# CWE-427.

Every Advisory and CVE whose sources give the weakness CWE-427, newest first.

## Records, newest first (an older page)

- [Uncontrolled search path in Intel(R) CIP software](https://agentprime.io/advisories/CVE-2023-35769.md)
  `CVE-2023-35769` · CVE record: Intel(R) CIP software · CVSS 6.7 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) oneAPI Toolkit and component software installers](https://agentprime.io/advisories/CVE-2023-32618.md)
  `CVE-2023-32618` · CVE record: Intel(R) oneAPI Toolkit and component software installers · CVSS 6.7 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) XTU software](https://agentprime.io/advisories/CVE-2023-28407.md)
  `CVE-2023-28407` · CVE record: Intel(R) XTU software · CVSS 6.7 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) VROC software](https://agentprime.io/advisories/CVE-2023-32646.md)
  `CVE-2023-32646` · CVE record: Intel(R) VROC software · CVSS 6.7 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) Thunderbolt(TM) DCH drivers for Windows](https://agentprime.io/advisories/CVE-2023-25779.md)
  `CVE-2023-25779` · CVE record: Intel(R) Thunderbolt(TM) DCH drivers for Windows · CVSS 6.7 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-427
- [An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public…](https://agentprime.io/advisories/CVE-2024-23054.md)
  `CVE-2024-23054` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Feb 2024 · Tags: CWE-427
- [Uncontrolled search path in Trend Micro, Inc. Trend Micro Security (Consumer) uiAirSupport](https://agentprime.io/advisories/CVE-2024-23940.md)
  `CVE-2024-23940` · CVE record: Trend Micro, Inc. Trend Micro Security (Consumer) uiAirSupport · CVSS 7.8 High · Not analysed yet · Published 29 Jan 2024 · Tags: CWE-427
- [An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed.](https://agentprime.io/advisories/CVE-2023-51711.md)
  `CVE-2023-51711` · CVE record · CVSS 7.8 High · Not analysed yet · Published 24 Jan 2024 · Tags: CWE-427
- [IBM Db2 code execution](https://agentprime.io/advisories/CVE-2023-27859.md)
  `CVE-2023-27859` · CVE record: IBM Db2 for Linux, UNIX and Windows · CVSS 6.5 Medium · Not analysed yet · Published 22 Jan 2024 · Tags: CWE-427
- [Uncontrolled search path in Intel NUC Pro Software Suite Configuration Tool software installers](https://agentprime.io/advisories/CVE-2023-32272.md)
  `CVE-2023-32272` · CVE record: Intel NUC Pro Software Suite Configuration Tool software installers · CVSS 7.9 High · Not analysed yet · Published 19 Jan 2024 · Tags: CWE-427
- [Privilege escalation in jar_signature](https://agentprime.io/advisories/CVE-2023-6740.md)
  `CVE-2023-6740` · CVE record: Checkmk GmbH Checkmk · CVSS 8.8 High · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-427
- [Uncontrolled Search Path Element in PTC's Kepware KEPServerEX](https://agentprime.io/advisories/CVE-2023-29445.md)
  `CVE-2023-29445` · CVE record: PTC Kepware KEPServerEX and 2 more · CVSS 7.8 High · Not analysed yet · Published 10 Jan 2024 · Tags: CWE-427
- [Uncontrolled Search Path Element in PTC's Kepware KEPServerEX](https://agentprime.io/advisories/CVE-2023-29444.md)
  `CVE-2023-29444` · CVE record: PTC Kepware KEPServerEX and 2 more · CVSS 6.3 Medium · Not analysed yet · Published 10 Jan 2024 · Tags: CWE-427
- [Uncontrolled search path in Lenovo Universal Device Client (UDC)](https://agentprime.io/advisories/CVE-2023-6338.md)
  `CVE-2023-6338` · CVE record: Lenovo Universal Device Client (UDC) · CVSS 7.8 High · Not analysed yet · Published 3 Jan 2024 · Tags: CWE-427
- [IBM i code execution](https://agentprime.io/advisories/CVE-2023-43064.md)
  `CVE-2023-43064` · CVE record: IBM i · CVSS 7.0 High · Not analysed yet · Published 25 Dec 2023 · Tags: CWE-427
