# CWE-427. Every Advisory and CVE whose sources give the weakness CWE-427, newest first. ## Records, newest first (an older page) - [Uncontrolled search path in Acronis Cyber Files](https://agentprime.io/advisories/CVE-2024-49391.md) `CVE-2024-49391` · CVE record: Acronis Acronis Cyber Files · CVSS 6.7 Medium · Not analysed yet · Published 17 Oct 2024 · Tags: CWE-427 - [SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2024-45710.md) `CVE-2024-45710` · CVE record: SolarWinds SolarWinds Platform · CVSS 7.8 High · Not analysed yet · Published 16 Oct 2024 · Tags: CWE-427 - [HCL BigFix Platform is affected by a DLL Hijack vulnerability](https://agentprime.io/advisories/CVE-2024-30117.md) `CVE-2024-30117` · CVE record: HCL Software BigFix Platform · CVSS 2.5 Low · Not analysed yet · Published 14 Oct 2024 · Tags: CWE-427 - [Uncontrolled search path in Lenovo Service Framework](https://agentprime.io/advisories/CVE-2024-33582.md) `CVE-2024-33582` · CVE record: Lenovo Service Framework · CVSS 7.8 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-427 - [Uncontrolled search path in Lenovo PC Manager AI intelligent scenario](https://agentprime.io/advisories/CVE-2024-33581.md) `CVE-2024-33581` · CVE record: Lenovo PC Manager AI intelligent scenario · CVSS 7.8 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-427 - [Uncontrolled search path in Lenovo Personal Cloud](https://agentprime.io/advisories/CVE-2024-33580.md) `CVE-2024-33580` · CVE record: Lenovo Personal Cloud · CVSS 7.8 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-427 - [Uncontrolled search path in Lenovo Baiying](https://agentprime.io/advisories/CVE-2024-33579.md) `CVE-2024-33579` · CVE record: Lenovo Baiying · CVSS 7.8 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-427 - [Uncontrolled search path in Lenovo Leyun](https://agentprime.io/advisories/CVE-2024-33578.md) `CVE-2024-33578` · CVE record: Lenovo Leyun · CVSS 7.8 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-427 - [Uncontrolled search path in Lenovo stARstudio](https://agentprime.io/advisories/CVE-2024-9046.md) `CVE-2024-9046` · CVE record: Lenovo stARstudio · CVSS 7.8 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-427 - [Uncontrolled search path in Lenovo Lock Screen](https://agentprime.io/advisories/CVE-2024-4132.md) `CVE-2024-4132` · CVE record: Lenovo Lock Screen · CVSS 7.8 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-427 - [Uncontrolled search path in Lenovo Emulator](https://agentprime.io/advisories/CVE-2024-4131.md) `CVE-2024-4131` · CVE record: Lenovo Emulator · CVSS 7.8 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-427 - [Uncontrolled search path in Lenovo App Store](https://agentprime.io/advisories/CVE-2024-4130.md) `CVE-2024-4130` · CVE record: Lenovo App Store · CVSS 7.8 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-427 - [Uncontrolled search path in Lenovo SuperFile](https://agentprime.io/advisories/CVE-2024-4089.md) `CVE-2024-4089` · CVE record: Lenovo SuperFile · CVSS 7.8 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-427 - [Uncontrolled search path in Siemens ModelSim and others](https://agentprime.io/advisories/CVE-2024-47196.md) `CVE-2024-47196` · CVE record: Siemens ModelSim and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-427 - [Uncontrolled search path in Siemens ModelSim and others](https://agentprime.io/advisories/CVE-2024-47195.md) `CVE-2024-47195` · CVE record: Siemens ModelSim and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-427 - [Uncontrolled search path in Siemens ModelSim and others](https://agentprime.io/advisories/CVE-2024-47194.md) `CVE-2024-47194` · CVE record: Siemens ModelSim and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-427 - [Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element](https://agentprime.io/advisories/CVE-2024-45246.md) `CVE-2024-45246` · CVE record: Diebold Nixdorf Vynamic View prior to v5.9.5 · CVSS 7.3 High · Not analysed yet · Published 6 Oct 2024 · Tags: CWE-427 - [Medium to High Integrity Privilege Escalation in Microsoft Windows](https://agentprime.io/advisories/CVE-2024-6769.md) `CVE-2024-6769` · CVE record: Microsoft Windows 10 and 4 more · CVSS 8.4 High · Not analysed yet · Published 26 Sept 2024 · Tags: CWE-426, CWE-427 - [Uncontrolled search path in Acronis Cyber Protect Cloud Agent and others](https://agentprime.io/advisories/CVE-2024-8766.md) `CVE-2024-8766` · CVE record: Acronis Acronis Cyber Protect Cloud Agent and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 16 Sept 2024 · Tags: CWE-427 - [Uncontrolled search path in Acronis Cyber Protect Cloud Agent](https://agentprime.io/advisories/CVE-2024-34016.md) `CVE-2024-34016` · CVE record: Acronis Acronis Cyber Protect