CWE-426 · Untrusted Search Path (page 6)
Page 6 of 7 — CVEs classified under CWE-426, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-5696 | High | 7.8 | 2018-01-18 | Untrusted search path in Intel Graphics Driver 15.40.x.x, 15.45.x.x, and 21.20.x.x allows unprivileged user to elevate privileges via local access. |
CVE-2017-15913 | High | 7.8 | 2018-01-08 | The Installer in Whale allows DLL hijacking. |
CVE-2017-17010 | High | 7.8 | 2017-12-27 | Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a… |
CVE-2017-10909 | High | 7.8 | 2017-12-22 | Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspec… |
CVE-2017-17809 | High | 7.8 | 2017-12-20 | In Golden Frog VyprVPN before 2.15.0.5828 for macOS, the vyprvpnservice launch daemon has an unprotected XPC service that allows attackers to update the underl… |
CVE-2017-16997 | High | 7.8 | 2017-12-18 | elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE… |
CVE-2017-11397 | High | 7.8 | 2017-12-16 | A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arb… |
CVE-2017-16690 | High | 7.8 | 2017-12-12 | A malicious DLL preload attack possible on NwSapSetup and Installation self-extracting program for SAP Plant Connectivity 2.3 and 15.0. It is possible that SAP… |
CVE-2014-8358 | High | 7.8 | 2017-12-11 | Huawei EC156, EC176, and EC177 USB Modem products with software before UTPS-V200R003B015D02SP07C1014 (23.015.02.07.1014) and before V200R003B015D02SP08C1014 (2… |
CVE-2017-13070 | High | 7.8 | 2017-12-11 | A DLL Hijacking vulnerability in QNAP Qsync for Windows (exe) version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows… |
CVE-2017-10893 | High | 7.8 | 2017-12-08 | Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software" Ver3.1 and earlier allows an attacker to gai… |
CVE-2017-17069 | High | 7.8 | 2017-12-06 | ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a direc… |
CVE-2017-10892 | High | 7.8 | 2017-12-01 | Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified direct… |
CVE-2017-10891 | High | 7.8 | 2017-12-01 | Untrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified di… |
CVE-2017-8137 | High | 7.8 | 2017-11-22 | HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An a… |
CVE-2017-4939 | High | 7.8 | 2017-11-17 | VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This i… |
CVE-2017-10887 | High | 7.8 | 2017-11-17 | Untrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspeci… |
CVE-2017-12313 | Medium | 6.7 | 2017-11-16 | An untrusted search path (aka DLL Preload) vulnerability in the Cisco Network Academy Packet Tracer software could allow an authenticated, local attacker to ex… |
CVE-2017-12312 | Medium | 6.7 | 2017-11-16 | An untrusted search path (aka DLL Preloading) vulnerability in the Cisco Immunet antimalware installer could allow an authenticated, local attacker to execute… |
CVE-2017-10885 | High | 7.8 | 2017-11-13 | Untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
CVE-2016-6803 | High | 7.8 | 2017-11-13 | An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for Windows. The PC must ha… |
CVE-2017-10825 | High | 7.8 | 2017-11-02 | Untrusted search path vulnerability in Installer of Flets Easy Setup Tool Ver1.2.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in… |
CVE-2017-15566 | High | 7.8 | 2017-11-01 | Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege es… |
CVE-2017-5996 | High | 7.8 | 2017-10-26 | The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak %SYSTEMDRIVE%\Prog… |
CVE-2017-10865 | High | 7.8 | 2017-10-12 | Untrusted search path vulnerability in HIBUN Confidential File Decryption program prior to 10.50.0.5 allows an attacker to gain privileges via a Trojan horse D… |
CVE-2017-10864 | High | 7.8 | 2017-10-12 | Untrusted search path vulnerability in Installer of HIBUN Confidential File Viewer prior to 11.20.0001 allows an attacker to gain privileges via a Trojan horse… |
CVE-2017-10863 | High | 7.8 | 2017-10-12 | Untrusted search path vulnerability in HIBUN Confidential File Decryption program prior to 10.50.0.5 allows an attacker to gain privileges via a Trojan horse D… |
CVE-2015-3887 | High | 7.8 | 2017-09-21 | Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the cur… |
CVE-2017-12252 | High | 7.8 | 2017-09-21 | A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially caus… |
CVE-2017-10860 | High | 7.8 | 2017-09-15 | Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to execute arbitrary c… |
CVE-2017-10859 | High | 7.8 | 2017-09-15 | Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to gain privileges via… |
CVE-2017-10858 | High | 7.8 | 2017-09-15 | Untrusted search path vulnerability in "i-filter 6.0 install program" file version 1.0.8.1 and earlier allows an attacker to gain privileges via a Trojan horse… |
CVE-2017-10855 | High | 7.8 | 2017-09-15 | Untrusted search path vulnerability in FENCE-Explorer for Windows V8.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspeci… |
CVE-2017-10851 | High | 7.8 | 2017-09-01 | Untrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and earlier allows an attacker to gain privileges via a Trojan ho… |
CVE-2017-10850 | High | 7.8 | 2017-09-01 | Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/… |
