Skip to content
Noroxi

CWE-427 · 1,176 records

Uncontrolled Search Path Element

CVEs in this class

1,176 records

  • CVE-2020-3153
    65This week

    Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

    MediumCVSS 6.5KEVWeaponizedEPSS 28%

    cisco · anyconnect secure mobility clientFeb 19, 2020

  • CVE-2020-27955
    64This week

    Git LFS 2.12.0 allows Remote Code Execution.

    CriticalCVSS 9.8WeaponizedEPSS 82%

    git large file storage project · git large file storageNov 5, 2020

  • CVE-2020-3433
    64This week

    Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 10%

    cisco · anyconnect secure mobility clientAug 17, 2020

  • CVE-2026-110936
    63This week

    A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8).

    HighCVSS 8.4KEVWeaponizedEPSS 0%

    siemens · software centerOct 15, 2026

  • CVE-2017-6517
    53Plan

    Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the ta

    CriticalCVSS 9.8No exploitEPSS 46%

    microsoft · skypeMar 23, 2017

  • CVE-2017-3092
    42Plan

    Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability.

    CriticalCVSS 9.8No exploitEPSS 8%

    adobe · digital editionsJun 20, 2017

  • CVE-2017-3090
    42Plan

    Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability.

    CriticalCVSS 9.8No exploitEPSS 8%

    adobe · digital editionsJun 20, 2017

  • CVE-2017-3097
    41Plan

    Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability.

    CriticalCVSS 9.8No exploitEPSS 7%

    adobe · digital editionsJun 20, 2017

  • CVE-2024-48990
    40Plan

    Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart int

    HighCVSS 7.8WeaponizedEPSS 29%

    needrestart project · needrestartNov 19, 2024

  • CVE-2022-2334
    40Plan

    Softing Secure Integration Server Uncontrolled Search Path Element

    HighCVSS 7.2WeaponizedEPSS 12%

    softing · edgeaggregatorAug 17, 2022

  • CVE-2018-12805
    40Plan

    Adobe Connect versions 9.7.5 and earlier have an Insecure Library Loading vulnerability.

    CriticalCVSS 9.8No exploitEPSS 4%

    adobe · connectJul 20, 2018

  • CVE-2020-10515
    40Plan

    STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006.

    CriticalCVSS 9.8No exploitEPSS 2%

    starface · unified communication \& collaboration clientApr 2, 2020

  • CVE-2019-9546
    40Plan

    SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service.

    CriticalCVSS 9.8No exploitEPSS 2%

    solarwinds · orion platformMar 1, 2019

  • CVE-2019-7653
    40Plan

    The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working director

    CriticalCVSS 9.8No exploitEPSS 2%

    debian · debian linuxFeb 8, 2019

  • CVE-2023-25143
    40Plan

    An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote c

    CriticalCVSS 9.8No exploitEPSS 1%

    trendmicro · apex oneMar 10, 2023

  • CVE-2021-28955
    40Plan

    git-bug before 0.7.2 has an Uncontrolled Search Path Element.

    CriticalCVSS 9.8No exploitEPSS 1%

    git-bug project · git-bugMar 22, 2021

  • CVE-2025-34109
    40Plan

    Panda Security PSEvents.exe Insecure DLL Loading Privilege Escalation

    HighCVSS 8.5WeaponizedEPSS 0%

    panda security · panda global protection 2016Jul 15, 2025

  • CVE-2022-34825
    39Monitor

    Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0

    CriticalCVSS 9.8No exploitEPSS 1%

    nec · expresscluster xNov 8, 2022

  • CVE-2019-20856
    39Monitor

    An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS.

    CriticalCVSS 9.8No exploitEPSS 1%

    mattermost · mattermost desktopJun 19, 2020

  • CVE-2024-23054
    39Monitor

    An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package liste

    CriticalCVSS 9.8No exploitEPSS 1%

    plone · plone docker official imageFeb 5, 2024

  • CVE-2023-31543
    39Monitor

    A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the c

    CriticalCVSS 9.8No exploitEPSS 1%

    pipreqs project · pipreqsJun 30, 2023

  • CVE-2022-24955
    39Monitor

    Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files.

    CriticalCVSS 9.8No exploitEPSS 1%

    foxit · pdf readerFeb 10, 2022

  • CVE-2025-4981
    39Monitor

    Path Traversal Leading to RCE by Any Authenticated Mattermost User

    CriticalCVSS 9.9No exploitEPSS 1%

    mattermost · mattermost serverJun 20, 2025

  • CVE-2026-65093
    39Monitor

    NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape.

    CriticalCVSS 9.9No exploitEPSS 0%

    nvidia · openshellAug 25, 2026

  • CVE-2023-41117
    39Monitor

    An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x be

    CriticalCVSS 9.8No exploitEPSS 0%

    enterprisedb · postgres advanced serverDec 12, 2023

All vulnerability classes