- [PeaZip Library dragdropfilesdll.dll uncontrolled search path](https://agentprime.io/advisories/CVE-2023-6891.md)
  `CVE-2023-6891` · CVE record: PeaZip · CVSS 5.3 Medium · Not analysed yet · Published 17 Dec 2023 · Tags: CWE-427
- [Privilege escalation in agent via LD_LIBRARY_PATH](https://agentprime.io/advisories/CVE-2023-31210.md)
  `CVE-2023-31210` · CVE record: Checkmk GmbH Checkmk · CVSS 8.8 High · Not analysed yet · Published 13 Dec 2023 · Tags: CWE-427
- [Uncontrolled search path in Acronis Cyber Protect Home Office and others](https://agentprime.io/advisories/CVE-2023-48677.md)
  `CVE-2023-48677` · CVE record: Acronis Acronis Cyber Protect Home Office and 3 more · CVSS 7.3 High · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-427
- [An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0.](https://agentprime.io/advisories/CVE-2023-41117.md)
  `CVE-2023-41117` · CVE record · CVSS 8.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-427
- [NotePad++ dbghelp.exe uncontrolled search path](https://agentprime.io/advisories/CVE-2023-6401.md)
  `CVE-2023-6401` · CVE record: NotePad++ · CVSS 5.3 Medium · Not analysed yet · Published 30 Nov 2023 · Tags: CWE-427
- [Uncontrolled Search Path Element Vulnerability in 4D and 4D Windows Server](https://agentprime.io/advisories/CVE-2023-4770.md)
  `CVE-2023-4770` · CVE record: 4D 4D.exe and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Nov 2023 · Tags: CWE-427
- [Uncontrolled search path element vulnerability in Plesk](https://agentprime.io/advisories/CVE-2023-4931.md)
  `CVE-2023-4931` · CVE record: Plesk Plesk Installer · CVSS 6.3 Medium · Not analysed yet · Published 27 Nov 2023 · Tags: CWE-427
- [Traversal Path on PHP file](https://agentprime.io/advisories/CVE-2023-41790.md)
  `CVE-2023-41790` · CVE record: Pandora FMS Pandora FMS · CVSS 7.6 High · Not analysed yet · Published 23 Nov 2023 · Tags: CWE-427
- [Arbitrary File Read](https://agentprime.io/advisories/CVE-2023-41787.md)
  `CVE-2023-41787` · CVE record: Pandora FMS Pandora FMS · CVSS 6.0 Medium · Not analysed yet · Published 23 Nov 2023 · Tags: CWE-427
- [Arbitrary code execution in Duet Display](https://agentprime.io/advisories/CVE-2023-6235.md)
  `CVE-2023-6235` · CVE record: Duet Display Duet Display for Windows 10+ · CVSS 7.8 High · Not analysed yet · Published 21 Nov 2023 · Tags: CWE-427
- [Multiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows](https://agentprime.io/advisories/CVE-2023-22818.md)
  `CVE-2023-22818` · CVE record: SanDisk SanDisk Security Installer for Windows · CVSS 7.3 High · Not analysed yet · Published 15 Nov 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) QAT drivers for Windows - HW Version 2.0](https://agentprime.io/advisories/CVE-2023-28740.md)
  `CVE-2023-28740` · CVE record: Intel(R) QAT drivers for Windows - HW Version 2.0 · CVSS 6.7 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) Chipset Device Software](https://agentprime.io/advisories/CVE-2023-28388.md)
  `CVE-2023-28388` · CVE record: Intel(R) Chipset Device Software · CVSS 6.7 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) RealSense(TM) Dynamic Calibration software](https://agentprime.io/advisories/CVE-2023-29504.md)
  `CVE-2023-29504` · CVE record: Intel(R) RealSense(TM) Dynamic Calibration software · CVSS 6.7 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) Server Information Retrieval Utility software](https://agentprime.io/advisories/CVE-2023-27513.md)
  `CVE-2023-27513` · CVE record: Intel(R) Server Information Retrieval Utility software · CVSS 6.7 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel Battery Life Diagnostic Tool software](https://agentprime.io/advisories/CVE-2023-34430.md)
