Advisories · Weakness
CWE-427.
Every Advisory and CVE whose sources give the weakness CWE-427, newest first.
- CVSS 4.8 Medium
Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability
- Cisco Webex Teams
- CWE-427
- CVSS 9.8 CriticalCritical · CVSS 9+
Arbitrary code execution due to an uncontrolled search path for the git binary
- CWE-427
<0.7.2 · fixed in 0.7.2
GHSA-m898-h4pm-pqfr · CVE-2021-28955 - CVSS 6.4 Medium
Local Privilege Escalation in cloudflared
- CWE-427
<0.0.0-20200820025921-9323844ea773 · fixed in 0.0.0-20200820025921-9323844ea773
GHSA-hgwp-4vp4-qmm2 · CVE-2020-24356 - CVSS 7.8 High
Uncontrolled search path in FUJITSU LIMITED and PFU LIMITED The installers of ScanSnap Manager and the…
- FUJITSU LIMITED and PFU LIMITED The installers of ScanSnap Manager and the Software Download Installer
- CWE-427
- CVSS 7.8 High
Privilege escalation in Bitdefender GravityZone Business Security
- BItdefender GravityZone Business Security
- CWE-427
- CVSS 7.0 High
Insecure path handling in Bundler
- Information disclosure
- CWE-427
>=1.14.0, <2.1.0 · fixed in 2.1.0
GHSA-g98m-96g9-wfjq · CVE-2019-3881 - CVSS 7.8 High
Uncontrolled search path in Lenovo PCManager
- Lenovo PCManager
- CWE-427
- CVSS 8.4 High
Uncontrolled search path in Siemens LOGO! Soft Comfort
- Siemens LOGO! Soft Comfort
- CWE-427
- CVSS 6.5 Medium
Privilege Escalation Vulnerability in Adobe RoboHelp
- Adobe RoboHelp
- CWE-427
- CVSS 6.5 Medium
Adobe Genuine Service privilege escalation vulnerability
- Adobe GoCart
- CWE-427
- CVSS 6.5 Medium
Uncontrolled Search Path Element in AGSService.exe
- Adobe GoCart
- CWE-427
- CVSS 7.8 High
Uncontrolled search path in Dell Peripheral Manager
- Dell Peripheral Manager
- CWE-427
- CVSS 7.0 High
Cisco Advanced Malware Protection for Endpoints Windows Connector, ClamAV for Windows, and Immunet DLL Hijacking Vulnerability
- Cisco AMP for Endpoints
- CWE-427
- CVSS 7.8 High
Uncontrolled Search Path Element in Bosch Video Streaming Gateway Installer
- Bosch Video Streaming Gateway
- CWE-427
- CVSS 7.8 High
Uncontrolled Search Path Element in Bosch Monitor Wall Installer
- Bosch Monitor Wall
- CWE-427
- CVSS 7.8 High
Uncontrolled Search Path Element in Bosch Configuration Manager Installer
- Bosch Configuration Manager
- CWE-427
- CVSS 7.8 High
Uncontrolled Search Path Element in Bosch Video Client installer
- Bosch Video Client
- CWE-427
- CVSS 7.8 High
Uncontrolled Search Path Element in Bosch Video Recording Manager Installer
- Bosch Video Recording Manager
- CWE-427
- CVSS 7.8 High
Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer
- Bosch BVMS
- Bosch BVMS Viewer
- CWE-427
- CVSS 7.8 High
Uncontrolled Search Path Element in Bosch IP Helper
- Bosch IP Helper
- CWE-427
-
Uncontrolled search path in Rockwell Automation DriveTools SP and Drives AOP
- Rockwell Automation DriveTools SP and Drives AOP
- CWE-427
- CVSS 7.8 High
Uncontrolled search path in Dell SupportAssist Client
- Dell SupportAssist Client
- CWE-427
- CVSS 7.8 High
Cisco Advanced Malware Protection for Endpoints and Immunet for Windows DLL Hijacking Vulnerability
- Cisco AMP for Endpoints
- CWE-427
- CVSS 7.0 High
Uncontrolled search path element vulnerability in Illustrator 25.0 could lead to arbitrary code execution
- Adobe Illustrator
- CWE-427
- CVSS 7.0 High
Uncontrolled Search Path Element vulnerability in Animate 21.0
- Adobe Animate
- CWE-427
- CVSS 7.0 High
Uncontrolled search path element in Adobe InCopy
- Adobe InCopy
- CWE-427
- CVSS 7.0 High
Uncontrolled Search Path Element in Adobe Captivate 2019
- Adobe Captivate
- CWE-427
- CVSS 4.8 Medium
Cisco Proximity Desktop for Windows DLL Hijacking Vulnerability
- Cisco Proximity
- CWE-427
- CVSS 7.8 High
Cisco AnyConnect Secure Mobility Client for Windows DLL Injection Vulnerability
- Cisco AnyConnect Secure Mobility Client
- CWE-427
- CVSS 7.0 High
Uncontrolled Search Path Element in Adobe Prelude for Windows
- Adobe Prelude
- CWE-427
- CVSS 7.0 High
Uncontrolled Search Path Element vulnerability in Lightroom Classic 10.0
- Adobe Lightroom
- CWE-427
- CVSS 7.8 High
Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation
- Palo Alto Networks Cortex XDR Agent
- CWE-427
- CVSS 6.8 Medium
In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both ...
