The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
1,172 vulnerabilities with CWE-427
CVE-2020-15663
HIGH
Firefox < 80 and Firefox ESR 68.0-68.11 - Uncontrolled Search Path Element via Updater Rollback
CVSS 8.8
CVE-2020-6654
HIGH
Eaton 9000x Programming and Configuration Software < 2.0.38 - DLL Hijacking via vci11un6.DLL and cinpl.DLL
CVSS 7.8
CVE-2020-3979
HIGH
InstallBuilder for Qt Windows < 20.7.0 - Uncontrolled Search Path Element via Plugin Loading
CVSS 7.8
CVE-2020-7358
MEDIUM
AppSpider < 7.2.126 - Uncontrolled Search Path Element via Executable Placement
CVSS 5.8
CVE-2020-7312
HIGH
McAfee Agent < 5.6.6 - DLL Search Order Hijacking via Installer
CVSS 7.8
CVE-2020-24162
HIGH
Shenzhen Tencent app <5.8.2.5300 - Code Injection
CVSS 7.8
CVE-2020-24161
HIGH
Guangzhou NetEase Mail Master <4.14.1.1004 - Code Injection
CVSS 7.8
CVE-2020-24160
HIGH
Shenzhen Tencent TIM Windows client <3.0.0.21315 - Code Injection
CVSS 7.8
CVE-2020-24159
HIGH
NetEase Youdao Dictionary <8.9.2.0 - Code Injection
CVSS 7.8
CVE-2020-24158
HIGH
360 Speed Browser <12.0.1247.0 - Code Injection
CVSS 7.8
CVE-2020-25045
HIGH
Kaspersky Security Center < 12 - Uncontrolled Search Path Element
CVSS 7.8
CVE-2020-15167
HIGH
Miller 5.9.0 - Unauthenticated Remote Code Execution via Malicious .mlrrc File
CVSS 8.2
CVE-2020-5419
MEDIUM
RabbitMQ <3.8.7 - Local Windows Code Execution via Binary Planting
CVSS 6.7
CVE-2020-14349
HIGH
PostgreSQL 10.0-10.13 - Authenticated SQL Injection via Logical Replication Search Path
CVSS 7.1
CVE-2020-9724
HIGH
Adobe Lightroom <= 9.2.0.10 - Privilege Escalation via Insecure Library Loading
CVSS 7.8
CVE-2020-3433
HIGH
KEV
Cisco AnyConnect Secure Mobility Client for Windows - DLL Hijacking
CVSS 7.8
CVE-2020-9767
HIGH
Zoom Sharing Service - Uncontrolled Search Path Element via DLL Loading
CVSS 7.8
CVE-2020-7360
HIGH
Philips SmartControl < 4.3.15 - Authenticated Privilege Escalation via DLL Search Path Hijacking
CVSS 7.4
CVE-2020-8687
HIGH
Intel(R) RSTe Software RAID Driver <4.7.0.1119 - Privilege Escalation
CVSS 7.8
CVE-2020-15596
MEDIUM
HP Elite X2 1012 G1 Firmware - Uncontrolled Search Path
CVSS 6.7
CVE-2020-13177
HIGH
Teradici PCoIP Standard Agent <20.04.1-20.07.0 - Privilege Escalation
CVSS 7.8
CVE-2020-15657
HIGH
Firefox < 79.0 and Firefox ESR < 78.1 - Uncontrolled Search Path Element via DLL Loading
CVSS 7.8
CVE-2020-16143
HIGH
seafile-client 7.0.8 - DLL Hijacking via exchndl.dll Loading
CVSS 7.8
CVE-2020-10610
HIGH
OSIsoft PI System - Privilege Escalation
CVSS 7.8
CVE-2020-15724
HIGH
360 Total Security < 12.1.0.1005 - Local Privilege Escalation via DLL Hijacking
CVSS 7.8
Details
Vulnerabilities
1,172