The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
1,175 vulnerabilities with CWE-427
CVE-2017-14010
HIGH
SpiderControl MicroBrowser <1.6.30.144 - Code Injection
CVSS 7.8
CVE-2017-5170
HIGH
Moxa SoftNVR-IA Live Viewer <3.30.3122 - DLL Hijacking
CVSS 7.2
CVE-2017-16777
HIGH
HashiCorp Vagrant VMware Fusion <5.0.3 - Privilege Escalation
CVSS 7.8
CVE-2017-12314
HIGH
Cisco FindIT Network Discovery Utility - DLL Preloading
CVSS 7.8
CVE-2017-12313
MEDIUM
Cisco Network Academy Packet Tracer - Code Injection
CVSS 6.7
CVE-2017-14020
HIGH
AutomationDirect CLICK Programming Software <= 2.10 - Uncontrolled Search Path Element
CVSS 7.8
CVE-2017-14029
HIGH
Trihedral VTScada <11.3.03 - Code Injection
CVSS 7.8
CVE-2017-14017
HIGH
Progea Movicon <11.5.1181 - Code Injection
CVSS 7.8
CVE-2017-12579
HIGH
HashiCorp Vagrant VMware Fusion < 4.0.24 - Unauthenticated Privilege Escalation via SUID Wrapper Binary
CVSS 7.8
CVE-2017-12266
MEDIUM
Cisco Meeting App - Privilege Escalation
CVSS 4.2
CVE-2017-13993
HIGH
i-SENS SmartLog Diabetes Management Software <2.4.0 - Code Injection
CVSS 7.8
CVE-2017-5147
MEDIUM
AzeoTech DAQFactory <17.1 - Uncontrolled Search Path Element
CVSS 5.3
CVE-2017-11158
HIGH
Synology Cloud Station Drive < 4.2.5-4396 - Untrusted Search Path via DLL Hijacking
CVSS 7.8
CVE-2017-12717
HIGH
Advantech WebAccess < 8.2 - Uncontrolled Search Path Element
CVSS 7.8
CVE-2017-11159
HIGH
Synology Photo Station Uploader < 1.4.2-084 - Untrusted Search Path via DLL Hijacking
CVSS 7.8
CVE-2017-13130
HIGH
BMC Patrol - Uncontrolled Search Path Element via libmcmclnx.so
CVSS 7.8
CVE-2017-6329
HIGH
Symantec VIP Access for Desktop < 2.2.4 - DLL Pre-Loading via Uncontrolled Search Path
CVSS 7.8
CVE-2017-9661
HIGH
SIMPlight SCADA <4.3.0.27 - Code Injection
CVSS 7.0
CVE-2017-9648
HIGH
Solar Controls WATTConfig M <2.5.10.1 - Code Injection
CVSS 7.8
CVE-2017-9646
HIGH
Solar Controls HCDownloader <1.0.1.15 - Code Injection
CVSS 7.8
CVE-2017-12653
HIGH
360 Total Security < 9.0.0.1202 - Privilege Escalation via Shcore.dll Path Hijacking
CVSS 7.8
CVE-2017-2288
HIGH
LhaForge <1.6.5 - Privilege Escalation
CVSS 7.8
CVE-2017-2287
HIGH
NFC Port Software remover <1.3.0.1 - Privilege Escalation
CVSS 7.8
CVE-2017-2286
HIGH
NFC Port Software <5.5.0.6 - Privilege Escalation
CVSS 7.8
CVE-2017-1000010
HIGH
Audacity 2.1.2-2.3.2 - Uncontrolled Search Path Element via avformat-55.dll
CVSS 7.8
Details
Vulnerabilities
1,175