Advisories · Weakness

CWE-427.

Every Advisory and CVE whose sources give the weakness CWE-427, newest first.

CVE-2022-44939 CVE record

CVSS 7.8 High

Efs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll.
- CWE-427
Not analysed yet 6 Jan 2023
CVE-2022-36314 CVE record

CVSS 5.5 Medium

Uncontrolled search path in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- CWE-427
Not analysed yet 22 Dec 2022
CVE-2022-22736 CVE record

CVSS 7.0 High

Uncontrolled search path in Mozilla Firefox
- Mozilla Firefox
- CWE-427
Not analysed yet 22 Dec 2022
CVE-2021-36631 CVE record

CVSS 6.7 Medium

Untrusted search path vulnerability in Baidunetdisk Version 7.4.3 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CWE-427
Not analysed yet 22 Dec 2022
CVE-2022-46330 CVE record

CVSS 7.8 High

Uncontrolled search path in Installers generated by Squirrel.Windows
- Installers generated by Squirrel.Windows
- CWE-427
Not analysed yet 21 Dec 2022
CVE-2022-42945 CVE record

CVSS 7.8 High

Uncontrolled search path in DWG TrueView
- DWG TrueView
- CWE-427
Not analysed yet 19 Dec 2022
CVE-2022-29580 CVE record

CVSS 8.9 High

Path Traversal in Android Google Search App
- Android Google Search App
- CWE-427
Not analysed yet 13 Dec 2022
CVE-2022-43722 CVE record

CVSS 7.8 High

Uncontrolled search path in Siemens SICAM PAS/PQS
- Siemens SICAM PAS/PQS
- CWE-427
Not analysed yet 13 Dec 2022
CVE-2022-43751 CVE record

CVSS 7.8 High

McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unpr…
- CWE-427
Not analysed yet 22 Nov 2022
CVE-2022-45422 CVE record

CVSS 7.8 High

Uncontrolled search path in LG PC
- LG PC
- CWE-427
Not analysed yet 21 Nov 2022
CVE-2022-38395 CVE record

CVSS 7.8 High

Uncontrolled search path in HP Inc. HP Support Assistant
- HP Inc. HP Support Assistant
- CWE-427
Not analysed yet 18 Nov 2022
CVE-2022-31694 CVE record

CVSS 7.3 High

Uncontrolled search path in VMware InstallBuilder
- VMware InstallBuilder
- CWE-427
Not analysed yet 18 Nov 2022
CVE-2022-36924 CVE record

CVSS 8.8 High

Local Privilege Escalation in Zoom Rooms Installer for Windows
- Zoom Video Communications Inc Zoom Rooms Installer for Windows
- CWE-427
Not analysed yet 17 Nov 2022
CVE-2022-26028 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) VTune(TM) Profiler software
- Intel(R) VTune(TM) Profiler software
- CWE-427
Not analysed yet 11 Nov 2022
CVE-2021-33064 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) System Studio
- Intel(R) System Studio
- CWE-427
Not analysed yet 11 Nov 2022
CVE-2022-36380 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(r) NUC Kit Wireless Adapter drivers for Windows 10
- Intel(r) NUC Kit Wireless Adapter drivers for Windows 10
- CWE-427
Not analysed yet 11 Nov 2022
CVE-2022-27187 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) Quartus Prime Standard edition software
- Intel(R) Quartus Prime Standard edition software
- CWE-427
Not analysed yet 11 Nov 2022
CVE-2022-30548 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) Glorp software
- Intel(R) Glorp software
- CWE-427
Not analysed yet 11 Nov 2022
CVE-2022-26086 CVE record

CVSS 6.7 Medium

Uncontrolled search path in PresentMon software maintained by Intel(R)
- PresentMon software maintained by Intel(R)
- CWE-427
Not analysed yet 11 Nov 2022
CVE-2022-27638 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Intel(R) Advanced Link Analyzer Pro and Standard edition
- Intel(R) Advanced Link Analyzer Pro and Standard edition
- CWE-427
Not analysed yet 11 Nov 2022
CVE-2022-43310 CVE record

