Advisories · Weakness

CWE-427.

Every Advisory and CVE whose sources give the weakness CWE-427, newest first.

CVE-2023-35769 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) CIP software
- Intel(R) CIP software
- CWE-427
Not analysed yet 14 Feb 2024
CVE-2023-32618 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) oneAPI Toolkit and component software installers
- Intel(R) oneAPI Toolkit and component software installers
- CWE-427
Not analysed yet 14 Feb 2024
CVE-2023-28407 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) XTU software
- Intel(R) XTU software
- CWE-427
Not analysed yet 14 Feb 2024
CVE-2023-32646 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) VROC software
- Intel(R) VROC software
- CWE-427
Not analysed yet 14 Feb 2024
CVE-2023-25779 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CWE-427
Not analysed yet 14 Feb 2024
CVE-2024-23054 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public…
- CWE-427
Not analysed yet 5 Feb 2024
CVE-2024-23940 CVE record

CVSS 7.8 High

Uncontrolled search path in Trend Micro, Inc. Trend Micro Security (Consumer) uiAirSupport
- Trend Micro, Inc. Trend Micro Security (Consumer) uiAirSupport
- CWE-427
Not analysed yet 29 Jan 2024
CVE-2023-51711 CVE record

CVSS 7.8 High

An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed.
- CWE-427
Not analysed yet 24 Jan 2024
CVE-2023-27859 CVE record

CVSS 6.5 Medium

IBM Db2 code execution
- IBM Db2 for Linux, UNIX and Windows
- CWE-427
Not analysed yet 22 Jan 2024
CVE-2023-32272 CVE record

CVSS 7.9 High

Uncontrolled search path in Intel NUC Pro Software Suite Configuration Tool software installers
- Intel NUC Pro Software Suite Configuration Tool software installers
- CWE-427
Not analysed yet 19 Jan 2024
CVE-2023-6740 CVE record

CVSS 8.8 High

Privilege escalation in jar_signature
- Checkmk
- CWE-427
Not analysed yet 12 Jan 2024
CVE-2023-29445 CVE record

CVSS 7.8 High

Uncontrolled Search Path Element in PTC's Kepware KEPServerEX
- PTC Kepware KEPServerEX
- PTC ThingWorx Kepware Server
- CWE-427
Not analysed yet 10 Jan 2024
CVE-2023-29444 CVE record

CVSS 6.3 Medium

Uncontrolled Search Path Element in PTC's Kepware KEPServerEX
- PTC Kepware KEPServerEX
- PTC ThingWorx Kepware Server
- CWE-427
Not analysed yet 10 Jan 2024
CVE-2023-6338 CVE record

CVSS 7.8 High

Uncontrolled search path in Lenovo Universal Device Client (UDC)
- Lenovo Universal Device Client (UDC)
- CWE-427
Not analysed yet 3 Jan 2024
CVE-2023-43064 CVE record

CVSS 7.0 High

IBM i code execution
- i
- CWE-427
Not analysed yet 25 Dec 2023
CVE-2023-6891 CVE record

CVSS 5.3 Medium

PeaZip Library dragdropfilesdll.dll uncontrolled search path
- PeaZip
- CWE-427
Not analysed yet 17 Dec 2023
CVE-2023-31210 CVE record

CVSS 8.8 High

Privilege escalation in agent via LD_LIBRARY_PATH
- Checkmk
- CWE-427
Not analysed yet 13 Dec 2023
CVE-2023-48677 CVE record

CVSS 7.3 High

Uncontrolled search path in Acronis Cyber Protect Home Office and others
- Acronis Cyber Protect Home Office
- Acronis Cyber Protect Cloud Agent
- CWE-427
Not analysed yet 12 Dec 2023
CVE-2023-41117 CVE record

CVSS 8.8 High

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0.
- CWE-427
Not analysed yet 12 Dec 2023
CVE-2023-6401 CVE record

CVSS 5.3 Medium

NotePad++ dbghelp.exe uncontrolled search path
- NotePad++
- CWE-427
Not analysed yet 30 Nov 2023
CVE-2023-4770 CVE record

CVSS 6.5 Medium

Uncontrolled Search Path Element Vulnerability in 4D and 4D Windows Server
- 4D.exe
- 4D Server.exe
- CWE-427
Not analysed yet 30 Nov 2023
CVE-2023-4931 CVE record

CVSS 6.3 Medium

Uncontrolled search path element vulnerability in Plesk
- Plesk Installer
- CWE-427
Not analysed yet 27 Nov 2023
CVE-2023-41790 CVE record

CVSS 7.6 High

Traversal Path on PHP file
- Pandora FMS
- CWE-427
Not analysed yet 23 Nov 2023
CVE-2023-41787 CVE record

CVSS 6.0 Medium

Arbitrary File Read
- Pandora FMS
- CWE-427
Not analysed yet 23 Nov 2023
CVE-2023-6235 CVE record

CVSS 7.8 High

Arbitrary code execution in Duet Display
- Duet Display for Windows 10+
- CWE-427
Not analysed yet 21 Nov 2023
CVE-2023-22818 CVE record

CVSS 7.3 High

Multiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows
- SanDisk Security Installer for Windows
- CWE-427
Not analysed yet 15 Nov 2023
CVE-2023-28740 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) QAT drivers for Windows - HW Version 2.0
- Intel(R) QAT drivers for Windows - HW Version 2.0
- CWE-427
Not analysed yet 14 Nov 2023
CVE-2023-28388 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) Chipset Device Software
- Intel(R) Chipset Device Software
- CWE-427
Not analysed yet 14 Nov 2023
CVE-2023-29504 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) RealSense(TM) Dynamic Calibration software
- Intel(R) RealSense(TM) Dynamic Calibration software
- CWE-427
Not analysed yet 14 Nov 2023
CVE-2023-27513 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) Server Information Retrieval Utility software
- Intel(R) Server Information Retrieval Utility software
- CWE-427
Not analysed yet 14 Nov 2023
CVE-2023-34430 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel Battery Life Diagnostic Tool software
- Intel Battery Life Diagnostic Tool software
- CWE-427
Not analysed yet 14 Nov 2023
CVE-2023-29161 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) OFU software
- Intel(R) OFU software
- CWE-427
Not analysed yet 14 Nov 2023
CVE-2023-32660 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool installation…
- Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool installation software
- CWE-427
Not analysed yet 14 Nov 2023
CVE-2023-33874 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) NUC 12 Pro Kits & Mini PCs…
- Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software
- CWE-427
Not analysed yet 14 Nov 2023
CVE-2023-34350 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) XTU software
- Intel(R) XTU software
- CWE-427
Not analysed yet 14 Nov 2023
CVE-2023-4632 CVE record

CVSS 7.8 High

Uncontrolled search path in Lenovo System Update
- Lenovo System Update
- CWE-427
Not analysed yet 8 Nov 2023
CVE-2023-47113 CVE record

CVSS 7.3 High

DLL Search Order Hijacking vulnerability in BleachBit for Windows
- bleachbit
- CWE-427
Not analysed yet 8 Nov 2023
CVE-2023-0898 CVE record

CVSS 5.3 Medium

Uncontrolled Search Path Element in GE MiCOM S1 Agile
- General Electric MiCOM S1 Agile
- CWE-427
Not analysed yet 7 Nov 2023
CVE-2023-31027 CVE record

CVSS 8.2 High

CVE
- NVIDIA GPU Display driver, vGPU driver, and Cloud gaming driver
- CWE-427
Not analysed yet 2 Nov 2023
CVE-2023-31016 CVE record

CVSS 7.3 High

CVE
- NVIDIA GPU Display driver, vGPU driver, and Cloud gaming driver
- CWE-427
Not analysed yet 2 Nov 2023
CVE-2023-44220 CVE record

