The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
1,172 vulnerabilities with CWE-427
CVE-2022-38633
HIGH
Genymotion Desktop <3.2.1 - Privilege Escalation
CVSS 7.8
CVE-2022-34101
HIGH
Crestron AirMedia <4.3.1.39 - Privilege Escalation
CVSS 7.8
CVE-2022-39846
MEDIUM
Samsung Smart Switch PC < 4.3.22083_3 - Uncontrolled Search Path Element
CVSS 6.2
CVE-2022-36271
HIGH
Outbyte PC Repair Installation File <1.7.112.7856 - Code Injection
CVSS 7.8
CVE-2022-2006
HIGH
AutomationDirect C-more EA9 Firmware < 6.73 - Uncontrolled Search Path Element in Install Directory
CVSS 7.8
CVE-2022-28696
HIGH
Intel(R) Distribution for Python <2022.0.3 - Privilege Escalation
CVSS 7.8
CVE-2022-26374
HIGH
Intel(R) SEAPI - Privilege Escalation
CVSS 7.8
CVE-2022-25999
HIGH
Intel(R) Enpirion(R) Digital Power Configurator - Privilege Escalation
CVSS 7.8
CVE-2022-25841
HIGH
Intel Datacenter Group Event - Uncontrolled Search Path Element
CVSS 7.8
CVE-2022-21807
HIGH
Intel VTune Profiler < 2022.2.0 - Authenticated Privilege Escalation via Uncontrolled Search Path Element
CVSS 7.8
CVE-2022-2334
HIGH
Softing Secure Integration Server V1.22 - RCE
CVSS 7.2
CVE-2022-34235
HIGH
Adobe Premiere Elements <2020v20 - Privilege Escalation
CVSS 7.8
CVE-2022-36840
MEDIUM
Samsung Update < 2.2.9.50 - DLL Hijacking
CVSS 4.5
CVE-2022-2313
HIGH
MA Smart Installer <5.7.7 - Code Injection
CVSS 8.2
CVE-2022-36415
HIGH
Scooter Beyond Compare <4.4.3 - Code Injection
CVSS 7.8
CVE-2022-32498
MEDIUM
Dell PowerStore Command Line Interface < 3.0.0.0-1732745 - DLL Hijacking
CVSS 5.5
CVE-2022-34902
HIGH
Parallels Access 6.5.4 (39316) - Privilege Escalation via Unsecured Qt Plugin Loading
CVSS 7.8
CVE-2022-34901
HIGH
Parallels Access 6.5.4 (39316) - Privilege Escalation via Unsecured Service File Execution
CVSS 7.8
CVE-2022-34900
HIGH
Parallels Access 6.5.3 (39313) - Privilege Escalation via OpenSSL Configuration File
CVSS 7.8
CVE-2022-32223
HIGH
Node.js 14.0.0-14.13.1 and 14.14.0-14.19.3 - DLL Hijacking via OpenSSL Configuration Path
CVSS 7.3
CVE-2022-32222
MEDIUM
Node.js 18.x < 18.40.0 - Cryptographic Configuration Path Vulnerability
CVSS 5.3
CVE-2022-29187
HIGH
Git <2.37.1-2.30.5 - Privilege Escalation
CVSS 7.8
CVE-2022-33037
HIGH
orwell-dev-cpp < 5.11 - Uncontrolled Search Path Element via Crafted .exe File
CVSS 7.8
CVE-2022-33036
HIGH
Embarcadero Dev-C++ v6.3 - Uncontrolled Search Path Element
CVSS 7.8
CVE-2022-33035
HIGH
XLPD <7.0.0094 - Privilege Escalation
CVSS 7.8
Details
Vulnerabilities
1,172