CWE-426 · Untrusted Search Path (page 4)
Page 4 of 7 — CVEs classified under CWE-426, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-28964 | High | 7.1 | 2022-05-20 | An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11.6809.528) allows attackers to cause a Denial of Service (DoS) v… |
CVE-2022-29583 | High | 7.8 | 2022-04-22 | service_windows.go in the kardianos service package for Go omits quoting that is sometimes needed for execution of a Windows service executable from the intend… |
CVE-2022-24826 | Critical | 9.8 | 2022-04-20 | On Windows, if Git LFS operates on a malicious repository with a `..exe` file as well as a file named `git.exe`, and `git.exe` is not found in `PATH`, the `..e… |
CVE-2022-26184 | Critical | 9.8 | 2022-03-21 | Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry… |
CVE-2022-26183 | High | 8.8 | 2022-03-21 | PNPM v6.15.1 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute PNPM com… |
CVE-2022-26488 | High | 7.0 | 2022-03-10 | In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker t… |
CVE-2022-25366 | High | 7.8 | 2022-02-19 | Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.security.cs.disable-librar… |
CVE-2021-45975 | High | 7.8 | 2022-01-26 | In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a D… |
CVE-2022-0014 | Medium | 6.7 | 2022-01-12 | An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Wind… |
CVE-2021-33063 | High | 7.8 | 2021-11-17 | Uncontrolled search path in the Intel(R) RealSense(TM) D400 Series UWP driver for Windows 10 before version 6.1.160.22 may allow an authenticated user to poten… |
CVE-2020-12892 | High | 7.8 | 2021-11-15 | An untrusted search path in AMD Radeon settings Installer may lead to a privilege escalation or unauthorized code execution. |
CVE-2011-4125 | Critical | 9.8 | 2021-10-27 | A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root. |
CVE-2021-26557 | High | 7.8 | 2021-10-07 | When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-load… |
CVE-2021-26556 | High | 7.8 | 2021-10-07 | When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loadin… |
CVE-2021-36297 | High | 7.8 | 2021-09-28 | SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting… |
CVE-2021-31841 | High | 8.2 | 2021-09-22 | A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsigned DLL wi… |
CVE-2021-41387 | High | 8.8 | 2021-09-17 | seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root. |
CVE-2021-37617 | High | 7.3 | 2021-08-18 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. The Nextcloud Desktop Client invokes its uninstaller script… |
CVE-2021-21562 | Medium | 4.4 | 2021-08-03 | Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with (ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE)… |
CVE-2021-25699 | High | 7.8 | 2021-07-21 | The OpenSSL component of the Teradici PCoIP Software Client prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attac… |
CVE-2021-25698 | High | 7.8 | 2021-07-21 | The OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attack… |
CVE-2021-26807 | High | 7.8 | 2021-04-30 | GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, which allows an attacker to potentia… |
CVE-2021-29221 | High | 7.0 | 2021-04-09 | A local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3. By adding files to an existing installation's directory, a loc… |
CVE-2021-3146 | High | 7.8 | 2021-04-08 | The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain privileges. |
CVE-2021-28249 | High | 8.8 | 2021-03-26 | CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. To exploit the vulnerabilit… |
CVE-2021-28246 | High | 7.8 | 2021-03-26 | CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user must create… |
CVE-2021-21078 | Medium | 6.5 | 2021-03-12 | Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an atta… |
CVE-2021-22980 | High | 7.8 | 2021-02-12 | In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability in the BIG-IP APM… |
CVE-2021-21055 | Medium | 6.2 | 2021-02-11 | Adobe Dreamweaver versions 21.0 (and earlier) and 20.2 (and earlier) is affected by an untrusted search path vulnerability that could result in information dis… |
CVE-2021-21237 | High | 7.2 | 2021-01-15 | Git LFS is a command line extension for managing large files with Git. On Windows, if Git LFS operates on a malicious repository with a git.bat or git.exe file… |
CVE-2020-35686 | High | 7.8 | 2021-01-13 | The SECOMN service in Sound Research DCHU model software component modules (APO) through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation o… |