Uncontrolled search path in SonicWall NetExtender
- SonicWall NetExtender
- CWE-427
Not analysed yet 27 Oct 2023
CVE-2023-5463 CVE record

CVSS 7.8 High

XINJE XDPPro cfgmgr32.dll uncontrolled search path
- XINJE XDPPro
- CWE-427
Not analysed yet 9 Oct 2023
CVE-2023-45248 CVE record

CVSS 6.6 Medium

Uncontrolled search path in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- CWE-427
Not analysed yet 9 Oct 2023
CVE-2022-4956 CVE record

CVSS 7.8 High

Caphyon Advanced Installer WinSxS DLL uncontrolled search path
- Caphyon Advanced Installer
- CWE-427
Not analysed yet 30 Sept 2023
CVE-2023-41929 CVE record

CVSS 7.3 High

A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges.
- CWE-427
Not analysed yet 18 Sept 2023
CVE-2023-39374 CVE record

CVSS 7.8 High

ForeScout NAC SecureConnector – CWE-427: Uncontrolled Search Path Element
- ForeScout NAC SecureConnector
- CWE-427
Not analysed yet 3 Sept 2023
CVE-2023-3252 CVE record

CVSS 6.8 Medium

Arbitrary File Write
- Tenable Nessus
- CWE-427
Not analysed yet 29 Aug 2023
CVE-2023-3078 CVE record

CVSS 7.8 High

Uncontrolled search path in Lenovo Universal Device Client (UDC)
- Lenovo Universal Device Client (UDC)
- CWE-427
Not analysed yet 17 Aug 2023
CVE-2023-29151 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) PSR SDK
- Intel(R) PSR SDK
- CWE-427
Not analysed yet 11 Aug 2023
CVE-2023-34355 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) Server Board M10JNP2SB integrated BMC video drivers
- Intel(R) Server Board M10JNP2SB integrated BMC video drivers
- CWE-427
Not analysed yet 11 Aug 2023
CVE-2023-28823 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) oneAPI Toolkit and component software installers
- Intel(R) oneAPI Toolkit and component software installers
- CWE-427
Not analysed yet 11 Aug 2023
CVE-2023-28380 CVE record

CVSS 8.8 High

Uncontrolled search path in Intel(R) AI Hackathon software
- Intel(R) AI Hackathon software
- CWE-427
Not analysed yet 11 Aug 2023
CVE-2022-25864 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) oneMKL software
- Intel(R) oneMKL software
- CWE-427
Not analysed yet 11 Aug 2023
CVE-2023-25944 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) VCUST Tool software
- Intel(R) VCUST Tool software
- CWE-427
Not analysed yet 11 Aug 2023
CVE-2023-28405 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) Distribution of OpenVINO(TM) Toolkit
- Intel(R) Distribution of OpenVINO(TM) Toolkit
- CWE-427
Not analysed yet 11 Aug 2023
CVE-2023-23577 CVE record

CVSS 6.7 Medium

Uncontrolled search path in ITE Tech consumer infrared drivers for Intel(R) NUC
- ITE Tech consumer infrared drivers for Intel(R) NUC
- CWE-427
Not analysed yet 11 Aug 2023
CVE-2023-25182 CVE record

CVSS 4.2 Medium

Uncontrolled search path in Intel(R) Unite(R) Client software for Mac
- Intel(R) Unite(R) Client software for Mac
- CWE-427
Not analysed yet 11 Aug 2023
CVE-2023-24016 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) Quartus(R) Prime Pro and Standard edition software for linux
- Intel(R) Quartus(R) Prime Pro and Standard edition software for linux
- CWE-427
Not analysed yet 11 Aug 2023
CVE-2022-43456 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) RST software
- Intel(R) RST software
- CWE-427
Not analysed yet 11 Aug 2023
CVE-2021-41544 CVE record

CVSS 7.8 High

Uncontrolled search path in Siemens Software Center
- Siemens Software Center
- CWE-427
Not analysed yet 8 Aug 2023