CWE-427 · Uncontrolled Search Path Element (page 13)
Page 13 of 13 — CVEs classified under CWE-427, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-11159 | High | 7.8 | 2017-08-23 | Multiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader before 1.4.2-084 on Windows allows local attackers to execute ar… |
CVE-2017-13130 | High | 7.8 | 2017-08-23 | mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the… |
CVE-2017-6329 | High | 7.8 | 2017-08-21 | Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading vulnerability. These types of issues occur when an application looks to… |
CVE-2017-9661 | High | 7.0 | 2017-08-14 | An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. The uncontrolled search path element vulnerabi… |
CVE-2017-9648 | High | 7.8 | 2017-08-14 | An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior. An uncontrolled search path elemen… |
CVE-2017-9646 | High | 7.8 | 2017-08-14 | An Uncontrolled Search Path Element issue was discovered in Solar Controls Heating Control Downloader (HCDownloader) Version 1.0.1.15 and prior. An uncontrolle… |
CVE-2017-12653 | High | 7.8 | 2017-08-07 | 360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH, as demonstrated by… |
CVE-2017-2288 | High | 7.8 | 2017-08-02 | Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
CVE-2017-2287 | High | 7.8 | 2017-08-02 | Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an uns… |
CVE-2017-2286 | High | 7.8 | 2017-08-02 | Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC Port Sof… |
CVE-2017-1000010 | High | 7.8 | 2017-07-17 | Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting arbitrary code execution. |
CVE-2017-3097 | Critical | 9.8 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading functio… |
CVE-2017-3092 | Critical | 9.8 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of edit… |
CVE-2017-3090 | Critical | 9.8 | 2017-06-20 | Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of brow… |
CVE-2017-4987 | High | 7.3 | 2017-06-19 | In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a maliciously crafted… |
CVE-2017-7884 | High | 8.4 | 2017-06-16 | In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged, user to run arbitr… |
CVE-2017-2210 | High | 7.8 | 2017-06-09 | Untrusted search path vulnerability in PatchJGD (PatchJGD101.EXE) ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified dir… |
CVE-2017-7966 | High | 8.8 | 2017-06-07 | A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on t… |
CVE-2017-5176 | High | 7.0 | 2017-05-19 | A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW). The following versions are affected: Connected Components Workbe… |
CVE-2017-6051 | High | 7.0 | 2017-05-08 | An Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9.9.14.0 and prior. The uncontrolled search path element vulner… |
CVE-2017-3013 | High | 7.8 | 2017-04-12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerab… |
CVE-2017-3012 | High | 7.8 | 2017-04-12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerab… |
CVE-2017-6033 | High | 7.8 | 2017-04-07 | A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System (IGSS) Software, Version 12 and previous versions. The software w… |
CVE-2017-6517 | Critical | 9.8 | 2017-03-23 | Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This… |
CVE-2017-6417 | Medium | 6.7 | 2017-03-21 | Code injection vulnerability in Avira Total Security Suite 15.0 (and earlier), Optimization Suite 15.0 (and earlier), Internet Security Suite 15.0 (and earlier… |
CVE-2017-5567 | Medium | 6.7 | 2017-03-21 | Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), and Free Antivirus 12… |
CVE-2017-5566 | Medium | 6.7 | 2017-03-21 | Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security 17.1 (and earlier), and AVG AntiVirus FREE 17.1 (and earlier) allows a l… |
CVE-2017-5565 | Medium | 6.7 | 2017-03-21 | Code injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet Security 11.0 (and earlier), and Antivirus+ Security 11.0 (and earlie… |
CVE-2017-5161 | High | 7.2 | 2017-02-13 | An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Versi… |
CVE-2016-4526 | High | 7.5 | 2016-09-19 | ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory. |
CVE-2005-0457 | | 2005-05-02 | Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries int… |