Cloud Agent · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) RAID Web Console software](https://agentprime.io/advisories/CVE-2024-34153.md) `CVE-2024-34153` · CVE record: Intel(R) RAID Web Console software · CVSS 6.7 Medium · Not analysed yet · Published 16 Sept 2024 · Tags: CWE-427 - [Mattermost Desktop App Uncontrolled Search Path Vulnerability](https://agentprime.io/advisories/GHSA-wj4j-qc2m-fgh7.md) `GHSA-wj4j-qc2m-fgh7`, `CVE-2024-39613` · npm `mattermost-desktop`: affected `<5.9.0`, fixed in `5.9.0` · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2024 · Tags: CWE-427 - [Cisco Meraki Systems Manager Agent for Windows Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2024-20430.md) `CVE-2024-20430` · CVE record: Cisco Cisco Meraki Systems Manager Agent · CVSS 7.3 High · Not analysed yet · Published 12 Sept 2024 · Tags: CWE-427 - [Local privilege escalation vulnerability in AVG Internet Security](https://agentprime.io/advisories/CVE-2024-6510.md) `CVE-2024-6510` · CVE record: AVG Internet Security · CVSS 7.8 High · Not analysed yet · Published 12 Sept 2024 · Tags: Broken access control, CWE-427, CWE-749 - [Uncontrolled search path in Ivanti Endpoint Manager](https://agentprime.io/advisories/CVE-2024-8441.md) `CVE-2024-8441` · CVE record: Ivanti Endpoint Manager · CVSS 6.7 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-427 - [Uncontrolled search path in Ivanti Workspace Control](https://agentprime.io/advisories/CVE-2024-44107.md) `CVE-2024-44107` · CVE record: Ivanti Workspace Control · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-427 - [gix-path improperly resolves configuration path reported by Git](https://agentprime.io/advisories/GHSA-m8rp-vv92-46c7.md) `GHSA-m8rp-vv92-46c7`, `CVE-2024-45405`, `RUSTSEC-2024-0371` · crates.io `gix-path`: affected `>=0.0.0-0, <0.10.11`, fixed in `0.10.11` · CVSS 6.0 Medium · Not analysed yet · Published 6 Sept 2024 · Tags: CWE-41, CWE-427 - [Local privilege escalation in Overwolf](https://agentprime.io/advisories/CVE-2024-7834.md) `CVE-2024-7834` · CVE record: Overwolf Overwolf · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2024 · Tags: CWE-427 - [Uncontrolled search path in Acronis Snap Deploy](https://agentprime.io/advisories/CVE-2024-34017.md) `CVE-2024-34017` · CVE record: Acronis Acronis Snap Deploy · CVSS 6.7 Medium · Not analysed yet · Published 29 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Acronis Snap Deploy](https://agentprime.io/advisories/CVE-2024-34019.md) `CVE-2024-34019` · CVE record: Acronis Acronis Snap Deploy · CVSS 6.7 Medium · Not analysed yet · Published 29 Aug 2024 · Tags: CWE-427 - [VIPRE Advanced Security PMAgent Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2024-5929.md) `CVE-2024-5929` · CVE record: VIPRE Advanced Security · CVSS 7.8 High · Not analysed yet · Published 21 Aug 2024 · Tags: CWE-427 - [Scooter Software Beyond Compare 7zxa.dll uncontrolled search path](https://agentprime.io/advisories/CVE-2024-7886.md) `CVE-2024-7886` · CVE record: Scooter Software Beyond Compare · CVSS 8.5 High · Not analysed yet · Published 16 Aug 2024 · Tags: CWE-426, CWE-427 - [Uncontrolled search path in Intel(R) Ethernet Connection I219-LM install software](https://agentprime.io/advisories/CVE-2024-21769.md) `CVE-2024-21769` · CVE record: Intel(R) Ethernet Connection I219-LM install software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) oneAPI Compiler software](https://agentprime.io/advisories/CVE-2024-21857.md) `CVE-2024-21857` · CVE record: Intel(R) oneAPI Compiler software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) oneAPI Math Kernel Library software](https://agentprime.io/advisories/CVE-2024-21766.md) `CVE-2024-21766` · CVE record: Intel(R) oneAPI Math Kernel Library software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Distribution for GDB software](https://agentprime.io/advisories/CVE-2024-23491.md) `CVE-2024-23491` · CVE record: Intel(R) Distribution for GDB software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) FPGA SDK for OpenCL(TM) software technology](https://agentprime.io/advisories/CVE-2024-23909.md) `CVE-2024-23909` · CVE record: Intel(R) FPGA SDK for OpenCL(TM) software technology · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) GPA software](https://agentprime.io/advisories/CVE-2024-28046.md) `CVE-2024-28046` · CVE record: Intel(R) GPA software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in installation software for Intel(R) Ethernet Adapter Driver Pack](https://agentprime.io/advisories/CVE-2024-22376.md) `CVE-2024-22376` · CVE record: installation software for Intel(R) Ethernet Adapter Driver Pack · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) High Level Synthesis Compiler software](https://agentprime.io/advisories/CVE-2024-23907.md) `CVE-2024-23907` · CVE record: Intel(R) High Level Synthesis Compiler software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) IPP Cryptography software](https://agentprime.io/advisories/CVE-2024-21784.md) `CVE-2024-21784` · CVE record: Intel(R) IPP Cryptography software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) MPI Library software](https://agentprime.io/advisories/CVE-2024-28876.md) `CVE-2024-28876` · CVE record: Intel(R) MPI Library software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Simics Package Manager software](https://agentprime.io/advisories/CVE-2024-26027.md) `CVE-2024-26027` · CVE record: Intel(R) Simics Package Manager software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Trace Analyzer and Collector software](https://agentprime.io/advisories/CVE-2024-28172.md) `CVE-2024-28172` · CVE record: Intel(R) Trace Analyzer and Collector software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) VTune(TM) Profiler software](https://agentprime.io/advisories/CVE-2024-29015.md) `CVE-2024-29015` · CVE record: Intel(R) VTune(TM) Profiler software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in EMON software](https://agentprime.io/advisories/CVE-2024-28953.md) `CVE-2024-28953` · CVE record: EMON software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) License Manager for FLEXlm product software](https://agentprime.io/advisories/CVE-2024-24977.md) `CVE-2024-24977` · CVE record: Intel(R) License Manager for FLEXlm product software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Quartus(R) Prime Pro Edition Design Software](https://agentprime.io/advisories/CVE-2024-22184.md) `CVE-2024-22184` · CVE record: Intel(R) Quartus(R) Prime Pro Edition Design Software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) VROC software](https://agentprime.io/advisories/CVE-2024-23489.md) `CVE-2024-23489` · CVE record: Intel(R) VROC software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) IPP software](https://agentprime.io/advisories/CVE-2024-28887.md) `CVE-2024-28887` · CVE record: Intel(R) IPP software · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-427 - [Path traversal in Okta Verify for Windows](https://agentprime.io/advisories/CVE-2024-7061.md) `CVE-2024-7061` · CVE record: Okta Okta Verify for Windows · CVSS 5.5 Medium · Not analysed yet · Published 7 Aug 2024 · Tags: Path traversal, CWE-427 - [Uncontrolled search path in Canonical Ltd. wpa_supplicant](https://agentprime.io/advisories/CVE-2024-5290.md) `CVE-2024-5290` · CVE record: Canonical Ltd. wpa_supplicant · CVSS 8.8 High · Not analysed yet · Published 7 Aug 2024 · Tags: CWE-427 - [IObit DualSafe Password Manager BPL RTL120.BPL uncontrolled search path](https://agentprime.io/advisories/CVE-2024-7326.md) `CVE-2024-7326` · CVE record: IObit DualSafe Password Manager · CVSS 8.5 High · Not analysed yet · Published 31 Jul 2024 · Tags: CWE-427 - [IObit Driver Booster BPL VCL120.BPL uncontrolled search path](https://agentprime.io/advisories/CVE-2024-7325.md) `CVE-2024-7325` · CVE record: IObit Driver Booster · CVSS 8.5 High · Not analysed yet · Published 31 Jul 2024 · Tags: CWE-427 - [IObit iTop Data Recovery Pro BPL madbasic\_.bpl uncontrolled search path](https://agentprime.io/advisories/CVE-2024-7324.md) `CVE-2024-7324` · CVE record: IObit iTop Data Recovery Pro · CVSS 8.5 High · Not analysed yet · Published 31 Jul 2024 · Tags: CWE-427 - [Uncontrolled search path in Dell Peripheral Manager](https://agentprime.io/advisories/CVE-2024-32857.md) `CVE-2024-32857` · CVE record: Dell Dell Peripheral Manager · CVSS 7.3 High · Not analysed yet · Published 31 Jul 2024 · Tags: CWE-427 - [Uncontrolled search path in Dell Peripheral Manager](https://agentprime.io/advisories/CVE-2024-37127.md) `CVE-2024-37127` · CVE record: Dell Dell Peripheral Manager · CVSS 7.8 High · Not analysed yet · Published 31 Jul 2024 · Tags: CWE-427 - [Uncontrolled search path in Dell Peripheral Manager](https://agentprime.io/advisories/CVE-2024-37142.md) `CVE-2024-37142` · CVE record: Dell Dell Peripheral Manager · CVSS 7.3 High · Not analysed yet · Published 31 Jul 2024 · Tags: CWE-427 - [Arbitrary Code Execution in \`AppImage\` version \`ImageMagick\`](https://agentprime.io/advisories/CVE-2024-41817.md) `CVE-2024-41817` · CVE record: ImageMagick ImageMagick · CVSS 7.0 High · Not analysed yet · Published 29 Jul 2024 · Tags: CWE-427 - [Mp3tag DLL tak_deco_lib.dll uncontrolled search path](https://agentprime.io/advisories/CVE-2024-7193.md) `CVE-2024-7193` · CVE record: Mp3tag · CVSS 4.8 Medium · Not analysed yet · Published 29 Jul 2024 · Tags: CWE-427 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .