Vulnerabilities > Uncontrolled Search Path Element

DATE CVE VULNERABILITY TITLE RISK
2019-12-18 CVE-2019-19689 Uncontrolled Search Path Element vulnerability in Trendmicro Housecall for Home Networks
Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited via a DLL Hijack related to a vulnerability on the packer that the program uses.
local
low complexity
trendmicro CWE-427
7.8
2019-12-18 CVE-2019-19235 Uncontrolled Search Path Element vulnerability in Asus ATK Package
AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 (for Windows 10 notebook PCs) could lead to unsigned code execution with no additional execution.
local
high complexity
asus CWE-427
7.0
2019-12-17 CVE-2019-18670 Uncontrolled Search Path Element vulnerability in Acer Quick Access
In the Quick Access Service (QAAdminAgent.exe) in Acer Quick Access V2.01.3000 through 2.01.3027 and V3.00.3000 through V3.00.3008, a REGULAR user can load an arbitrary unsigned DLL into the signed service's process, which is running as NT AUTHORITY\SYSTEM.
local
low complexity
acer CWE-427
7.8
2019-12-11 CVE-2019-3667 Uncontrolled Search Path Element vulnerability in Mcafee Techcheck 3.0.0.17
DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbitrary code via the local folder placed there by an attacker.
local
low complexity
mcafee CWE-427
7.8
2019-12-06 CVE-2019-18575 Uncontrolled Search Path Element vulnerability in Dell Command|Configure
Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability.
local
low complexity
dell CWE-427
7.1
2019-12-04 CVE-2019-19364 Uncontrolled Search Path Element vulnerability in Sony Catalyst Browse and Catalyst Production Suite
A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe (version 1.1.0.21) and CatalystBrowseSuite.2019.1.exe (version 1.1.0.21) installers run.
local
low complexity
sony CWE-427
7.8
2019-12-04 CVE-2019-15638 Uncontrolled Search Path Element vulnerability in Copadata Zenon 8.10
COPA-DATA zenone32 zenon Editor through 8.10 has an Uncontrolled Search Path Element.
local
low complexity
copadata CWE-427
7.8
2019-12-03 CVE-2019-7365 Uncontrolled Search Path Element vulnerability in Autodesk Desktop 7.0.16.29
DLL preloading vulnerability in Autodesk Desktop Application versions 7.0.16.29 and earlier.
local
low complexity
autodesk CWE-427
7.8
2019-11-26 CVE-2019-16001 Uncontrolled Search Path Element vulnerability in Cisco Webex Meetings and Webex Teams
A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack.
local
low complexity
cisco CWE-427
5.3
2019-11-18 CVE-2019-18215 Uncontrolled Search Path Element vulnerability in Comodo Internet Security
An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0.
local
low complexity
comodo CWE-427
7.8