- CWE-427
<2.43.1 · fixed in 2.43.1
GHSA-qxm5-vx5j-pp6w · CVE-2020-27348 -
Uncontrolled search path in Check Point Endpoint Security Client for Windows
- Check Point Endpoint Security Client for Windows
- CWE-427
-
B. Braun OnlineSuite
- B. Braun Melsungen AG OnlineSuite
- CWE-427
-
Uncontrolled search path in SonicWall Global VPN Client
- SonicWall Global VPN Client
- CWE-427
- CVSS 7.0 High
Uncontrolled Search Path in Adobe Media Encoder for Windows
- Adobe Media Encoder
- CWE-427
- CVSS 7.0 High
Uncontrolled Search Path in Adobe Premiere Pro for Windows
- Adobe Premiere
- CWE-427
- CVSS 7.0 High
Uncontrolled Search Path Element in Adobe Photoshop for Windows
- Adobe Photoshop
- CWE-427
- CVSS 7.0 High
Uncontrolled Search Path Element in Adobe After Effects for Windows
- Adobe After Effects
- CWE-427
- CVSS 7.5 High
Privilege escalation vulnerability in Dreamweaver version 20.2
- Adobe Dreamweaver
- CWE-427
- CVSS 7.0 High
Uncontrolled Search Path in Creative Cloud Desktop Application
- Adobe Creative Cloud (desktop component)
- CWE-427
- CVSS 7.3 High
Uncontrolled search path in Lenovo Vantage HardwareScan Plugin
- Lenovo Vantage HardwareScan Plugin
- CWE-427
- CVSS 7.8 High
Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability
- Cisco Webex Teams
- CWE-427
- CVSS 7.8 High
DLL Hijacking
- Eaton 9000x Programming and Configuration Software
- CWE-426
- CWE-427
- CVSS 5.8 Medium
Code Injection in Rapid7 AppSpider Pro Installer
- Rapid7 AppSpider
- CWE-427
- CVSS 7.8 High
DLL Search Order Hijacking in MA for Windows
- McAfee LLC MA for Windows
- CWE-427
- CVSS 7.8 High
DLL Injection in kerberos
- CWE-427
<1.0.0 · fixed in 1.0.0
GHSA-m2mx-rfpw-jghv · CVE-2020-13110 - CVSS 6.7 Medium
RabbitMQ arbitrary code execution using local binary planting
- VMware Tanzu RabbitMQ
- CWE-427
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
- Cisco AnyConnect Secure Mobility Client
- CWE-427
- CVSS 7.4 High
Philips SmartControl DLL Hijacking
- Philips SmartControl
- CWE-427
-
Uncontrolled search path in - PCoIP Standard Agent for Windows - PCoIP Graphics Agent for Windows
- - PCoIP Standard Agent for Windows - PCoIP Graphics Agent for Windows
- CWE-427
-
Uncontrolled search path in OSIsoft PI System multiple products and versions
- OSIsoft PI System multiple products and versions
- CWE-427
-
Uncontrolled search path in Siemens SIMATIC PCS 7 V8.2 and earlier and others
- Siemens SIMATIC PCS 7 V8.2 and earlier
- Siemens SIMATIC PCS 7 V9.0
- CWE-427
- CVSS 5.9 Medium
DLL search order hijacking in MA
- McAfee, LLC McAfee Agent (MA)
- CWE-427
- CVSS 7.1 High
Uncontrolled search path in Dell CPG BIOS
- Dell CPG BIOS
- CWE-427
-
Uncontrolled search path in Opto 22 SoftPAC Project
- Opto 22 SoftPAC Project
- CWE-427
-
Uncontrolled search path in Fazecast jSerialComm, Version 2.2.2 and prior
- Fazecast jSerialComm, Version 2.2.2 and prior
- CWE-427
- CVSS 7.0 High
Uncontrolled search path in SAP SE SAP Business Client
- SAP SE SAP Business Client
- CWE-427
- CVSS 7.8 High
DLL Hijacking in Google Earth Pro Windows installer
- Google Earth Pro
- CWE-427