CWE-427

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the exte

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolle

NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit

NREL BEopt 2.8.0.0 contains a DLL hijacking vulnerability that allows attackers to load arbitrary libraries by tricking

RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH e

The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to trick Process Optimizatio

Dell Command | Intel vPro Out of Band, versions prior to 4.7.0, contain an Uncontrolled Search Path Element vulnerabilit

OpenClaw versions prior to 2026.2.14 contain a command hijacking vulnerability that allows attackers to execute unintend

A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to

A Dynamic-link Library Injection vulnerability in GatewayGeo MapServer for Windows version 5 allows attackers to escalat

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malici

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulner

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed application

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitr

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in

CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attacke

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location

Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects. Prior t

The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege use

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that c

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that c

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom oper

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a temporary v

Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exis

Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.

An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows. The installer creates a temporary folder wit

The installers for multiple products provided by PIONEER CORPORATION contain an issue with the DLL search path, which ma

The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libra

The installer for Roland Cloud Manager ver.3.1.19 and prior insecurely loads Dynamic Link Libraries (DLLs), which could

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2). The affected application permits improper mo

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All version

A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation pote

The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely l

The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search pat

TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability al

The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL search path. If a user is

The installer for Qsee Client versions 1.0.1 and prior insecurely load Dynamic Link Libraries (DLLs). When a user is dir

ScreenToGif is a screen recording tool. In versions from 2.42.1 and prior, ScreenToGif is vulnerable to DLL sideloading

The installer for OM Workspace (Windows Edition) Ver 2.4 and earlier insecurely loads Dynamic Link Libraries (DLLs), whi

The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a use

vcpkg is a free and open-source C/C++ package manager. Prior to version 3.6.1#3, vcpkg's Windows builds of OpenSSL set o

Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.336

The application's update service, when checking for updates, loads certain system libraries from a search path that incl

pymanager included the current working directory in sys.path meaning modules could be shadowed by modules in the current

A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH (Secur

MemProcFS before 5.17 contains multiple unsafe library-loading patterns that enable DLL and shared-library hijacking acr

Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the same directory, an arbit

NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local att