Advisories · Weakness

CWE-427.

Every Advisory and CVE whose sources give the weakness CWE-427, newest first.

CVE-2021-20051 CVE record

Uncontrolled search path in SonicWall Global VPN Client
- SonicWall Global VPN Client
- CWE-427
Not analysed yet 4 May 2022
CVE-2022-28792 CVE record

CVSS 6.2 Medium

Uncontrolled search path in Samsung Mobile Gear IconX PC Manager
- Samsung Mobile Gear IconX PC Manager
- CWE-427
Not analysed yet 3 May 2022
cheetah PyPI

Cheetah Path Search Order Hijacking
- CWE-427
>=0.9.15, <=0.9.16 · no fixed version yet

GHSA-vxf2-7rc3-pxmx · CVE-2005-1632 Not analysed yet 1 May 2022
CVE-2022-0192 CVE record

CVSS 7.3 High

Uncontrolled search path in Lenovo PCManager
- Lenovo PCManager
- CWE-427
Not analysed yet 22 Apr 2022
CVE-2022-24767 CVE record

CVSS 7.8 High

Uncontrolled search path in Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) and others
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2022 version 17.1
- CWE-427
Not analysed yet 12 Apr 2022
CVE-2022-23449 CVE record

Uncontrolled search path in Siemens SIMATIC Energy Manager Basic and others
- Siemens SIMATIC Energy Manager Basic
- Siemens SIMATIC Energy Manager PRO
- CWE-427
Not analysed yet 12 Apr 2022
CVE-2022-24765 CVE record

CVSS 6.0 Medium

Uncontrolled search for the Git directory in Git for Windows
- git
- CWE-427
Not analysed yet 12 Apr 2022
CVE-2022-28779 CVE record

CVSS 5.3 Medium

Uncontrolled search path in Samsung Mobile Samsung Android USB Driver windows installer
- Samsung Mobile Samsung Android USB Driver windows installer
- CWE-427
Not analysed yet 11 Apr 2022
CVE-2022-1098 CVE record

CVSS 7.8 High

Delta Electronics DIAEnergie Uncontrolledly Search Path Element
- DIAEnerrgie DIAEnergie
- CWE-427
Not analysed yet 1 Apr 2022
CVE-2022-24426 CVE record

CVSS 7.8 High

Uncontrolled search path in Dell Command Update (DCU)
- Dell Command Update (DCU)
- CWE-427
Not analysed yet 1 Apr 2022
CVE-2022-22996 CVE record

CVSS 7.8 High

SanDisk Professional G-RAID 4/8 Software Utility, Privilege Escalation
- SanDisk Professional G-RAID 4/8 Software Utility
- CWE-427
Not analysed yet 30 Mar 2022
CVE-2020-25182 CVE record

CVSS 6.7 Medium

Rockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path Element
- Rockwell Automation ISaGRAF Runtime
- CWE-427
Not analysed yet 18 Mar 2022
CVE-2022-26511 CVE record

Uncontrolled search path in KINGSOFT JAPAN, INC. WPS Presentation
- KINGSOFT JAPAN, INC. WPS Presentation
- CWE-427
Not analysed yet 17 Mar 2022
CVE-2022-26081 CVE record

Uncontrolled search path in KINGSOFT JAPAN, INC. The installer of WPS Office
- KINGSOFT JAPAN, INC. The installer of WPS Office
- CWE-427
Not analysed yet 17 Mar 2022
CVE-2022-25969 CVE record

Uncontrolled search path in KINGSOFT JAPAN, INC. The installer of WPS Office
- KINGSOFT JAPAN, INC. The installer of WPS Office
- CWE-427
Not analysed yet 17 Mar 2022
CVE-2022-23401 CVE record

Uncontrolled search path in Yokogawa Electric Corporation CENTUM CS 3000 and others
- Yokogawa Electric Corporation CENTUM CS 3000
- Yokogawa Electric Corporation CENTUM VP
- CWE-427
Not analysed yet 11 Mar 2022
CVE-2022-23202 CVE record

CVSS 7.0 High

Adobe Creative Cloud Desktop Uncontrolled Search Path Element Arbitrary code execution
- Adobe Creative Cloud (desktop component)
- CWE-427
Not analysed yet 16 Feb 2022
CVE-2021-43940 CVE record

CVSS 7.8 High

Uncontrolled search path in Atlassian Confluence Server and others
- Atlassian Confluence Server
- Atlassian Confluence Data Center
- CWE-427
Not analysed yet 15 Feb 2022
CVE-2022-23410 CVE record

