The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
1,172 vulnerabilities with CWE-427
CVE-2020-15723
HIGH
360 Total Security < 12.1.0.1004 - Local Privilege Escalation via DLL Hijacking
CVSS 7.8
CVE-2020-15722
HIGH
360 Total Security < 12.1.0.1004 - Local Privilege Escalation via DLL Hijacking
CVSS 7.8
CVE-2020-12423
HIGH
Firefox < 78.0 - Uncontrolled Search Path Element via webauthn.dll
CVSS 7.8
CVE-2020-9100
HIGH
HiSuite < 10.1.0.500 - DLL Hijacking via Improper DLL Loading
CVSS 7.8
CVE-2020-15523
HIGH
Python 3.6-3.6.10, 3.7-3.7.8, 3.8-3.8.4rc1, 3.9-3.9.0b4 Windows - Uncontrolled Search Path
CVSS 7.8
CVE-2020-13279
HIGH
GitLab-Visual Studio Code Extension <2.2.0 - RCE
CVSS 8.6
CVE-2020-11613
HIGH
Mids' Reborn Hero Designer 2.6.0.7 - Uncontrolled Search Path Element via Insecure Installation Folder Permissions
CVSS 7.8
CVE-2020-7585
HIGH
SIMATIC PCS 7, SIMATIC PDM, SIMATIC STEP 7, SINAMICS STARTER - DLL Hijacking
CVSS 7.8
CVE-2020-9858
HIGH
Windows Migration Assistant < 2.2.0.0 - Unauthenticated Arbitrary Code Execution via Dynamic Library Loading
CVSS 7.8
CVE-2020-5357
HIGH
Dell Dock Firmware Update Utilities < 1.0.14 - Arbitrary File Overwrite via Symlink
CVSS 7.1
CVE-2020-13110
HIGH
kerberos < 1.0.0 - Uncontrolled Search Path Element via LoadLibrary()
CVSS 7.8
CVE-2020-10616
HIGH
Opto 22 SoftPAC <9.6 - Code Injection
CVSS 8.8
CVE-2020-10626
HIGH
Fazecast jSerialComm <2.2.2 - Code Injection
CVSS 7.8
CVE-2020-6244
HIGH
SAP Business Client 7.0 - Code Injection
CVSS 7.8
CVE-2020-5740
HIGH
Plex Media Server < 1.19.1.2701 - Unauthenticated Arbitrary Python Code Execution via Improper Input Validation
CVSS 7.8
CVE-2020-8895
HIGH
Google Earth < 7.3.3 - Unauthenticated Remote Code Execution via Untrusted Search Path
CVSS 7.8
CVE-2020-10515
CRITICAL
STARFACE UCC Client <6.7.1.204 - Code Injection
CVSS 9.8
CVE-2020-8146
HIGH
UniFi Video <3.10.2 - Privilege Escalation
CVSS 7.8
CVE-2020-3803
HIGH
Adobe Acrobat and Reader <2020.006.20034 - Privilege Escalation
CVSS 7.8
CVE-2020-10649
HIGH
ASUS Device Activation <1.0.7.0 - RCE
CVSS 7.8
CVE-2020-7474
HIGH
ProSoft Configurator < 1.002 - Untrusted Code Execution via DLL Search Path
CVSS 7.8
CVE-2020-9290
HIGH
FortiClient < 6.2.3 - Uncontrolled Search Path Element via Malicious Filter Library DLL
CVSS 7.8
CVE-2020-9287
HIGH
FortiClient EMS < 6.2.1 - Unauthenticated Arbitrary Code Execution via Filter Library DLL Hijacking
CVSS 7.8
CVE-2020-8469
HIGH
Trend Micro Password Manager <5.0 - Privilege Escalation
CVSS 7.8
CVE-2020-0565
HIGH
Intel Graphics Driver < 26.20.100.7158 - Authenticated Privilege Escalation via Uncontrolled Search Path
CVSS 7.8
Details
Vulnerabilities
1,172