CVE-2020-29482 | Medium | 6.0 | 2020-12-15 | An issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute paths containing a full pathname, or via a relative path, which i… |
CVE-2020-4739 | High | 7.8 | 2020-11-20 | IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could all… |
CVE-2020-27695 | High | 7.8 | 2020-11-18 | Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a local directory… |
CVE-2020-6014 | Medium | 6.5 | 2020-11-02 | Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL d… |
CVE-2020-5144 | High | 7.8 | 2020-10-28 | SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking v… |
CVE-2020-6023 | High | 7.8 | 2020-10-27 | Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware. |
CVE-2020-5977 | High | 7.8 | 2020-10-23 | NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search pat… |
CVE-2020-8338 | High | 7.8 | 2020-10-14 | A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the sys… |
CVE-2020-6654 | High | 7.8 | 2020-09-30 | A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replac… |
CVE-2020-10733 | High | 7.3 | 2020-09-16 | The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-qualified paths. Executables in the directory where th… |
CVE-2020-0570 | High | 7.3 | 2020-09-14 | Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via lo… |
CVE-2020-7315 | Medium | 6.0 | 2020-09-10 | DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious D… |
CVE-2020-4545 | High | 7.8 | 2020-09-04 | IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loading of Dynamic Link Libraries by the imp… |
CVE-2020-14350 | High | 7.3 | 2020-08-24 | It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this… |
CVE-2020-10610 | High | 7.8 | 2020-07-24 | In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to… |
CVE-2020-8317 | High | 7.3 | 2020-07-24 | A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code… |
CVE-2020-15009 | High | 7.8 | 2020-07-20 | AsusScreenXpertServicec.exe and ScreenXpertUpgradeServiceManager.exe in ScreenPad2_Upgrade_Tool.msi V1.0.3 for ASUS PCs with ScreenPad 1.0 (UX450FDX, UX550GDX… |
CVE-2020-15801 | Critical | 9.8 | 2020-07-17 | In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name… |
CVE-2020-9673 | High | 7.8 | 2020-07-17 | Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Succes… |
CVE-2020-9672 | High | 7.8 | 2020-07-17 | Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Succes… |
CVE-2020-15602 | High | 7.8 | 2020-07-15 | An untrusted search path remote code execution (RCE) vulnerability in the Trend Micro Secuity 2020 (v16.0.0.1146 and below) consumer family of products could a… |
CVE-2020-1458 | High | 7.8 | 2020-07-14 | A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) files, aka 'Microsoft O… |
CVE-2020-11081 | Medium | 5.3 | 2020-07-10 | osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory… |
CVE-2019-19161 | High | 7.2 | 2020-06-30 | CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX c… |
CVE-2020-3768 | High | 7.8 | 2020-06-26 | ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escal… |
CVE-2020-7279 | Medium | 4.6 | 2020-06-10 | DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 Patch 15 U… |
CVE-2019-6196 | Medium | 6.7 | 2020-06-09 | A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during file extraction and… |
CVE-2019-6173 | Medium | 6.7 | 2020-06-09 | A DLL search path vulnerability could allow privilege escalation in some Lenovo installation packages, prior to version 1.2.9.3, during installation if an atta… |
CVE-2018-21241 | High | 7.8 | 2020-06-04 | An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code. |
CVE-2020-13813 | High | 7.8 | 2020-06-04 | An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory whe… |
CVE-2020-13812 | High | 7.8 | 2020-06-04 | An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory. |
CVE-2020-4019 | High | 7.8 | 2020-06-01 | The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place o… |
CVE-2020-7490 | High | 7.8 | 2020-04-22 | A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior), which could c… |
CVE-2020-8895 | High | 7.8 | 2020-04-21 | Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to… |
CVE-2020-7079 | High | 7.8 | 2020-04-17 | An improper signature validation vulnerability in Autodesk Dynamo BIM versions 2.5.1 and 2.5.0 may lead to code execution through maliciously crafted DLL files. |
CVE-2020-0598 | High | 7.8 | 2020-04-15 | Uncontrolled search path in the installer for the Intel(R) Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially… |
CVE-2020-8096 | Medium | 6.3 | 2020-04-07 | Untrusted Search Path vulnerability in Bitdefender High-Level Antimalware SDK for Windows allows an attacker to load third party code from a DLL library in the… |
