Vulnerabilities > Uncontrolled Search Path Element

DATE CVE VULNERABILITY TITLE RISK
2017-08-30 CVE-2017-12717 Uncontrolled Search Path Element vulnerability in Advantech Webaccess
An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817.
local
low complexity
advantech CWE-427
7.8
2017-08-29 CVE-2014-8393 Uncontrolled Search Path Element vulnerability in Corel products
DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion.
local
low complexity
corel CWE-427
7.8
2017-08-23 CVE-2017-13130 Uncontrolled Search Path Element vulnerability in BMC Patrol
mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring.
local
low complexity
bmc CWE-427
7.8
2017-08-21 CVE-2017-6329 Uncontrolled Search Path Element vulnerability in Symantec VIP Access for Desktop 2.2.3
Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading vulnerability.
local
low complexity
symantec CWE-427
7.8
2017-08-14 CVE-2017-9661 Uncontrolled Search Path Element vulnerability in Simplight Scada 4.3.0.27
An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior.
local
high complexity
simplight CWE-427
7.0
2017-08-14 CVE-2017-9648 Uncontrolled Search Path Element vulnerability in Solarcontrols Wattconfig M 2.5.10.1
An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior.
local
low complexity
solarcontrols CWE-427
7.8
2017-08-14 CVE-2017-9646 Uncontrolled Search Path Element vulnerability in Solarcontrols Heating Control Downloader 1.0.1.15
An Uncontrolled Search Path Element issue was discovered in Solar Controls Heating Control Downloader (HCDownloader) Version 1.0.1.15 and prior.
local
low complexity
solarcontrols CWE-427
7.8
2017-08-07 CVE-2017-12653 Uncontrolled Search Path Element vulnerability in 360Totalsecurity 360 Total Security 3.5.0.1033/9.0.0.1202
360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH, as demonstrated by the C:\Python27 directory.
local
low complexity
360totalsecurity CWE-427
7.8
2017-08-02 CVE-2017-2288 Uncontrolled Search Path Element vulnerability in Lhaforge Project Lhaforge
Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
lhaforge-project CWE-427
7.8
2017-08-02 CVE-2017-2287 Uncontrolled Search Path Element vulnerability in Sony NFC Port Software Remover 1.3.0.1
Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
sony CWE-427
7.8