# CWE-427. Every Advisory and CVE whose sources give the weakness CWE-427, newest first. ## Records, newest first (an older page) - [Zoom Workplace Desktop App for macOS - Uncontrolled Search Path Element](https://agentprime.io/advisories/CVE-2024-39820.md) `CVE-2024-39820` · CVE record: Zoom Communications, Inc Zoom Workplace Desktop App for macOS · CVSS 6.6 Medium · Not analysed yet · Published 15 Jul 2024 · Tags: CWE-427 - [IBM i privilege escalation](https://agentprime.io/advisories/CVE-2024-38330.md) `CVE-2024-38330` · CVE record: IBM i · CVSS 7.0 High · Not analysed yet · Published 8 Jul 2024 · Tags: CWE-427 - [Uncontrolled search path in Mitsubishi Electric Iconics Digital Solutions GENESIS64 and others](https://agentprime.io/advisories/CVE-2024-1182.md) `CVE-2024-1182` · CVE record: Mitsubishi Electric Iconics Digital Solutions GENESIS64 and 4 more · CVSS 7.0 High · Not analysed yet · Published 4 Jul 2024 · Tags: CWE-427 - [An issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096 on Windows.](https://agentprime.io/advisories/CVE-2024-39708.md) `CVE-2024-39708` · CVE record · CVSS 7.0 High · Not analysed yet · Published 27 Jun 2024 · Tags: CWE-427 - [Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation](https://agentprime.io/advisories/CVE-2024-34116.md) `CVE-2024-34116` · CVE record: Adobe Creative Cloud Desktop · CVSS 7.1 High · Not analysed yet · Published 13 Jun 2024 · Tags: CWE-427 - [Uncontrolled search path in Dell OpenManage Server Administrator](https://agentprime.io/advisories/CVE-2024-37130.md) `CVE-2024-37130` · CVE record: Dell Dell OpenManage Server Administrator · CVSS 7.3 High · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-427 - [Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-5509.md) `CVE-2024-5509` · CVE record: Luxion KeyShot · CVSS 7.8 High · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-427 - [D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2024-5292.md) `CVE-2024-5292` · CVE record: D-Link Network Assistant · CVSS 7.3 High · Not analysed yet · Published 23 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) GPA Framework software](https://agentprime.io/advisories/CVE-2023-35192.md) `CVE-2023-35192` · CVE record: Intel(R) GPA Framework software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) GPA software](https://agentprime.io/advisories/CVE-2023-41961.md) `CVE-2023-41961` · CVE record: Intel(R) GPA software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Graphics Windows DCH driver software](https://agentprime.io/advisories/CVE-2023-43751.md) `CVE-2023-43751` · CVE record: Intel(R) Graphics Windows DCH driver software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Libva software maintained by Intel(R)](https://agentprime.io/advisories/CVE-2023-39929.md) `CVE-2023-39929` · CVE record: Libva software maintained by Intel(R) · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) CST software](https://agentprime.io/advisories/CVE-2023-40155.md) `CVE-2023-40155` · CVE record: Intel(R) CST software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: Privilege escalation, CWE-427 - [Uncontrolled search path in Intel(R) DSA software uninstallers](https://agentprime.io/advisories/CVE-2023-45743.md) `CVE-2023-45743` · CVE record: Intel(R) DSA software uninstallers · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Chipset Device Software](https://agentprime.io/advisories/CVE-2024-21814.md) `CVE-2024-21814` · CVE record: Intel(R) Chipset Device Software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) VTune(TM) Profiler software](https://agentprime.io/advisories/CVE-2023-45320.md) `CVE-2023-45320` · CVE record: Intel(R) VTune(TM) Profiler software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: Privilege escalation, CWE-427 - [Uncontrolled search path in Intel(R) PCM software](https://agentprime.io/advisories/CVE-2024-21818.md) `CVE-2024-21818` · CVE record: Intel(R) PCM software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Distribution for GDB software](https://agentprime.io/advisories/CVE-2024-21841.md) `CVE-2024-21841` · CVE record: Intel(R) Distribution for GDB software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Inspector software](https://agentprime.io/advisories/CVE-2024-22379.md) `CVE-2024-22379` · CVE record: Intel(R) Inspector software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Advisor software](https://agentprime.io/advisories/CVE-2024-21772.md) `CVE-2024-21772` · CVE record: Intel(R) Advisor software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Processor Identification Utility