Uncontrolled search path in Axis Communications AB AXIS IP Utility
- Axis Communications AB AXIS IP Utility
- CWE-427
Not analysed yet 14 Feb 2022
github.com/git-lfs/git-lfs Go

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Git LFS can execute a Git binary from the current directory
- CWE-427
<2.12.1 · fixed in 2.12.1

GHSA-4g4p-42wc-9f3m · CVE-2020-27955 Not analysed yet 11 Feb 2022
CVE-2022-0483 CVE record

Local privilege escalation due to insecure folder permissions
- Acronis VSS Doctor
- CWE-427
Not analysed yet 11 Feb 2022
CVE-2022-22528 CVE record

Uncontrolled search path in SAP SE SAP Adaptive Server Enterprise
- SAP SE SAP Adaptive Server Enterprise
- CWE-427
Not analysed yet 9 Feb 2022
CVE-2021-33101 CVE record

CVSS 7.8 High

Uncontrolled search path in Intel(R) GPA software
- Intel(R) GPA software
- CWE-427
Not analysed yet 9 Feb 2022
CVE-2021-0169 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) PROSet/Wireless Wi-Fi in Windows 10 and 11
- Intel(R) PROSet/Wireless Wi-Fi in Windows 10 and 11
- CWE-427
Not analysed yet 9 Feb 2022
CVE-2021-44206 CVE record

Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service
- Acronis Cyber Protect Home Office
- Acronis True Image 2021
- CWE-427
Not analysed yet 4 Feb 2022
CVE-2021-44205 CVE record

Local privilege escalation due to DLL hijacking vulnerability
- Acronis Cyber Protect Home Office
- Acronis True Image 2021
- CWE-427
Not analysed yet 4 Feb 2022
CVE-2021-44463 CVE record

CVSS 8.1 High

Emerson DeltaV Uncontrolled Search Path Element
- CWE-427
Not analysed yet 28 Jan 2022
pipenv PyPI

CVSS 8.0 High

Pipenv's requirements.txt parsing allows malicious index url in comments
- Command injection
- CWE-20
>=2018.10.9, <2022.1.8 · fixed in 2022.1.8

GHSA-qc9x-gjcv-465w · CVE-2022-21668 Not analysed yet 12 Jan 2022
CVE-2022-0015 CVE record

CVSS 7.8 High

Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability
- Palo Alto Networks Cortex XDR Agent
- CWE-427
Not analysed yet 12 Jan 2022
CVE-2022-0129 CVE record

CVSS 7.4 High

DLL Highjack vulnerability in McAfee TechCheck utility
- McAfee,LLC McAfee TechCheck
- CWE-427
Not analysed yet 11 Jan 2022
CVE-2021-30360 CVE record

Uncontrolled search path in Check Point Remote Access Client
- Check Point Remote Access Client
- CWE-427
Not analysed yet 7 Jan 2022
CVE-2021-4007 CVE record

CVSS 7.8 High

Rapid7 Insight Agent Privilege Escalation
- Rapid7 Insight Agent
- CWE-427
Not analysed yet 14 Dec 2021
CVE-2021-20047 CVE record

Uncontrolled search path in SonicWall Global VPN Client
- SonicWall Global VPN Client
- CWE-427
Not analysed yet 8 Dec 2021
CVE-2021-44199 CVE record

DLL hijacking could lead to denial of service
- Acronis Cyber Protect 15
- Acronis Agent
- CWE-427
Not analysed yet 29 Nov 2021
CVE-2021-44198 CVE record

DLL hijacking could lead to local privilege escalation
- Acronis Cyber Protect 15
- CWE-427
Not analysed yet 29 Nov 2021
CVE-2021-31853 CVE record

CVSS 7.8 High

MDE DLL Search Order Hijacking vulnerability
- McAfee,LLC McAfee Drive Encryption (MDE)
- CWE-427
Not analysed yet 10 Nov 2021
CVE-2021-38416 CVE record

CVSS 7.8 High

Delta Electronics DIALink
- Delta Electronics DIALink
- CWE-427
Not analysed yet 3 Nov 2021
CVE-2021-38420 CVE record

CVSS 7.8 High

Delta Electronics DIALink
- Delta Electronics DIALink
- CWE-427
Not analysed yet 3 Nov 2021
antilles-tools PyPI

CVSS 8.8 High

Antilles Dependency Confusion Vulnerability
- CWE-427
<1.0.1 · fixed in 1.0.1

GHSA-hgc3-hp6x-wpgx · CVE-2021-3840 Not analysed yet 3 Nov 2021
CVE-2021-30359 CVE record

Uncontrolled search path in Check Point Harmony Browse and SandBlast Agent for Browsers
- Check Point Harmony Browse and SandBlast Agent for Browsers
- CWE-427
Not analysed yet 22 Oct 2021
CVE-2021-38469 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