CVSS 7.8 High

An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute pat…
- CWE-427
Not analysed yet 9 Nov 2022
CVE-2022-34825 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Uncontrolled search path in NEC Corporation CLUSTERPRO X
- NEC Corporation CLUSTERPRO X
- CWE-427
Not analysed yet 8 Nov 2022
CVE-2022-44744 CVE record

CVSS 2.2 Low

Uncontrolled search path in Acronis Cyber Protect Home Office
- Acronis Cyber Protect Home Office
- CWE-427
Not analysed yet 7 Nov 2022
jupyter-core PyPI

CVSS 8.8 High

Execution with Unnecessary Privileges in JupyterApp
- Privilege escalation
- CWE-427
<4.11.2 · fixed in 4.11.2

GHSA-m678-f26j-3hrp · CVE-2022-39286 Not analysed yet 26 Oct 2022
CVE-2022-41796 CVE record

CVSS 7.8 High

Uncontrolled search path in Sony Corporation Content Transfer (for Windows)
- Sony Corporation Content Transfer (for Windows)
- CWE-427
Not analysed yet 24 Oct 2022
CVE-2022-33921 CVE record

CVSS 7.0 High

Uncontrolled search path in Dell GeoDrive
- Dell GeoDrive
- CWE-427
Not analysed yet 12 Oct 2022
CVE-2022-32168 CVE record

CVSS 7.8 High

notepad-plus-plus - DLL Hijacking
- notepad-plus-plus
- CWE-427
Not analysed yet 28 Sept 2022
CVE-2022-40978 CVE record

CVSS 7.5 High

Uncontrolled search path in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- CWE-427
Not analysed yet 19 Sept 2022
CVE-2022-2333 CVE record

CVSS 8.8 High

Honeywell SoftMaster Uncontrolled Search Path Element
- Honeywell SoftMaster
- CWE-427
Not analysed yet 16 Sept 2022
CVE-2022-39846 CVE record

CVSS 6.2 Medium

Uncontrolled search path in Samsung Mobile Smart Switch PC
- Samsung Mobile Smart Switch PC
- CWE-427
Not analysed yet 9 Sept 2022
CVE-2022-36271 CVE record

CVSS 7.8 High

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges.
- CWE-427
Not analysed yet 7 Sept 2022
CVE-2022-2006 CVE record

CVSS 7.8 High

AutomationDirect C-more EA9 HMI Uncontrolled Search Path Element
- AutomationDirect C-more EA9
- CWE-427
Not analysed yet 31 Aug 2022
CVE-2022-26374 CVE record

CVSS 7.8 High

Uncontrolled search path in version
- version
- CWE-427
Not analysed yet 18 Aug 2022
CVE-2022-28696 CVE record

CVSS 7.8 High

Uncontrolled search path in Intel(R) Distribution for Python
- Intel(R) Distribution for Python
- CWE-427
Not analysed yet 18 Aug 2022
CVE-2022-25841 CVE record

CVSS 7.8 High

Uncontrolled search path in version
- version
- CWE-427
Not analysed yet 18 Aug 2022
CVE-2022-25999 CVE record

CVSS 7.8 High

Uncontrolled search path in version
- version
- CWE-427
Not analysed yet 18 Aug 2022
CVE-2022-21807 CVE record

CVSS 7.8 High

Uncontrolled search path in Intel(R) VTune(TM) Profiler software
- Intel(R) VTune(TM) Profiler software
- CWE-427
Not analysed yet 18 Aug 2022
CVE-2022-2334 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

Softing Secure Integration Server Uncontrolled Search Path Element
- Softing Secure Integration Server
- CWE-427
Not analysed yet 17 Aug 2022
CVE-2022-34235 CVE record

CVSS 7.8 High

Adobe Premiere Elements Uncontrolled Search Path Element Privilege Escalation
- Adobe Premiere Elements
- CWE-427
Not analysed yet 11 Aug 2022
CVE-2022-36840 CVE record

CVSS 4.5 Medium

Uncontrolled search path in Samsung Mobile Samsung Update Setup
- Samsung Mobile Samsung Update Setup
- CWE-427
Not analysed yet 5 Aug 2022
CVE-2021-38410 CVE record

