Vulnerabilities > Untrusted Search Path

DATE CVE VULNERABILITY TITLE RISK
2017-08-04 CVE-2017-11657 Untrusted Search Path vulnerability in Dashlane
Dashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\Dashlane directory.
4.4
2017-08-03 CVE-2017-12414 Untrusted Search Path vulnerability in Pcfreetime Format Factory 4.1.0
Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll.
network
low complexity
pcfreetime CWE-426
7.5
2017-08-02 CVE-2017-7642 Untrusted Search Path vulnerability in Hashicorp Vagrant VMWare Fusion
The sudo helper in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.21 allows local users to gain root privileges by leveraging failure to verify the path to the encoded ruby script or scrub the PATH variable.
local
low complexity
hashicorp CWE-426
7.2
2017-08-02 CVE-2015-8264 Untrusted Search Path vulnerability in F-Secure Online Scanner
Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as F-SecureOnlineScanner.exe.
network
f-secure CWE-426
6.8
2017-08-02 CVE-2017-2279 Untrusted Search Path vulnerability in Kiri Tween
Untrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
network
kiri CWE-426
critical
9.3
2017-07-30 CVE-2017-11749 Untrusted Search Path vulnerability in Internetsoft FTP Commander
InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file.
6.8
2017-07-30 CVE-2017-11748 Untrusted Search Path vulnerability in Softonic Spider Player 2.5.3
VIT Spider Player 2.5.3 has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll, olepro32.dll, dsound.dll, or AUDIOSES.dll file.
network
softonic CWE-426
6.8
2017-07-30 CVE-2017-11742 Untrusted Search Path vulnerability in Libexpat Project Libexpat 2.2.1/2.2.2
The writeRandomBytes_RtlGenRandom function in xmlparse.c in libexpat in Expat 2.2.1 and 2.2.2 on Windows allows local users to gain privileges via a Trojan horse ADVAPI32.DLL in the current working directory because of an untrusted search path, aka DLL hijacking.
local
low complexity
libexpat-project microsoft CWE-426
4.6
2017-07-17 CVE-2017-2272 Untrusted Search Path vulnerability in Hibara Attachecase
Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.3.2.2.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
network
hibara CWE-426
critical
9.3
2017-07-17 CVE-2017-2271 Untrusted Search Path vulnerability in Hibara Attachecase 2.8.0.0/2.8.2.8/2.8.3.0
Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.2.8.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
network
hibara CWE-426
critical
9.3