CVE-2017-10849 | High | 7.8 | 2017-09-01 | Untrusted search path vulnerability in Self-extracting document generated by DocuWorks 8.0.7 and earlier allows an attacker to gain privileges via a Trojan hor… |
CVE-2017-10848 | High | 7.8 | 2017-09-01 | Untrusted search path vulnerability in Installers for DocuWorks 8.0.7 and earlier and DocuWorks Viewer Light published in Jul 2017 and earlier allows an attack… |
CVE-2017-10829 | High | 7.8 | 2017-09-01 | Untrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions distributed through the website till 2017 August 10 allow an atta… |
CVE-2017-11158 | High | 7.8 | 2017-08-31 | Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute a… |
CVE-2017-11157 | High | 7.8 | 2017-08-30 | Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Backup before 4.2.5-4396 on Windows allow local attackers to execute… |
CVE-2017-2242 | High | 7.8 | 2017-08-29 | Untrusted search path vulnerability in Flets Setsuzoku Tool for Windows all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspeci… |
CVE-2017-10836 | High | 7.8 | 2017-08-29 | Untrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified director… |
CVE-2017-10831 | High | 7.8 | 2017-08-29 | Untrusted search path vulnerability in The electronic authentication system based on the commercial registration system "The CRCA user's Software" Ver1.8 and e… |
CVE-2017-10830 | High | 7.8 | 2017-08-29 | Untrusted search path vulnerability in Security Setup Tool all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified director… |
CVE-2017-10828 | High | 7.8 | 2017-08-29 | Untrusted search path vulnerability in Flets Install Tool all versions distributed through the website till 2017 August 8 allows an attacker to gain privileges… |
CVE-2017-10827 | High | 7.8 | 2017-08-29 | Untrusted search path vulnerability in Flets Azukeru for Windows Auto Backup Tool v1.0.3.0 and earlier allows an attacker to gain privileges via a Trojan horse… |
CVE-2017-10826 | High | 7.8 | 2017-08-29 | Untrusted search path vulnerability in Security Kinou Mihariban v1.0.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecif… |
CVE-2017-10812 | High | 7.8 | 2017-08-29 | Untrusted search path vulnerability in Photo Collection PC Software Ver.4.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an un… |
CVE-2015-0974 | High | 7.8 | 2017-08-28 | Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by modifying the 'Ucell Internet' directory to referen… |
CVE-2017-11159 | High | 7.8 | 2017-08-23 | Multiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader before 1.4.2-084 on Windows allows local attackers to execute ar… |
CVE-2017-11160 | High | 7.8 | 2017-08-18 | Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to execute arbitrary code… |
CVE-2017-2289 | High | 7.8 | 2017-08-18 | Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacker to gain privileges via a Trojan… |
CVE-2017-2228 | High | 7.8 | 2017-08-18 | Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified di… |
CVE-2017-10824 | High | 7.8 | 2017-08-18 | Untrusted search path vulnerability in TDB CA TypeA use software Version 5.2 and earlier, distributed until 10 August 2017 allows an attacker to gain privilege… |
CVE-2017-10823 | High | 7.8 | 2017-08-18 | Untrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program (program released on 2011 March 10) Distributed on the website… |
CVE-2017-10822 | High | 7.8 | 2017-08-18 | Untrusted search path vulnerability in Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program (program released on 2013 September 30) distributed… |
CVE-2017-10821 | High | 7.8 | 2017-08-18 | Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program released on 2013 September 30) Distributed on… |
CVE-2017-6768 | High | 7.8 | 2017-08-17 | A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application Policy Infrastructure Controller (APIC)… |
CVE-2017-12892 | High | 7.8 | 2017-08-16 | Foxit PDF Compressor installers from versions from 7.0.0.183 to 7.7.2.10 contain a DLL preloading vulnerability, wherein it is possible for the installer to lo… |
CVE-2017-12480 | High | 7.8 | 2017-08-06 | Sandboxie installer 5071703 has a DLL Hijacking or Unsafe DLL Loading Vulnerability via a Trojan horse dwmapi.dll or profapi.dll file in an AppData\Local\Temp… |
CVE-2017-2221 | High | 7.8 | 2017-08-04 | Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspeci… |
CVE-2017-10820 | High | 7.8 | 2017-08-04 | Untrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an un… |
CVE-2017-11657 | High | 7.3 | 2017-08-04 | Dashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\Dashlane directory. |
CVE-2017-12414 | Critical | 9.8 | 2017-08-03 | Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll. |
CVE-2017-7642 | High | 7.8 | 2017-08-02 | The sudo helper in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.21 allows local users to gain root privileges by leveragin… |
CVE-2015-8264 | High | 7.8 | 2017-08-02 | Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan… |
CVE-2017-2279 | High | 7.8 | 2017-08-02 | Untrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
