Advisories · Weakness
CWE-426.
Every Advisory and CVE whose sources give the weakness CWE-426, newest first.
-
Untrusted search path in Network Configurator for DeviceNet Safety
- Network Configurator for DeviceNet Safety
- CWE-426
- CVSS 8.6 High
Untrusted search path in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- CWE-426
-
Untrusted search path in FileZilla
- FileZilla
- CWE-426
- CVSS 5.1 Medium
Untrusted search path in ZTE uSmartView
- ZTE uSmartView
- CWE-426
- CVSS 5.9 Medium
Apache Ranger policy engine incorrectly matches paths in certain conditions
- CWE-426
<0.6.3 · fixed in 0.6.3
GHSA-xv7x-x6wr-xx7g · CVE-2016-8746 -
Untrusted search path in NAVER Corporation Whale Browser Installer
- NAVER Corporation Whale Browser Installer
- CWE-426
- CVSS 8.8 High
Untrusted search path in Red Hat glusterfs
- Red Hat glusterfs
- CWE-426
- CVSS 7.8 High
Ruby-ffi has a DLL loading issue
- CWE-426
<1.9.24 · fixed in 1.9.24
GHSA-2gw2-8q9w-cw8p · CVE-2018-1000201 - CVSS 7.8 High
A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowin...
- CWE-426
>=2.4, <2.4.6.0 || >=2.5, <2.5.6 || >=2.6, <2.6.1 · fixed in 2.4.6.0, 2.5.6, 2.6.1
GHSA-fc4h-467w-46rh · CVE-2018-10875 - CVSS 7.8 High
In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.
- CWE-426
<2.4.6.0 || >=2.5, <2.5.6 || >=2.6, <2.6.1 · fixed in 2.4.6.0, 2.5.6, 2.6.1
GHSA-3xvg-x47j-x75w · CVE-2018-10874 - CVSS 7.8 High
High severity vulnerability that affects electron
- CWE-426
<0.33.5 · fixed in 0.33.5
GHSA-gvcj-pfq2-wxj7 · CVE-2016-1202 - CVSS 7.3 HighCritical · CVSS 7+ and EPSS
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-s…
- CWE-426
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic…
- CWE-426
- CVSS 7.8 High
Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1…
- CWE-426