Advisories · Weakness
CWE-427.
Every Advisory and CVE whose sources give the weakness CWE-427, newest first.
- CVSS 6.6 Medium
Zoom Workplace Desktop App for macOS - Uncontrolled Search Path Element
- Zoom Communications, Inc Zoom Workplace Desktop App for macOS
- CWE-427
- CVSS 7.0 High
IBM i privilege escalation
- i
- CWE-427
- CVSS 7.0 High
Uncontrolled search path in Mitsubishi Electric Iconics Digital Solutions GENESIS64 and others
- Mitsubishi Electric Iconics Digital Solutions GENESIS64
- Mitsubishi Electric Corporation GENESIS64
- CWE-427
- CVSS 7.0 High
An issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096 on Windows.
- CWE-427
- CVSS 7.1 High
Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation
- Adobe Creative Cloud Desktop
- CWE-427
- CVSS 7.3 High
Uncontrolled search path in Dell OpenManage Server Administrator
- Dell OpenManage Server Administrator
- CWE-427
- CVSS 7.8 High
Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability
- Luxion KeyShot
- CWE-427
- CVSS 7.3 High
D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- D-Link Network Assistant
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) GPA Framework software
- Intel(R) GPA Framework software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) GPA software
- Intel(R) GPA software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) Graphics Windows DCH driver software
- Intel(R) Graphics Windows DCH driver software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Libva software maintained by Intel(R)
- Libva software maintained by Intel(R)
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) CST software
- Intel(R) CST software
- Privilege escalation
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) DSA software uninstallers
- Intel(R) DSA software uninstallers
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) Chipset Device Software
- Intel(R) Chipset Device Software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) VTune(TM) Profiler software
- Intel(R) VTune(TM) Profiler software
- Privilege escalation
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) PCM software
- Intel(R) PCM software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) Distribution for GDB software
- Intel(R) Distribution for GDB software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) Inspector software
- Intel(R) Inspector software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) Advisor software
- Intel(R) Advisor software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) Processor Identification Utility software
- Intel(R) Processor Identification Utility software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) Quartus(R) Prime Standard Edition Design software
- Intel(R) Quartus(R) Prime Standard Edition Design software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) Quartus(R) Prime Pro Edition Design software
- Intel(R) Quartus(R) Prime Pro Edition Design software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) Quartus(R) Prime Lite Edition Design software
- Intel(R) Quartus(R) Prime Lite Edition Design software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) Computing Improvement Program software
- Intel(R) Computing Improvement Program software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) GPA software
- Intel(R) GPA software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) GPA Framework software
- Intel(R) GPA Framework software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) Processor Diagnostic Tool software
- Intel(R) Processor Diagnostic Tool software
- CWE-427
- CVSS 7.2 High
Insecure Loading of Code in B&R Products
- B&R Industrial Automation Scene Viewer
- B&R Industrial Automation Automation Runtime
- CWE-427
- CVSS 7.8 High
Ashlar-Vellum Lithium Uncontrolled Search Path Element Remote Code Execution Vulnerability
- Ashlar-Vellum Lithium
- CWE-427
- CVSS 7.8 High
Ashlar-Vellum Xenon Uncontrolled Search Path Element Remote Code Execution Vulnerability
- Ashlar-Vellum Xenon
- CWE-427
- CVSS 7.8 High
Ashlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution Vulnerability
- Ashlar-Vellum Argon
- CWE-427
- CVSS 7.8 High
Ashlar-Vellum Cobalt Uncontrolled Search Path Element Remote Code Execution Vulnerability
- Ashlar-Vellum Cobalt
- CWE-427
- CVSS 7.0 High
3CX Uncontrolled Search Path Local Privilege Escalation Vulnerability
- 3CX
- CWE-427
- CVSS 4.2 Medium
EMS SQL Manager 3.6.2 (build 55333) for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed.
- CWE-427
- CVSS 8.4 High
IBM i privilege escalation
- i
- IBM Rational Development Studio for i
- CWE-427
- CVSS 7.7 High
An issue was discovered in Veritas NetBackup before 10.4.
- CWE-427
- CVSS 7.8 High
Uncontrolled search path in KEYENCE CORPORATION VT STUDIO
- KEYENCE CORPORATION VT STUDIO
- CWE-427
- CVSS 7.4 High
Uncontrolled search path in Dell Alienware Command Center (AWCC)
- Dell Alienware Command Center (AWCC)
- CWE-427
- CVSS 7.8 High
Uncontrolled search path in Fujidenolo Solutions Co., Ltd. SonicDICOM Media Viewer
- Fujidenolo Solutions Co., Ltd. SonicDICOM Media Viewer
- CWE-427
- CVSS 7.1 High
Path traversal in Okta Verify for Windows
- Okta Verify for Windows
- Path traversal
- CWE-427
- CVSS 7.8 High
Uncontrolled search path in sira.jp EasyRange
- sira.jp EasyRange
- CWE-427
- CVSS 7.8 High
Uncontrolled search path in Claris FileMaker Pro
- Claris FileMaker Pro
- CWE-427
- CVSS 8.4 High
IBM i privilege escalation
- i
- CWE-427
- CVSS 7.9 High
SanDisk PrivateAccess DLL Hijacking Vulnerability
- SanDisk PrivateAccess Windows App
- CWE-427
- CVSS 8.8 High
Privilege escalation in windows agent
- Checkmk
- CWE-427
- CVSS 7.3 High
Uncontrolled search path in Cisco Secure Client
- Cisco Secure Client
- CWE-427
- CVSS 7.3 High
electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
- CWE-426
- CWE-427
<24.13.2 · fixed in 24.13.2
GHSA-r4pf-3v7r-hh55 · CVE-2024-27303 - CVSS 6.7 Medium
Uncontrolled search path in Dell DUP Framework
- Dell DUP Framework
- CWE-427
- CVSS 7.8 High
Delta Electronics CNCSoft-B DOPSoft Uncontrolled Search Path Element
- Delta Electronics CNCSoft-B v1.0.0.4 DOPSoft
- CWE-427
- CVSS 7.3 High
AVEVA Edge products Uncontrolled Search Path Element
- AVEVA Edge
- CWE-427
- CVSS 6.7 Medium
Local Privilege Escalation via DLL Hijacking
- Qognify VMS Client Viewer
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) SSU software
- Intel(R) SSU software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) MPI Library Software
- Intel(R) MPI Library Software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) SUR for Gameplay Software
- Intel(R) SUR for Gameplay Software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) ISPC software
- Intel(R) ISPC software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) SDK for OpenCL(TM) Applications software
- Intel(R) SDK for OpenCL(TM) Applications software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) Battery Life Diagnostic Tool software
- Intel(R) Battery Life Diagnostic Tool software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) QSFP+ Configuration Utility software
- Intel(R) QSFP+ Configuration Utility software
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Intel(R) Binary Configuration Tool software
- Intel(R) Binary Configuration Tool software
- CWE-427