CVSS 7.3 High

AVEVA PCS Portal Uncontrolled Search Path Element
- AVEVA Platform Common Services (PCS) Portal
- CWE-427
Not analysed yet 27 Jul 2022
CVE-2022-32498 CVE record

CVSS 5.5 Medium

Uncontrolled search path in Dell PowerStore
- Dell PowerStore
- CWE-427
Not analysed yet 20 Jul 2022
CVE-2022-34902 CVE record

CVSS 7.8 High

Uncontrolled search path in Parallels Access
- Parallels Access
- CWE-427
Not analysed yet 18 Jul 2022
CVE-2022-34901 CVE record

CVSS 7.8 High

Uncontrolled search path in Parallels Access
- Parallels Access
- CWE-427
Not analysed yet 18 Jul 2022
CVE-2022-34900 CVE record

CVSS 7.8 High

Uncontrolled search path in Parallels Access
- Parallels Access
- CWE-427
Not analysed yet 18 Jul 2022
CVE-2022-32223 CVE record

Uncontrolled search path in Node
- Node
- CWE-427
Not analysed yet 14 Jul 2022
CVE-2022-29187 CVE record

CVSS 7.8 High

Bypass of safe.directory protections in Git
- git
- CWE-282
- CWE-427
Not analysed yet 12 Jul 2022
CVE-2022-1824 CVE record

CVSS 7.9 High

McAfee MCPR privilege escalation
- McAfee,LLC McAfee Consumer Product Removal Tool
- CWE-427
Not analysed yet 20 Jun 2022
CVE-2017-20052 CVE record

CVSS 5.0 Medium

Python pgAdmin4 uncontrolled search path
- Python
- CWE-427
Not analysed yet 16 Jun 2022
CVE-2022-29092 CVE record

CVSS 7.8 High

Uncontrolled search path in Dell SupportAssist Consumer
- Dell SupportAssist Consumer
- CWE-427
Not analysed yet 10 Jun 2022
CVE-2017-20018 CVE record

CVSS 6.3 Medium

XAMPP Installer uncontrolled search path
- XAMPP
- CWE-427
Not analysed yet 9 Jun 2022
kerberos npm

CVSS 7.8 High

Duplicate Advisory: Kerberos for NodeJS allows DLL Injection
- CWE-427
<1.0.0 · fixed in 1.0.0

GHSA-f478-xwv9-p93q Withdrawn Not analysed yet 24 May 2022
CVE-2022-30697 CVE record

Local privilege escalation due to insecure folder permissions
- Acronis Snap Deploy
- CWE-427
Not analysed yet 16 May 2022
CVE-2022-30696 CVE record

Local privilege escalation due to a DLL hijacking vulnerability
- Acronis Snap Deploy
- CWE-427
Not analysed yet 16 May 2022
CVE-2022-22139 CVE record

CVSS 7.3 High

Uncontrolled search path in Intel(R) XTU software
- Intel(R) XTU software
- CWE-427
Not analysed yet 12 May 2022
CVE-2022-28247 CVE record

CVSS 6.7 Medium

Adobe Acrobat Uninstaller Hard Link Leads To Remote Code Execution
- Adobe Acrobat Reader
- CWE-427
Not analysed yet 11 May 2022
CVE-2022-0025 CVE record

CVSS 6.7 Medium

Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability
- Palo Alto Networks Cortex XDR Agent
- CWE-427
Not analysed yet 11 May 2022
CVE-2021-34606 CVE record

CVSS 7.3 High

XINJE XD/E Series PLC Program Tool DLL Hijacking
- XINJE XD/E Series PLC Program Tool
- CWE-427
Not analysed yet 11 May 2022
CVE-2021-42743 CVE record

CVSS 8.8 High

Local privilege escalation via a default path in Splunk Enterprise Windows
- Splunk Enterprise
- CWE-427
Not analysed yet 6 May 2022
CVE-2022-28714 CVE record

CVSS 7.3 High

Uncontrolled search path in F5 BIG-IP APM and others
- F5 BIG-IP APM
- F5 BIG-IP APM Clients
- CWE-427
Not analysed yet 5 May 2022