  `CVE-2023-34430` · CVE record: Intel Battery Life Diagnostic Tool software · CVSS 6.7 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) OFU software](https://agentprime.io/advisories/CVE-2023-29161.md)
  `CVE-2023-29161` · CVE record: Intel(R) OFU software · CVSS 6.7 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool installation…](https://agentprime.io/advisories/CVE-2023-32660.md)
  `CVE-2023-32660` · CVE record: Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool installation software · CVSS 6.7 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) NUC 12 Pro Kits & Mini PCs…](https://agentprime.io/advisories/CVE-2023-33874.md)
  `CVE-2023-33874` · CVE record: Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software · CVSS 6.7 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) XTU software](https://agentprime.io/advisories/CVE-2023-34350.md)
  `CVE-2023-34350` · CVE record: Intel(R) XTU software · CVSS 6.7 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-427
- [Uncontrolled search path in Lenovo System Update](https://agentprime.io/advisories/CVE-2023-4632.md)
  `CVE-2023-4632` · CVE record: Lenovo Lenovo System Update · CVSS 7.8 High · Not analysed yet · Published 8 Nov 2023 · Tags: CWE-427
- [DLL Search Order Hijacking vulnerability in BleachBit for Windows](https://agentprime.io/advisories/CVE-2023-47113.md)
  `CVE-2023-47113` · CVE record: bleachbit bleachbit · CVSS 7.3 High · Not analysed yet · Published 8 Nov 2023 · Tags: CWE-427
- [Uncontrolled Search Path Element in GE MiCOM S1 Agile](https://agentprime.io/advisories/CVE-2023-0898.md)
  `CVE-2023-0898` · CVE record: General Electric MiCOM S1 Agile · CVSS 5.3 Medium · Not analysed yet · Published 7 Nov 2023 · Tags: CWE-427
- [CVE](https://agentprime.io/advisories/CVE-2023-31027.md)
  `CVE-2023-31027` · CVE record: nvidia NVIDIA GPU Display driver, vGPU driver, and Cloud gaming driver · CVSS 8.2 High · Not analysed yet · Published 2 Nov 2023 · Tags: CWE-427
- [CVE](https://agentprime.io/advisories/CVE-2023-31016.md)
  `CVE-2023-31016` · CVE record: nvidia NVIDIA GPU Display driver, vGPU driver, and Cloud gaming driver · CVSS 7.3 High · Not analysed yet · Published 2 Nov 2023 · Tags: CWE-427
- [Uncontrolled search path in SonicWall NetExtender](https://agentprime.io/advisories/CVE-2023-44220.md)
  `CVE-2023-44220` · CVE record: SonicWall NetExtender · No CVSS score · Not analysed yet · Published 27 Oct 2023 · Tags: CWE-427
- [XINJE XDPPro cfgmgr32.dll uncontrolled search path](https://agentprime.io/advisories/CVE-2023-5463.md)
  `CVE-2023-5463` · CVE record: XINJE XDPPro · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2023 · Tags: CWE-427
- [Uncontrolled search path in Acronis Cyber Protect Cloud Agent and others](https://agentprime.io/advisories/CVE-2023-45248.md)
  `CVE-2023-45248` · CVE record: Acronis Acronis Cyber Protect Cloud Agent and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 9 Oct 2023 · Tags: CWE-427
- [Caphyon Advanced Installer WinSxS DLL uncontrolled search path](https://agentprime.io/advisories/CVE-2022-4956.md)
  `CVE-2022-4956` · CVE record: Caphyon Advanced Installer · CVSS 7.8 High · Not analysed yet · Published 30 Sept 2023 · Tags: CWE-427
- [A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges.](https://agentprime.io/advisories/CVE-2023-41929.md)
  `CVE-2023-41929` · CVE record · CVSS 7.3 High · Not analysed yet · Published 18 Sept 2023 · Tags: CWE-427
- [ForeScout NAC SecureConnector – CWE-427: Uncontrolled Search Path Element](https://agentprime.io/advisories/CVE-2023-39374.md)
  `CVE-2023-39374` · CVE record: ForeScout NAC SecureConnector · CVSS 7.8 High · Not analysed yet · Published 3 Sept 2023 · Tags: CWE-427
