The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
1,175 vulnerabilities with CWE-427
CVE-2019-5443
HIGH
curl <= 7.65.1 - Uncontrolled Search Path Element via OpenSSL Engine Config
CVSS 7.8
CVE-2019-12280
HIGH
PC-Doctor Toolbox <7.3 - Buffer Overflow
CVSS 7.8
CVE-2019-12572
HIGH
Private Internet Access VPN Client 1.0.2 - Authenticated Privilege Escalation via OpenSSL Engine Loading
CVSS 7.8
CVE-2019-12133
HIGH
Multiple Zoho ManageEngine products - Privilege Escalation
CVSS 7.8
CVE-2019-5245
MEDIUM
HiSuite <9.1.0.300 - Code Injection
CVSS 5.3
CVE-2019-12177
HIGH
ViveportDesktopService <1.0.0.36 - Privilege Escalation
CVSS 7.8
CVE-2019-7093
HIGH
Creative Cloud Desktop App <4.7.0.400 - Privilege Escalation
CVSS 7.8
CVE-2019-11644
HIGH
F-Secure <17.6 - Privilege Escalation
CVSS 7.8
CVE-2019-5526
HIGH
VMware Workstation 15.0.0-15.0.x - DLL Hijacking Privilege Escalation
CVSS 7.8
CVE-2019-5676
MEDIUM
NVIDIA GPU Display Driver 410-412.36 and GeForce Experience < 3.19 - Uncontrolled Search Path Element
CVSS 6.7
CVE-2019-6564
HIGH
GE Communicator < 4.0.517 - Uncontrolled Search Path Element via Installer Directory
CVSS 7.8
CVE-2019-6546
HIGH
GE Communicator < 4.0.517 - Uncontrolled Search Path Element
CVSS 7.8
CVE-2019-1794
MEDIUM
Cisco Meeting Server - Uncontrolled Search Path Element
CVSS 5.1
CVE-2019-6534
HIGH
Gemalto Sentinel UltraPro Client Library 1.3.0-1.3.2 - Uncontrolled Search Path Element in ux32w.dll
CVSS 7.8
CVE-2019-9896
HIGH
PuTTY < 0.71 - Uncontrolled Search Path Element via Help File
CVSS 7.8
CVE-2019-4094
HIGH
IBM DB2 9.7, 10.1, 10.5, 11.1 - Uncontrolled Search Path Element
CVSS 7.8
CVE-2019-9634
HIGH
Go <1.12 - Code Injection
CVSS 7.8
CVE-2019-9546
CRITICAL
SolarWinds Orion <2018.4-0 - Privilege Escalation
CVSS 9.8
CVE-2019-9116
HIGH
Sublime Text 3 - DLL Hijacking via Trojan Horse DLL in Temp Folder
CVSS 7.8
CVE-2019-7653
CRITICAL
Debian python-rdflib-tools 4.2.2-1 - Code Injection
CVSS 9.8
CVE-2018-7840
HIGH
VideoXpert OpsCenter <3.1 - Buffer Overflow
CVSS 7.8
CVE-2018-1890
MEDIUM
IBM SDK Java Technology Edition 8 - Uncontrolled Search Path Element
CVSS 5.6
CVE-2018-16177
HIGH
Windows 10 Fall Creators Update Modify Module - Untrusted Search Path Vulnerability
CVSS 7.8
CVE-2018-20211
HIGH
ExifTool <8.32 - Privilege Escalation
CVSS 7.8
CVE-2018-15452
MEDIUM
Cisco Advanced Malware Protection for Endpoints - DLL Hijacking via Uncontrolled Search Path
CVSS 5.5
Details
Vulnerabilities
1,175