software](https://agentprime.io/advisories/CVE-2024-21774.md) `CVE-2024-21774` · CVE record: Intel(R) Processor Identification Utility software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Quartus(R) Prime Standard Edition Design software](https://agentprime.io/advisories/CVE-2024-21862.md) `CVE-2024-21862` · CVE record: Intel(R) Quartus(R) Prime Standard Edition Design software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Quartus(R) Prime Pro Edition Design software](https://agentprime.io/advisories/CVE-2024-21777.md) `CVE-2024-21777` · CVE record: Intel(R) Quartus(R) Prime Pro Edition Design software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Quartus(R) Prime Lite Edition Design software](https://agentprime.io/advisories/CVE-2024-21837.md) `CVE-2024-21837` · CVE record: Intel(R) Quartus(R) Prime Lite Edition Design software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Computing Improvement Program software](https://agentprime.io/advisories/CVE-2024-21843.md) `CVE-2024-21843` · CVE record: Intel(R) Computing Improvement Program software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) GPA software](https://agentprime.io/advisories/CVE-2024-21788.md) `CVE-2024-21788` · CVE record: Intel(R) GPA software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) GPA Framework software](https://agentprime.io/advisories/CVE-2024-21861.md) `CVE-2024-21861` · CVE record: Intel(R) GPA Framework software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Processor Diagnostic Tool software](https://agentprime.io/advisories/CVE-2024-21831.md) `CVE-2024-21831` · CVE record: Intel(R) Processor Diagnostic Tool software · CVSS 6.7 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-427 - [Insecure Loading of Code in B&R Products](https://agentprime.io/advisories/CVE-2024-2637.md) `CVE-2024-2637` · CVE record: B&R Industrial Automation Scene Viewer and 4 more · CVSS 7.2 High · Not analysed yet · Published 14 May 2024 · Tags: CWE-427 - [Ashlar-Vellum Lithium Uncontrolled Search Path Element Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-44440.md) `CVE-2023-44440` · CVE record: Ashlar-Vellum Lithium · CVSS 7.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-427 - [Ashlar-Vellum Xenon Uncontrolled Search Path Element Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-44439.md) `CVE-2023-44439` · CVE record: Ashlar-Vellum Xenon · CVSS 7.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-427 - [Ashlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-44438.md) `CVE-2023-44438` · CVE record: Ashlar-Vellum Argon · CVSS 7.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-427 - [Ashlar-Vellum Cobalt Uncontrolled Search Path Element Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-44437.md) `CVE-2023-44437` · CVE record: Ashlar-Vellum Cobalt · CVSS 7.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-427 - [3CX Uncontrolled Search Path Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2023-27362.md) `CVE-2023-27362` · CVE record: 3CX 3CX · CVSS 7.0 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-427 - [EMS SQL Manager 3.6.2 (build 55333) for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed.](https://agentprime.io/advisories/CVE-2023-51710.md) `CVE-2023-51710` · CVE record · CVSS 4.2 Medium · Not analysed yet · Published 29 Apr 2024 · Tags: CWE-427 - [IBM i privilege escalation](https://agentprime.io/advisories/CVE-2024-25050.md) `CVE-2024-25050` · CVE record: IBM i and 1 more · CVSS 8.4 High · Not analysed yet · Published 28 Apr 2024 · Tags: CWE-427 - [An issue was discovered in Veritas NetBackup before 10.4.](https://agentprime.io/advisories/CVE-2024-33672.md) `CVE-2024-33672` · CVE record · CVSS 7.7 High · Not analysed yet · Published 26 Apr 2024 · Tags: CWE-427 - [Uncontrolled search path in KEYENCE CORPORATION VT STUDIO](https://agentprime.io/advisories/CVE-2024-28099.md) `CVE-2024-28099` · CVE record: KEYENCE CORPORATION VT STUDIO · CVSS 7.8 High · Not analysed yet · Published 15 Apr 2024 · Tags: CWE-427 - [Uncontrolled search path in Dell Alienware Command Center (AWCC)](https://agentprime.io/advisories/CVE-2024-22450.md) `CVE-2024-22450` · CVE record: Dell Alienware Command Center (AWCC) · CVSS 7.4 High · Not analysed yet · Published 10 Apr 2024 · Tags: CWE-427 - [Uncontrolled search path in Fujidenolo Solutions Co., Ltd. SonicDICOM Media Viewer](https://agentprime.io/advisories/CVE-2024-29734.md) `CVE-2024-29734` · CVE record: Fujidenolo Solutions Co., Ltd. SonicDICOM Media Viewer · CVSS 7.8 High · Not analysed yet · Published 3 Apr 2024 · Tags: CWE-427 - [Path traversal in Okta Verify for