AUVESY Versiondog
- AUVESY Versiondog
- CWE-427
Not analysed yet 22 Oct 2021
CVE-2021-35982 CVE record

CVSS 7.3 High

Adobe Reader DC Windows Installer Uncontrolled Search Path element could lead to Arbitrary Code Execution
- Adobe Acrobat Reader
- CWE-427
Not analysed yet 29 Sept 2021
CVE-2021-32466 CVE record

Uncontrolled search path in Trend Micro HouseCall for Home Networks
- Trend Micro HouseCall for Home Networks
- CWE-427
Not analysed yet 29 Sept 2021
CVE-2021-36216 CVE record

Uncontrolled search path in LINE Corporation LINE for Windows
- LINE Corporation LINE for Windows
- CWE-427
Not analysed yet 8 Sept 2021
CVE-2021-28581 CVE record

CVSS 7.3 High

Adobe Creative Cloud Desktop uncontrolled search path element vulnerability could lead to local privilege escalation
- Adobe Creative Cloud (desktop component)
- CWE-427
Not analysed yet 8 Sept 2021
CVE-2021-22775 CVE record

Uncontrolled search path in GP-Pro EX V4.09.250 and prior
- GP-Pro EX V4.09.250 and prior
- CWE-427
Not analysed yet 2 Sept 2021
git-delta crates.io

CVSS 7.8 High

Relative Path Traversal in git-delta
- Path traversal
- CWE-427
<0.8.3 · fixed in 0.8.3

GHSA-5xg3-j2j6-rcx4 · CVE-2021-36376 Not analysed yet 25 Aug 2021
bat crates.io

CVSS 7.8 High

Uncontrolled Search Path Element in sharkdp/bat
- CWE-427
<0.18.2 · fixed in 0.18.2

GHSA-p24j-h477-76q3 · CVE-2021-36753 Not analysed yet 25 Aug 2021
CVE-2021-28594 CVE record

CVSS 7.8 High

Creative Cloud Desktop installer Uncontrolled Search Path element could lead to arbitrary code execution
- Adobe Prelude
- CWE-427
Not analysed yet 24 Aug 2021
CVE-2021-28636 CVE record

CVSS 7.3 High

Adobe Acrobat Reader Unquoted Search Path Vulnerability
- Adobe Acrobat Reader
- CWE-427
Not analysed yet 20 Aug 2021
CVE-2021-28595 CVE record

CVSS 7.8 High

Adobe Dimension Uncontrolled Search Path Element Could Lead To Remote Code Execution
- Adobe Dimension
- CWE-427
Not analysed yet 20 Aug 2021
CVE-2021-1593 CVE record

CVSS 7.3 High

Cisco Packet Tracer for Windows DLL Injection Vulnerability
- Cisco Packet Tracer
- CWE-427
Not analysed yet 4 Aug 2021
CVE-2020-5316 CVE record

CVSS 7.8 High

Uncontrolled search path in Dell SupportAssist Client
- Dell SupportAssist Client
- CWE-427
Not analysed yet 22 Jul 2021
CVE-2021-3550 CVE record

CVSS 7.8 High

Uncontrolled search path in Lenovo PCManager
- Lenovo PCManager
- CWE-427
Not analysed yet 16 Jul 2021
CVE-2021-3042 CVE record

CVSS 7.8 High

Cortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege Escalation
- Palo Alto Networks Cortex XDR Agent
- CWE-427
Not analysed yet 15 Jul 2021
CVE-2021-3613 CVE record

Uncontrolled search path in OpenVPN Connect
- OpenVPN Connect
- CWE-427
Not analysed yet 2 Jul 2021
CVE-2021-3606 CVE record

Uncontrolled search path in OpenVPN-GUI
- OpenVPN-GUI
- CWE-427
Not analysed yet 2 Jul 2021
CVE-2021-28570 CVE record

CVSS 8.3 High

Adobe After Effects uncontrolled search path element vulnerability could lead to remote code execution
- Adobe After Effects
- CWE-427
Not analysed yet 28 Jun 2021
CVE-2021-31840 CVE record

CVSS 7.3 High

DLL preload vulnerability in McAfee Agent for Windows
- McAfee,LLC McAfee Agent for Windows
- CWE-427
Not analysed yet 10 Jun 2021
CVE-2021-3041 CVE record

CVSS 7.8 High

Cortex XDR Agent: Improper control of user-controlled file leads to local privilege escalation
- Palo Alto Networks Cortex XDR Agent
- CWE-427
Not analysed yet 10 Jun 2021