Vulnerabilities > Untrusted Search Path

DATE CVE VULNERABILITY TITLE RISK
2018-10-11 CVE-2018-12449 Untrusted Search Path vulnerability in Navercorp Whale 0.4.3.0
The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking.
local
low complexity
navercorp CWE-426
7.8
2018-09-24 CVE-2018-6700 Untrusted Search Path vulnerability in Mcafee True KEY
DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key (TK) before 5.1.165 allows local users to execute arbitrary code via specially crafted malware.
local
low complexity
mcafee CWE-426
7.8
2018-09-07 CVE-2018-0649 Untrusted Search Path vulnerability in Eset products
Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc.
local
low complexity
eset CWE-426
7.8
2018-09-07 CVE-2018-0648 Untrusted Search Path vulnerability in Chatwork 2.3.0
Untrusted search path vulnerability in installer of ChatWork Desktop App for Windows 2.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
chatwork CWE-426
7.8
2018-09-07 CVE-2018-0624 Untrusted Search Path vulnerability in Yayoi-Kk products
Untrusted search path vulnerability in Multiple Yayoi 17 Series products (Yayoi Kaikei 17 Series Ver.23.1.1 and earlier, Yayoi Aoiro Shinkoku 17 Ver.23.1.1 and earlier, Yayoi Kyuuyo 17 Ver.20.1.4 and earlier, Yayoi Kyuuyo Keisan 17 Ver.20.1.4 and earlier, Yayoi Hanbai 17 Series Ver.20.0.2 and earlier, and Yayoi Kokyaku Kanri 17 Ver.11.0.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
yayoi-kk CWE-426
7.8
2018-09-07 CVE-2018-0623 Untrusted Search Path vulnerability in Yayoi-Kk products
Untrusted search path vulnerability in Multiple Yayoi 17 Series products (Yayoi Kaikei 17 Series Ver.23.1.1 and earlier, Yayoi Aoiro Shinkoku 17 Ver.23.1.1 and earlier, Yayoi Kyuuyo 17 Ver.20.1.4 and earlier, Yayoi Kyuuyo Keisan 17 Ver.20.1.4 and earlier, Yayoi Hanbai 17 Series Ver.
local
low complexity
yayoi-kk CWE-426
7.8
2018-09-04 CVE-2018-0656 Untrusted Search Path vulnerability in Sony Digital Paper APP 1.4.0.16050
Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
sony CWE-426
7.8
2018-08-29 CVE-2018-5003 Untrusted Search Path vulnerability in Adobe Creative Cloud
Adobe Creative Cloud Desktop Application before 4.5.5.342 (installer) has an insecure library loading (dll hijacking) vulnerability.
local
low complexity
adobe CWE-426
7.8
2018-07-26 CVE-2018-0621 Untrusted Search Path vulnerability in Logitech Connection Utility Software 2.00.3/2.20.28/2.30.6
Untrusted search path vulnerability in LOGICOOL CONNECTION UTILITY SOFTWARE versions before 2.30.9 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
logitech CWE-426
7.8
2018-07-26 CVE-2018-0620 Untrusted Search Path vulnerability in Logitech Game Software
Untrusted search path vulnerability in LOGICOOL Game Software versions before 8.87.116 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
logitech CWE-426
7.8