Vulnerabilities > Untrusted Search Path

DATE CVE VULNERABILITY TITLE RISK
2019-11-20 CVE-2019-6189 Untrusted Search Path vulnerability in Lenovo System Interface Foundation 1.0.66.0
A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load an unsigned DLL.
local
low complexity
lenovo CWE-426
7.8
2019-11-19 CVE-2019-16861 Untrusted Search Path vulnerability in Code42
Code42 server through 7.0.2 for Windows has an Untrusted Search Path.
local
low complexity
code42 CWE-426
7.3
2019-11-19 CVE-2019-16860 Untrusted Search Path vulnerability in Code42
Code42 app through version 7.0.2 for Windows has an Untrusted Search Path.
local
low complexity
code42 CWE-426
7.3
2019-11-13 CVE-2019-3648 Untrusted Search Path vulnerability in Mcafee products
A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission.
local
low complexity
mcafee CWE-426
6.7
2019-10-24 CVE-2019-18196 Untrusted Search Path vulnerability in Teamviewer
A DLL side loading vulnerability in the Windows Service in TeamViewer versions up to 11.0.133222 (fixed in 11.0.214397), 12.0.181268 (fixed in 12.0.214399), 13.2.36215 (fixed in 13.2.36216), and 14.6.4835 (fixed in 14.7.1965) on Windows could allow an attacker to perform code execution on a target system via a service restart where the DLL was previously installed with administrative privileges.
local
low complexity
teamviewer CWE-426
6.7
2019-10-16 CVE-2019-17664 Untrusted Search Path vulnerability in NSA Ghidra
NSA Ghidra through 9.0.4 uses a potentially untrusted search path.
local
low complexity
nsa CWE-426
7.8
2019-10-10 CVE-2019-17449 Untrusted Search Path vulnerability in Avira Software Updater 2.0.6.13175/2.0.6.17105/2.0.6.20377
Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack.
local
low complexity
avira CWE-426
6.7
2019-10-07 CVE-2019-3745 Untrusted Search Path vulnerability in Dell Encryption and Endpoint Security Suite Enterprise
The vulnerability is limited to the installers of Dell Encryption Enterprise versions prior to 10.4.0 and Dell Endpoint Security Suite Enterprise versions prior to 2.4.0.
local
low complexity
dell CWE-426
7.3
2019-10-01 CVE-2019-14960 Untrusted Search Path vulnerability in Jetbrains Rider
JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file.
local
low complexity
jetbrains CWE-426
7.8
2019-09-24 CVE-2019-13357 Untrusted Search Path vulnerability in Totaldefense Anti-Virus 9.0.0.773
In Total Defense Anti-virus 9.0.0.773, resource acquisition from the untrusted search path C:\ used by caschelp.exe allows local attackers to hijack ccGUIFrm.dll, which leads to code execution.
local
low complexity
totaldefense CWE-426
7.8