CWE-427

Uncontrolled Search Path Element

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

1,173 vulnerabilities with CWE-427
CVE-2019-16407 HIGH
JetBrains ReSharper <2019.2 - DLL Hijacking
CVSS 7.3
CVE-2019-3726 MEDIUM
Dell Update Package Framework < 3.8.3.67 - Authenticated DLL Hijacking via Uncontrolled Search Path
CVSS 6.7
CVE-2019-8076 HIGH
Adobe Application Manager 10.0 - Arbitrary Code Execution via Insecure Library Loading
CVSS 7.8
CVE-2019-11773 HIGH
Eclipse OMR <0.1 - Code Injection/Privilege Escalation
CVSS 7.8
CVE-2019-4447 HIGH
IBM DB2 High Performance Unload <6.1 - Command Injection
CVSS 7.8
CVE-2019-7364 HIGH
Autodesk Advance Steel 2017-2020 - Uncontrolled Search Path Element via DWG File
CVSS 7.8
CVE-2019-7362 HIGH
Autodesk Design Review <2019 - Code Injection
CVSS 7.8
CVE-2019-14686 HIGH
Trend Micro Security <2019 - DLL Hijacking
CVSS 7.8
CVE-2019-14687 HIGH
Trend Micro Password Manager 5.0 - DLL Hijacking
CVSS 7.8
CVE-2019-14684 HIGH
Trend Micro Password Manager 5.0 - DLL Hijacking
CVSS 7.8
CVE-2019-5631 HIGH
Rapid7 InsightAppSec < 2019.06.24 - DLL Injection in prunsrv.exe
CVSS 7.8
CVE-2019-8062 HIGH
Adobe After Effects < 16 - Uncontrolled Search Path Element
CVSS 7.8
CVE-2019-7961 HIGH
Adobe Prelude CC <8.1 - Code Injection
CVSS 7.8
CVE-2019-7931 HIGH
Adobe Premiere Pro CC <13.1.2 - RCE
CVSS 7.8
CVE-2019-7870 HIGH
Adobe Character Animator <=2.1 - RCE
CVSS 7.8
CVE-2019-4473 HIGH
IBM SDK Java Technology Edition 7 7R and 8 - Uncontrolled Search Path Element
CVSS 7.8
CVE-2019-14242 MEDIUM
Bitdefender <6.6.8.115,23.0.24.120 - Code Injection
CVSS 6.7
CVE-2019-1010100 HIGH
Akeo Rufus < 3.0 - DLL Search Order Hijacking in Executable Installers
CVSS 7.8
CVE-2019-7956 HIGH
Adobe Dreamweaver <19.0 - DLL Hijacking
CVSS 7.8
CVE-2019-6825 HIGH
ProClima < 8.0.0 - Uncontrolled Search Path Element via Malicious DLL Execution
CVSS 7.8
CVE-2019-5629 HIGH
Rapid7 Insight Agent < 2.6.3 - Local Privilege Escalation via Uncontrolled DLL Search Path
CVSS 7.8
CVE-2019-12575 HIGH
Private Internet Access VPN Client v82 - Authenticated Privilege Escalation via Library Loading Path
CVSS 7.8
CVE-2019-1855 HIGH
Cisco Jabber for Windows - Local Privilege Escalation
CVSS 7.3
CVE-2019-5443 HIGH
curl <= 7.65.1 - Uncontrolled Search Path Element via OpenSSL Engine Config
CVSS 7.8
CVE-2019-12280 HIGH
PC-Doctor Toolbox <7.3 - Buffer Overflow
CVSS 7.8
Details
Vulnerabilities 1,173
Links
MITRE CWE Entry Search this CWE With Exploits