CVE-2020-11507 | High | 7.8 | 2020-04-06 | An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL librar… |
CVE-2020-7260 | High | 7.3 | 2020-03-26 | DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary code via… |
CVE-2020-7476 | High | 7.8 | 2020-03-23 | A CWE-426: Untrusted Search Path vulnerability exists in ZigBee Installation Kit (Versions prior to 1.0.1), which could cause execution of malicious code when… |
CVE-2020-9418 | High | 7.8 | 2020-03-05 | An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code… |
CVE-2017-12580 | High | 7.8 | 2020-03-02 | An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same… |
CVE-2020-8793 | Medium | 4.7 | 2020-02-25 | OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in m… |
CVE-2019-20456 | High | 7.8 | 2020-02-16 | Goverlan Reach Console before 9.50, Goverlan Reach Server before 3.50, and Goverlan Client Agent before 9.20.50 have an Untrusted Search Path that leads to Com… |
CVE-2014-3860 | High | 7.8 | 2020-02-12 | Xilisoft Video Converter Ultimate 7.8.1 build-20140505 has a DLL Hijacking vulnerability |
CVE-2013-3494 | High | 7.8 | 2020-02-12 | A Code Execution Vulnerability exists in UMPlayer 0.98 in wintab32.dll due to insufficient path restrictions when loading external libraries. which could let a… |
CVE-2013-3942 | High | 7.8 | 2020-02-11 | Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability |
CVE-2019-4732 | Medium | 6.5 | 2020-02-03 | IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0 could allow a local authenticated att… |
CVE-2019-20358 | High | 7.8 | 2020-01-30 | Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same dire… |
CVE-2019-17099 | Medium | 5.3 | 2020-01-27 | An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker… |
CVE-2019-17100 | Medium | 5.2 | 2020-01-27 | An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issu… |
CVE-2013-2773 | High | 7.8 | 2020-01-14 | Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution |
CVE-2016-6593 | High | 7.8 | 2020-01-08 | A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious use… |
CVE-2019-6019 | High | 7.8 | 2019-12-26 | Untrusted search path vulnerability in STAMP Workbench installer all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified di… |
CVE-2019-19929 | High | 7.8 | 2019-12-23 | An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner before 8.0.1 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL… |
CVE-2019-18996 | High | 7.1 | 2019-12-18 | Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially al… |
CVE-2019-8801 | High | 7.8 | 2019-12-18 | A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes… |
CVE-2019-14599 | High | 7.8 | 2019-12-16 | Unquoted service path in Control Center-I version 2.1.0.0 and earlier may allow an authenticated user to potentially enable escalation of privilege via local a… |
CVE-2019-4606 | High | 7.8 | 2019-12-12 | IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search pa… |
CVE-2019-15628 | High | 7.8 | 2019-12-02 | Trend Micro Security (Consumer) 2020 (v16.0.1221 and below) is affected by a DLL hijacking vulnerability that could allow an attacker to use a specific service… |
CVE-2019-17446 | High | 7.8 | 2019-11-22 | An issue was discovered in Eracent EPA Agent through 10.2.26. The agent executable, when installed for non-root operations (scanning), can be used to start ext… |
CVE-2019-6189 | High | 7.8 | 2019-11-20 | A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load an unsig… |
CVE-2019-16861 | High | 7.3 | 2019-11-19 | Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local server could create or… |
CVE-2019-16860 | High | 7.3 | 2019-11-19 | Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could crea… |
CVE-2019-3648 | Medium | 6.1 | 2019-11-13 | A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary… |
CVE-2019-18196 | Medium | 6.7 | 2019-10-24 | A DLL side loading vulnerability in the Windows Service in TeamViewer versions up to 11.0.133222 (fixed in 11.0.214397), 12.0.181268 (fixed in 12.0.214399), 13… |
CVE-2019-17664 | High | 7.8 | 2019-10-16 | NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working directory is set to this p… |
CVE-2019-17449 | Medium | 6.7 | 2019-10-10 | Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack. NOTE: The vendor thinks that this vulnerability is invalid because exploiting it wo… |
CVE-2019-3745 | High | 7.3 | 2019-10-07 | The vulnerability is limited to the installers of Dell Encryption Enterprise versions prior to 10.4.0 and Dell Endpoint Security Suite Enterprise versions prio… |