CVE-2017-11749 | High | 7.8 | 2017-07-30 | InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file. |
CVE-2017-11748 | High | 7.8 | 2017-07-30 | VIT Spider Player 2.5.3 has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll, olepro32.dll, dsound.dll, or AUDIOSES.dll file. |
CVE-2017-11742 | High | 7.8 | 2017-07-30 | The writeRandomBytes_RtlGenRandom function in xmlparse.c in libexpat in Expat 2.2.1 and 2.2.2 on Windows allows local users to gain privileges via a Trojan hor… |
CVE-2017-2272 | High | 7.8 | 2017-07-17 | Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.3.2.2.6 and earlier allows an attacker to gain privileges via… |
CVE-2017-2271 | High | 7.8 | 2017-07-17 | Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.2.8.3.0 and earlier allows an attacker to gain privileges via… |
CVE-2017-2270 | High | 7.8 | 2017-07-17 | Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacke… |
CVE-2017-2269 | High | 7.8 | 2017-07-17 | Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an uns… |
CVE-2017-2268 | High | 7.8 | 2017-07-17 | Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attac… |
CVE-2017-2267 | High | 7.8 | 2017-07-17 | Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an u… |
CVE-2017-2266 | High | 7.8 | 2017-07-17 | Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attac… |
CVE-2017-2265 | High | 7.8 | 2017-07-17 | Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an u… |
CVE-2017-2253 | High | 7.8 | 2017-07-17 | Untrusted search path vulnerability in Installer of Yahoo! Toolbar (for Internet explorer) v8.0.0.6 and earlier, with its timestamp prior to June 13, 2017, 18… |
CVE-2017-2252 | High | 7.8 | 2017-07-17 | Untrusted search path vulnerability in self-extracting archive files created by File Compact Ver.5 version 5.10 and earlier, Ver.6 version 6.02 and earlier, Ve… |
CVE-2017-2249 | High | 7.8 | 2017-07-17 | Untrusted search path vulnerability in Self-extracting archive files created by Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Tro… |
CVE-2017-2248 | High | 7.8 | 2017-07-17 | Untrusted search path vulnerability in Installer of Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecif… |
CVE-2017-2247 | High | 7.8 | 2017-07-17 | Untrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Troj… |
CVE-2017-2246 | High | 7.8 | 2017-07-17 | Untrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecifi… |
CVE-2017-2233 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Installer of PDF Digital Signature Plugin (G2.30) and earlier, distributed till June 29, 2017 allows an attacker to gain… |
CVE-2017-2232 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Installer of Shinseiyo Sogo Soft (4.8A) and earlier allows an attacker to gain privileges via a Trojan horse DLL in an u… |
CVE-2017-2231 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in The installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till June 20, 2017, The… |
CVE-2017-2230 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Douro Kouji Kanseizutou Check Program Ver3.1 (cdrw_checker_3.1.0.lzh) and earlier allows remote attackers to gain privil… |
CVE-2017-2229 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Douroshisetu Kihon Data Sakusei System Ver1.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL… |
CVE-2017-2227 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in The installer of Charamin OMP Version 1.1.7.4 and earlier, Version 1.2.0.0 Beta and earlier allows an attacker to gain p… |
CVE-2017-2226 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Setup file of advance preparation for e-Tax software (WEB version) (1.17.1) and earlier allows an attacker to gain privi… |
CVE-2017-2225 | Critical | 9.8 | 2017-07-07 | Untrusted search path vulnerability in EbidSettingChecker.exe (version 1.0.0.0) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified… |
CVE-2017-2220 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Installer of CASL II simulator (self-extract format) allows an attacker to gain privileges via a Trojan horse DLL in an… |
CVE-2017-2218 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified direct… |
CVE-2017-2215 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Installer of "Setup file of advance preparation" (jizen_setup.exe) (The version which was available on the website prior… |
CVE-2017-2208 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Installer of Electronic tendering and bid opening system available prior to June 12, 2017 allows an attacker to execute… |
CVE-2017-2188 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Installer of Denshinouhin Check System (for Ministry of Agriculture, Forestry and Fisheries Nouson Seibi Jigyou) 2014 Ma… |
CVE-2017-1144 | Low | 2.5 | 2017-07-05 | IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting. IBM X-Force ID: 122033. |
CVE-2016-8746 | Medium | 5.9 | 2017-06-14 | Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to t… |
CVE-2017-2219 | High | 7.8 | 2017-06-09 | Untrusted search path vulnerability in the [Simeji for Windows] installer (simeji.exe) allows an attacker to gain privileges via a Trojan horse DLL in an unspe… |