- [Arbitrary File Write](https://agentprime.io/advisories/CVE-2023-3252.md)
  `CVE-2023-3252` · CVE record: Tenable Nessus · CVSS 6.8 Medium · Not analysed yet · Published 29 Aug 2023 · Tags: CWE-427
- [Uncontrolled search path in Lenovo Universal Device Client (UDC)](https://agentprime.io/advisories/CVE-2023-3078.md)
  `CVE-2023-3078` · CVE record: Lenovo Universal Device Client (UDC) · CVSS 7.8 High · Not analysed yet · Published 17 Aug 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) PSR SDK](https://agentprime.io/advisories/CVE-2023-29151.md)
  `CVE-2023-29151` · CVE record: Intel(R) PSR SDK · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) Server Board M10JNP2SB integrated BMC video drivers](https://agentprime.io/advisories/CVE-2023-34355.md)
  `CVE-2023-34355` · CVE record: Intel(R) Server Board M10JNP2SB integrated BMC video drivers · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) oneAPI Toolkit and component software installers](https://agentprime.io/advisories/CVE-2023-28823.md)
  `CVE-2023-28823` · CVE record: Intel(R) oneAPI Toolkit and component software installers · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) AI Hackathon software](https://agentprime.io/advisories/CVE-2023-28380.md)
  `CVE-2023-28380` · CVE record: Intel(R) AI Hackathon software · CVSS 8.8 High · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) oneMKL software](https://agentprime.io/advisories/CVE-2022-25864.md)
  `CVE-2022-25864` · CVE record: Intel(R) oneMKL software · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) VCUST Tool software](https://agentprime.io/advisories/CVE-2023-25944.md)
  `CVE-2023-25944` · CVE record: Intel(R) VCUST Tool software · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) Distribution of OpenVINO(TM) Toolkit](https://agentprime.io/advisories/CVE-2023-28405.md)
  `CVE-2023-28405` · CVE record: Intel(R) Distribution of OpenVINO(TM) Toolkit · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-427
- [Uncontrolled search path in ITE Tech consumer infrared drivers for Intel(R) NUC](https://agentprime.io/advisories/CVE-2023-23577.md)
  `CVE-2023-23577` · CVE record: ITE Tech consumer infrared drivers for Intel(R) NUC · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) Unite(R) Client software for Mac](https://agentprime.io/advisories/CVE-2023-25182.md)
  `CVE-2023-25182` · CVE record: Intel(R) Unite(R) Client software for Mac · CVSS 4.2 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) Quartus(R) Prime Pro and Standard edition software for linux](https://agentprime.io/advisories/CVE-2023-24016.md)
  `CVE-2023-24016` · CVE record: Intel(R) Quartus(R) Prime Pro and Standard edition software for linux · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) RST software](https://agentprime.io/advisories/CVE-2022-43456.md)
  `CVE-2022-43456` · CVE record: Intel(R) RST software · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-427
- [Uncontrolled search path in Siemens Software Center](https://agentprime.io/advisories/CVE-2021-41544.md)
  `CVE-2021-41544` · CVE record: Siemens Siemens Software Center · CVSS 7.8 High · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-427

Newest: <https://agentprime.io/advisories/tag/cwe-427.md>
Older: <https://agentprime.io/advisories/tag/cwe-427.md?cursor=WyIyMDIzLTA4LTA4VDA5OjIwOjA4LjY3NzAwMFoiLCJDVkUtMjAyMS00MTU0NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-427&cursor=WyIyMDI0LTAyLTE0VDEzOjM4OjEwLjk5NTAwMFoiLCJDVkUtMjAyMy0yNDU5MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-427/?cursor=WyIyMDI0LTAyLTE0VDEzOjM4OjEwLjk5NTAwMFoiLCJDVkUtMjAyMy0yNDU5MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.