via Uncontrolled Search Path
CVSS 6.7
CVE-2023-38566
MEDIUM
Intel(R) ISPC <1.21.0 - Privilege Escalation
CVSS 6.7
Details
Vulnerabilities
1,191