Vulnerabilities > Uncontrolled Search Path Element

DATE CVE VULNERABILITY TITLE RISK
2023-12-17 CVE-2023-6891 Uncontrolled Search Path Element vulnerability in Peazip 9.4.0
A vulnerability has been found in PeaZip 9.4.0 and classified as problematic.
local
low complexity
peazip CWE-427
7.8
2023-12-13 CVE-2023-31210 Uncontrolled Search Path Element vulnerability in Tribe29 Checkmk 2.2.0
Usage of user controlled LD_LIBRARY_PATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries
local
low complexity
tribe29 CWE-427
7.8
2023-12-12 CVE-2020-28369 Uncontrolled Search Path Element vulnerability in Beyondtrust Privilege Management for Windows
In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp.
local
low complexity
beyondtrust CWE-427
7.8
2023-12-12 CVE-2023-48677 Uncontrolled Search Path Element vulnerability in Acronis Cyber Protect Home Office
Local privilege escalation due to DLL hijacking vulnerability.
local
low complexity
acronis CWE-427
7.8
2023-12-12 CVE-2023-41117 Uncontrolled Search Path Element vulnerability in Enterprisedb Postgres Advanced Server
An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0.
network
low complexity
enterprisedb CWE-427
critical
9.8
2023-12-07 CVE-2023-48861 Uncontrolled Search Path Element vulnerability in Baidu Ttplayer 7.0.2
DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll.
local
low complexity
baidu CWE-427
7.8
2023-12-04 CVE-2023-41613 Uncontrolled Search Path Element vulnerability in Ezviz Studio 2.2.0
EzViz Studio v2.2.0 is vulnerable to DLL hijacking.
local
low complexity
ezviz CWE-427
7.8
2023-12-01 CVE-2023-45252 Uncontrolled Search Path Element vulnerability in Huddly Huddlycameraservice
DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges.
local
low complexity
huddly CWE-427
7.8
2023-11-30 CVE-2023-47452 Uncontrolled Search Path Element vulnerability in Notepad-Plus-Plus Notepad++ 6.5
An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated privileges through the msimg32.dll file in the current working directory.
local
low complexity
notepad-plus-plus CWE-427
7.8
2023-11-30 CVE-2023-47453 Uncontrolled Search Path Element vulnerability in Sohu Video Player 7.0.15.0
An Untrusted search path vulnerability in Sohu Video Player 7.0.15.0 allows local users to gain escalated privileges through the version.dll file in the current working directory.
local
low complexity
sohu CWE-427
7.8