Windows](https://agentprime.io/advisories/CVE-2024-0980.md) `CVE-2024-0980` · CVE record: Okta Okta Verify for Windows · CVSS 7.1 High · Not analysed yet · Published 27 Mar 2024 · Tags: Path traversal, CWE-427 - [Uncontrolled search path in sira.jp EasyRange](https://agentprime.io/advisories/CVE-2024-28131.md) `CVE-2024-28131` · CVE record: sira.jp EasyRange · CVSS 7.8 High · Not analysed yet · Published 26 Mar 2024 · Tags: CWE-427 - [Uncontrolled search path in Claris FileMaker Pro](https://agentprime.io/advisories/CVE-2023-42920.md) `CVE-2023-42920` · CVE record: Claris FileMaker Pro · CVSS 7.8 High · Not analysed yet · Published 19 Mar 2024 · Tags: CWE-427 - [IBM i privilege escalation](https://agentprime.io/advisories/CVE-2024-22346.md) `CVE-2024-22346` · CVE record: IBM i · CVSS 8.4 High · Not analysed yet · Published 14 Mar 2024 · Tags: CWE-427 - [SanDisk PrivateAccess DLL Hijacking Vulnerability](https://agentprime.io/advisories/CVE-2024-22167.md) `CVE-2024-22167` · CVE record: SanDisk PrivateAccess Windows App · CVSS 7.9 High · Not analysed yet · Published 13 Mar 2024 · Tags: CWE-427 - [Privilege escalation in windows agent](https://agentprime.io/advisories/CVE-2024-0670.md) `CVE-2024-0670` · CVE record: Checkmk GmbH Checkmk · CVSS 8.8 High · Not analysed yet · Published 11 Mar 2024 · Tags: CWE-427 - [Uncontrolled search path in Cisco Secure Client](https://agentprime.io/advisories/CVE-2024-20338.md) `CVE-2024-20338` · CVE record: Cisco Cisco Secure Client · CVSS 7.3 High · Not analysed yet · Published 6 Mar 2024 · Tags: CWE-427 - [electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)](https://agentprime.io/advisories/GHSA-r4pf-3v7r-hh55.md) `GHSA-r4pf-3v7r-hh55`, `CVE-2024-27303` · npm `app-builder-lib`: affected `<24.13.2`, fixed in `24.13.2` · CVSS 7.3 High · Not analysed yet · Published 4 Mar 2024 · Tags: CWE-426, CWE-427 - [Uncontrolled search path in Dell DUP Framework](https://agentprime.io/advisories/CVE-2023-39254.md) `CVE-2023-39254` · CVE record: Dell DUP Framework · CVSS 6.7 Medium · Not analysed yet · Published 1 Mar 2024 · Tags: CWE-427 - [Delta Electronics CNCSoft-B DOPSoft Uncontrolled Search Path Element](https://agentprime.io/advisories/CVE-2024-1595.md) `CVE-2024-1595` · CVE record: Delta Electronics CNCSoft-B v1.0.0.4 DOPSoft · CVSS 7.8 High · Not analysed yet · Published 29 Feb 2024 · Tags: CWE-427 - [AVEVA Edge products Uncontrolled Search Path Element](https://agentprime.io/advisories/CVE-2023-6132.md) `CVE-2023-6132` · CVE record: AVEVA AVEVA Edge · CVSS 7.3 High · Not analysed yet · Published 29 Feb 2024 · Tags: CWE-427 - [Local Privilege Escalation via DLL Hijacking](https://agentprime.io/advisories/CVE-2023-49114.md) `CVE-2023-49114` · CVE record: Qognify VMS Client Viewer · CVSS 6.7 Medium · Not analysed yet · Published 26 Feb 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) SSU software](https://agentprime.io/advisories/CVE-2023-40156.md) `CVE-2023-40156` · CVE record: Intel(R) SSU software · CVSS 6.7 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) MPI Library Software](https://agentprime.io/advisories/CVE-2023-41091.md) `CVE-2023-41091` · CVE record: Intel(R) MPI Library Software · CVSS 6.7 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) SUR for Gameplay Software](https://agentprime.io/advisories/CVE-2023-39932.md) `CVE-2023-39932` · CVE record: Intel(R) SUR for Gameplay Software · CVSS 6.7 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) ISPC software](https://agentprime.io/advisories/CVE-2023-38566.md) `CVE-2023-38566` · CVE record: Intel(R) ISPC software · CVSS 6.7 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) SDK for OpenCL(TM) Applications software](https://agentprime.io/advisories/CVE-2023-36493.md) `CVE-2023-36493` · CVE record: Intel(R) SDK for OpenCL(TM) Applications software · CVSS 6.7 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Battery Life Diagnostic Tool software](https://agentprime.io/advisories/CVE-2023-35060.md) `CVE-2023-35060` · CVE record: Intel(R) Battery Life Diagnostic Tool software · CVSS 6.7 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) QSFP+ Configuration Utility software](https://agentprime.io/advisories/CVE-2023-28745.md) `CVE-2023-28745` · CVE record: Intel(R) QSFP+ Configuration Utility software · CVSS 6.7 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Binary Configuration Tool software](https://agentprime.io/advisories/CVE-2023-24591.md) `CVE-2023-24591` · CVE record: Intel(R) Binary Configuration Tool software · CVSS 6.7 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-427 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .