# CWE-427. Every Advisory and CVE whose sources give the weakness CWE-427, newest first. ## Records, newest first (an older page) - [Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability](https://agentprime.io/advisories/CVE-2021-1536.md) `CVE-2021-1536` · CVE record: Cisco Cisco Webex Teams · CVSS 4.8 Medium · Not analysed yet · Published 4 Jun 2021 · Tags: CWE-427 - [Arbitrary code execution due to an uncontrolled search path for the git binary](https://agentprime.io/advisories/GHSA-m898-h4pm-pqfr.md) `GHSA-m898-h4pm-pqfr`, `CVE-2021-28955` · Go `github.com/MichaelMure/git-bug`: affected `<0.7.2`, fixed in `0.7.2` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 May 2021 · Tags: CWE-427 - [Local Privilege Escalation in cloudflared](https://agentprime.io/advisories/GHSA-hgwp-4vp4-qmm2.md) `GHSA-hgwp-4vp4-qmm2`, `CVE-2020-24356`, `GO-2022-0845` · Go `github.com/cloudflare/cloudflared`: affected `<0.0.0-20200820025921-9323844ea773`, fixed in `0.0.0-20200820025921-9323844ea773` · CVSS 6.4 Medium · Not analysed yet · Published 24 May 2021 · Tags: CWE-427 - [Uncontrolled search path in FUJITSU LIMITED and PFU LIMITED The installers of ScanSnap Manager and the…](https://agentprime.io/advisories/CVE-2021-20722.md) `CVE-2021-20722` · CVE record: FUJITSU LIMITED and PFU LIMITED The installers of ScanSnap Manager and the Software Download Installer · CVSS 7.8 High · Not analysed yet · Published 24 May 2021 · Tags: CWE-427 - [Privilege escalation in Bitdefender GravityZone Business Security](https://agentprime.io/advisories/CVE-2021-3423.md) `CVE-2021-3423` · CVE record: BItdefender GravityZone Business Security · CVSS 7.8 High · Not analysed yet · Published 18 May 2021 · Tags: CWE-427 - [Insecure path handling in Bundler](https://agentprime.io/advisories/GHSA-g98m-96g9-wfjq.md) `GHSA-g98m-96g9-wfjq`, `CVE-2019-3881` · RubyGems `bundler`: affected `>=1.14.0, <2.1.0`, fixed in `2.1.0` · CVSS 7.0 High · Not analysed yet · Published 10 May 2021 · Tags: Information disclosure, CWE-427 - [Uncontrolled search path in Lenovo PCManager](https://agentprime.io/advisories/CVE-2021-3464.md) `CVE-2021-3464` · CVE record: Lenovo PCManager · CVSS 7.8 High · Not analysed yet · Published 27 Apr 2021 · Tags: CWE-427 - [Uncontrolled search path in Siemens LOGO! Soft Comfort](https://agentprime.io/advisories/CVE-2020-25244.md) `CVE-2020-25244` · CVE record: Siemens LOGO! Soft Comfort · CVSS 8.4 High · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-427 - [Privilege Escalation Vulnerability in Adobe RoboHelp](https://agentprime.io/advisories/CVE-2021-21070.md) `CVE-2021-21070` · CVE record: Adobe RoboHelp · CVSS 6.5 Medium · Not analysed yet · Published 19 Apr 2021 · Tags: CWE-427 - [Adobe Genuine Service privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2020-9681.md) `CVE-2020-9681` · CVE record: Adobe GoCart · CVSS 6.5 Medium · Not analysed yet · Published 16 Apr 2021 · Tags: CWE-427 - [Uncontrolled Search Path Element in AGSService.exe](https://agentprime.io/advisories/CVE-2020-9667.md) `CVE-2020-9667` · CVE record: Adobe GoCart · CVSS 6.5 Medium · Not analysed yet · Published 16 Apr 2021 · Tags: CWE-427 - [Uncontrolled search path in Dell Peripheral Manager](https://agentprime.io/advisories/CVE-2021-21545.md) `CVE-2021-21545` · CVE record: Dell Dell Peripheral Manager · CVSS 7.8 High · Not analysed yet · Published 12 Apr 2021 · Tags: CWE-427 - [Cisco Advanced Malware Protection for Endpoints Windows Connector, ClamAV for Windows, and Immunet DLL Hijacking Vulnerability](https://agentprime.io/advisories/CVE-2021-1386.md) `CVE-2021-1386` · CVE record: Cisco Cisco AMP for Endpoints · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2021 · Tags: CWE-427 - [Uncontrolled Search Path Element in Bosch Video Streaming Gateway Installer](https://agentprime.io/advisories/CVE-2020-6790.md) `CVE-2020-6790` · CVE record: Bosch Video Streaming Gateway · CVSS 7.8 High · Not analysed yet · Published 25 Mar 2021 · Tags: CWE-427 - [Uncontrolled Search Path Element in Bosch Monitor Wall Installer](https://agentprime.io/advisories/CVE-2020-6789.md) `CVE-2020-6789` · CVE record: Bosch Monitor Wall · CVSS 7.8 High · Not analysed yet · Published 25 Mar 2021 · Tags: CWE-427 - [Uncontrolled Search Path Element in Bosch Configuration Manager Installer](https://agentprime.io/advisories/CVE-2020-6788.md) `CVE-2020-6788` · CVE record: Bosch Configuration Manager · CVSS 7.8 High · Not analysed yet · Published 25 Mar 2021 · Tags: CWE-427 - [Uncontrolled Search Path Element in Bosch Video Client installer](https://agentprime.io/advisories/CVE-2020-6787.md) `CVE-2020-6787` · CVE record: Bosch Video Client · CVSS 7.8 High · Not analysed yet · Published 25 Mar 2021 · Tags: CWE-427 - [Uncontrolled Search Path Element in Bosch Video Recording Manager Installer](https://agentprime.io/advisories/CVE-2020-6786.md) `CVE-2020-6786` · CVE record: Bosch Video Recording Manager · CVSS 7.8 High · Not analysed yet · Published 25 Mar 2021 · Tags: CWE-427 - [Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer](https://agentprime.io/advisories/CVE-2020-6785.md) `CVE-2020-6785` · CVE record: Bosch BVMS and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Mar 2021 · Tags: CWE-427 - [Uncontrolled Search Path Element in Bosch IP Helper](https://agentprime.io/advisories/CVE-2020-6771.md) `CVE-2020-6771` · CVE record: Bosch IP Helper · CVSS 7.8 High · Not analysed yet · Published 25 Mar 2021 · Tags: CWE-427 - [Uncontrolled search path in Rockwell Automation DriveTools SP and Drives AOP](https://agentprime.io/advisories/CVE-2021-22665.md) `CVE-2021-22665` · CVE record: Rockwell Automation DriveTools SP and Drives AOP · No CVSS score · Not analysed yet · Published 18 Mar 2021 · Tags: CWE-427 - [Uncontrolled search path in Dell SupportAssist Client](https://agentprime.io/advisories/CVE-2021-21518.md) `CVE-2021-21518` · CVE record: Dell Dell SupportAssist Client · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2021 · Tags: CWE-427 - [Cisco Advanced Malware Protection for Endpoints and Immunet for Windows DLL Hijacking Vulnerability](https://agentprime.io/advisories/CVE-2021-1280.md) `CVE-2021-1280` · CVE record: Cisco Cisco AMP for Endpoints · CVSS 7.8 High · Not analysed yet · Published 20 Jan 2021 · Tags: CWE-427 - [Uncontrolled search path element vulnerability in Illustrator 25.0 could lead to arbitrary code execution](https://agentprime.io/advisories/CVE-2021-21007.md) `CVE-2021-21007` · CVE record: Adobe Illustrator · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2021 · Tags: CWE-427 - [Uncontrolled Search Path Element vulnerability in Animate 21.0](https://agentprime.io/advisories/CVE-2021-21008.md) `CVE-2021-21008` · CVE record: Adobe Animate · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2021 · Tags: CWE-427 - [Uncontrolled search path element in Adobe InCopy](https://agentprime.io/advisories/CVE-2021-21010.md) `CVE-2021-21010` · CVE record: Adobe InCopy · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2021 · Tags: CWE-427 - [Uncontrolled Search Path Element in Adobe Captivate 2019](https://agentprime.io/advisories/CVE-2021-21011.md) `CVE-2021-21011` · CVE record: Adobe Captivate · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2021 · Tags: CWE-427 - [Cisco Proximity Desktop for Windows DLL Hijacking Vulnerability](https://agentprime.io/advisories/CVE-2021-1240.md) `CVE-2021-1240` · CVE record: Cisco Cisco Proximity · CVSS 4.8 Medium · Not analysed yet · Published 13 Jan 2021 · Tags: CWE-427 - [Cisco AnyConnect Secure Mobility Client for Windows DLL Injection Vulnerability](https://agentprime.io/advisories/CVE-2021-1237.md) `CVE-2021-1237` · CVE record: Cisco Cisco AnyConnect Secure Mobility Client · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2021 · Tags: CWE-427 - [Uncontrolled Search Path Element in Adobe Prelude for Windows](https://agentprime.io/advisories/CVE-2020-24440.md) `CVE-2020-24440` · CVE record: Adobe Prelude · CVSS 7.0 High · Not analysed yet · Published 11 Dec 2020 · Tags: CWE-427 - [Uncontrolled Search Path Element vulnerability in Lightroom Classic 10.0](https://agentprime.io/advisories/CVE-2020-24447.md) `CVE-2020-24447` · CVE record: Adobe Lightroom · CVSS 7.0 High · Not analysed yet · Published 11 Dec 2020 · Tags: CWE-427 - [Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation](https://agentprime.io/advisories/CVE-2020-2049.md) `CVE-2020-2049` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2020 · Tags: CWE-427 - [In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both ...](https://agentprime.io/advisories/GHSA-qxm5-vx5j-pp6w.md) `GHSA-qxm5-vx5j-pp6w`, `CVE-2020-27348`, `PYSEC-2020-109` · PyPI `snapcraft`: affected `<2.43.1`, fixed in `2.43.1` · CVSS 6.8 Medium · Not analysed yet · Published 4 Dec 2020 · Tags: CWE-427 - [Uncontrolled search path in Check Point Endpoint Security Client for Windows](https://agentprime.io/advisories/CVE-2020-6021.md) `CVE-2020-6021` · CVE record: Check Point Endpoint Security Client for Windows · No CVSS score · Not analysed yet · Published 3 Dec 2020 · Tags: CWE-427 - [B. Braun OnlineSuite](https://agentprime.io/advisories/CVE-2020-25174.md) `CVE-2020-25174` · CVE record: B. Braun Melsungen AG OnlineSuite · No CVSS score · Not analysed yet · Published 6 Nov 2020 · Tags: CWE-427 - [Uncontrolled search path in SonicWall Global VPN Client](https://agentprime.io/advisories/CVE-2020-5145.md) `CVE-2020-5145` · CVE record: SonicWall SonicWall Global VPN Client · No CVSS score · Not analysed yet · Published 28 Oct 2020 · Tags: CWE-427 - [Uncontrolled Search Path in Adobe Media Encoder for Windows](https://agentprime.io/advisories/CVE-2020-24423.md) `CVE-2020-24423` · CVE record: Adobe Media Encoder · CVSS 7.0 High · Not analysed yet · Published 21 Oct 2020 · Tags: CWE-427 - [Uncontrolled Search Path in Adobe Premiere Pro for Windows](https://agentprime.io/advisories/CVE-2020-24424.md) `CVE-2020-24424` · CVE record: Adobe Premiere · CVSS 7.0 High · Not analysed yet · Published 21 Oct 2020 · Tags: CWE-427 - [Uncontrolled Search Path Element in Adobe Photoshop for Windows](https://agentprime.io/advisories/CVE-2020-24420.md) `CVE-2020-24420` · CVE record: Adobe Photoshop · CVSS 7.0 High · Not analysed yet · Published 21 Oct 2020 · Tags: CWE-427 - [Uncontrolled Search Path Element in Adobe After Effects for Windows](https://agentprime.io/advisories/CVE-2020-24419.md) `CVE-2020-24419` · CVE record: Adobe After Effects · CVSS 7.0 High · Not analysed yet · Published 21 Oct 2020 · Tags: CWE-427 - [Privilege escalation vulnerability in Dreamweaver version 20.2](https://agentprime.io/advisories/CVE-2020-24425.md) `CVE-2020-24425` · CVE record: Adobe Dreamweaver · CVSS 7.5 High · Not analysed yet · Published 21 Oct 2020 · Tags: CWE-427 - [Uncontrolled Search Path in Creative Cloud Desktop Application](https://agentprime.io/advisories/CVE-2020-24422.md) `CVE-2020-24422` · CVE record: Adobe Creative Cloud (desktop component) · CVSS 7.0 High · Not analysed yet · Published 21 Oct 2020 · Tags: CWE-427 - [Uncontrolled search path in Lenovo Vantage HardwareScan Plugin](https://agentprime.io/advisories/CVE-2020-8345.md) `CVE-2020-8345` · CVE record: Lenovo Vantage HardwareScan Plugin · CVSS 7.3 High · Not analysed yet · Published 14 Oct 2020 · Tags: CWE-427 - [Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability](https://agentprime.io/advisories/CVE-2020-3535.md) `CVE-2020-3535` · CVE record: Cisco Cisco Webex Teams · CVSS 7.8 High · Not analysed yet · Published 8 Oct 2020 · Tags: CWE-427 - [DLL Hijacking](https://agentprime.io/advisories/CVE-2020-6654.md) `CVE-2020-6654` · CVE record: Eaton 9000x Programming and Configuration Software · CVSS 7.8 High · Not analysed yet · Published 30 Sept 2020 · Tags: CWE-426, CWE-427 - [Code Injection in Rapid7 AppSpider Pro Installer](https://agentprime.io/advisories/CVE-2020-7358.md) `CVE-2020-7358` · CVE record: Rapid7 AppSpider · CVSS 5.8 Medium · Not analysed yet · Published 18 Sept 2020 · Tags: CWE-427 - [DLL Search Order Hijacking in MA for Windows](https://agentprime.io/advisories/CVE-2020-7312.md) `CVE-2020-7312` · CVE record: McAfee LLC MA for Windows · CVSS 7.8 High · Not analysed yet · Published 10 Sept 2020 · Tags: CWE-427 - [DLL Injection in kerberos](https://agentprime.io/advisories/GHSA-m2mx-rfpw-jghv.md) `GHSA-m2mx-rfpw-jghv`, `CVE-2020-13110` · npm `kerberos`: affected `<1.0.0`, fixed in `1.0.0` · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-427 - [RabbitMQ arbitrary code execution using local binary planting](https://agentprime.io/advisories/CVE-2020-5419.md) `CVE-2020-5419` · CVE record: VMware Tanzu RabbitMQ · CVSS 6.7 Medium · Not analysed yet · Published 31 Aug 2020 · Tags: CWE-427 - [Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability](https://agentprime.io/advisories/CVE-2020-3433.md) `CVE-2020-3433` · CVE record: Cisco Cisco AnyConnect Secure Mobility Client · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.10 · Not analysed yet · Published 17 Aug 2020 · Tags: CWE-427 - [Philips SmartControl DLL Hijacking](https://agentprime.io/advisories/CVE-2020-7360.md) `CVE-2020-7360` · CVE record: Philips SmartControl · CVSS 7.4 High · Not analysed yet · Published 13 Aug 2020 · Tags: CWE-427 - [Uncontrolled search path in - PCoIP Standard Agent for Windows - PCoIP Graphics Agent for Windows](https://agentprime.io/advisories/CVE-2020-13177.md) `CVE-2020-13177` · CVE record: \- PCoIP Standard Agent for Windows - PCoIP Graphics Agent for Windows · No CVSS score · Not analysed yet · Published 11 Aug 2020 · Tags: CWE-427 - [Uncontrolled search path in OSIsoft PI System multiple products and versions](https://agentprime.io/advisories/CVE-2020-10610.md) `CVE-2020-10610` · CVE record: OSIsoft PI System multiple products and versions · No CVSS score · Not analysed yet · Published 24 Jul 2020 · Tags: CWE-427 - [Uncontrolled search path in Siemens SIMATIC PCS 7 V8.2 and earlier and others](https://agentprime.io/advisories/CVE-2020-7585.md) `CVE-2020-7585` · CVE record: Siemens SIMATIC PCS 7 V8.2 and earlier and 4 more · No CVSS score · Not analysed yet · Published 10 Jun 2020 · Tags: CWE-427 - [DLL search order hijacking in MA](https://agentprime.io/advisories/CVE-2019-3613.md) `CVE-2019-3613` · CVE record: McAfee, LLC McAfee Agent (MA) · CVSS 5.9 Medium · Not analysed yet · Published 10 Jun 2020 · Tags: CWE-427 - [Uncontrolled search path in Dell CPG BIOS](https://agentprime.io/advisories/CVE-2020-5357.md) `CVE-2020-5357` · CVE record: Dell CPG BIOS · CVSS 7.1 High · Not analysed yet · Published 28 May 2020 · Tags: CWE-427 - [Uncontrolled search path in Opto 22 SoftPAC Project](https://agentprime.io/advisories/CVE-2020-10616.md) `CVE-2020-10616` · CVE record: Opto 22 SoftPAC Project · No CVSS score · Not analysed yet · Published 14 May 2020 · Tags: CWE-427 - [Uncontrolled search path in Fazecast jSerialComm, Version 2.2.2 and prior](https://agentprime.io/advisories/CVE-2020-10626.md) `CVE-2020-10626` · CVE record: Fazecast jSerialComm, Version 2.2.2 and prior · No CVSS score · Not analysed yet · Published 14 May 2020 · Tags: CWE-427 - [Uncontrolled search path in SAP SE SAP Business Client](https://agentprime.io/advisories/CVE-2020-6244.md) `CVE-2020-6244` · CVE record: SAP SE SAP Business Client · CVSS 7.0 High · Not analysed yet · Published 12 May 2020 · Tags: CWE-427 - [DLL Hijacking in Google Earth Pro Windows installer](https://agentprime.io/advisories/CVE-2020-8895.md) `CVE-2020-8895` · CVE record: Google Earth Pro · CVSS 7.8 High · Not analysed yet · Published 21 Apr 2020 · Tags: CWE-427 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .