CVE-2019-6019

STAMP Workbench installer is affected by an insecure DLL search path (CWE-427) in the Windows installer, enabling arbitrary code execution with the user’s privileges via a Trojan horse DLL loaded from an unspecified directory. The issue is specific to the installer component, not the STAMP Workbe...

Design/Logic Flaw

IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search path vulnerability. By using a executable file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM...

Lenovo Yoga 700-11ISK and Yoga 700-14ISK DLL Search Path Vulnerability

The Lenovo Yoga 700-11ISK and Yoga 700-14ISK are both laptops from the Chinese company Lenovo Lenovo. The Lenovo Yoga 700-11ISK and Yoga 700-14ISK suffer from a DLL search path vulnerability that can be exploited by an attacker to elevate privileges...

CVE-2019-5958

CVE-2019-5958 affects Electronic reception and examination of application for radio licenses Offline (version 1.0.9.0 and earlier). The root cause is an untrusted DLL search path that may allow loading of a Trojan DLL, enabling arbitrary code execution with the privileges of the running process (...

CVE-2019-5957

CVE-2019-5957 is an untrusted search path vulnerability in the installer for the Electronic reception and examination of application for radio licenses Online (versions 1.0.9.0 and earlier). The issue allows an attacker to execute arbitrary code by Trojan-horse DLLs loaded from an insecure DLL se...

CVE-2019-6154

CVE-2019-6154 describes a DLL search path vulnerability in Lenovo Bootable Generator (prior to Mar-2019) that could allow a local attacker to execute code. Affected software: Lenovo Bootable Generator (used to create Linux diagnostics on bootable USB). Root cause: DLL search path flaw. Impact: lo...

The vulnerability of the Visual Studio C++ Redistributable installation program allows a perpetrator to execute arbitrary code.

The vulnerability of the Visual Studio C++ Redistributable software installation program is related to incorrect handling of the search path. Exploiting this vulnerability could allow an attacker to execute arbitrary code using the malicious DLL library...

CVE-2019-5921

CVE-2019-5921 affects Windows 7 and describes an untrusted search path vulnerability where a Trojan horse DLL could be loaded from the application directory, enabling arbitrary code execution when a program loads a DLL from the same directory. Root cause: DLL planting in the application directory...

Design/Logic Flaw

Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-16190

CVE-2018-16190 affects Micco-provided DLLs UNARJ32.DLL (Win32) ≤ v1.10.1.25, LHMelting (Win32) ≤ v1.65.3.6, and LMLzh32.DLL ≤ v2.67.1.2, with an untrusted DLL search path that allows a Trojan horse DLL to be loaded from an unspecified directory. This CWE-427/insecure DLL loading issue can permit ...

CVE-2019-5912

CVE-2019-5912 concerns the UNARJ32.DLL installer for Win32, affected in version 1.10.1.25 and earlier. The vulnerability is an untrusted/search-path issue that can allow privilege escalation via a Trojan horse DLL loaded from an unspecified directory during installation. The linked JVN entry note...

CVE-2018-16098

In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user...

Design/Logic Flaw

Untrusted search path vulnerability in The installer of Windows 10 Fall Creators Update Modify module for Security Measures tool allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-16176

The CVE-2018-16176 entry concerns the Japan Atomic Energy Agency’s Mapping Tool installer (versions 2.0.1.6 and 2.0.1.7). The root cause is an insecure DLL search path in the installer, enabling a Trojan horse DLL to be loaded from an unspecified directory. This may allow arbitrary code execution...

CVE-2018-16177

The CVE-2018-16177 issue affects the Windows 10 Fall Creators Update: Modify module for Security Measures tool, where the installer may load an attacker-controlled DLL due to a insecure DLL search path (CWE-427). This can allow arbitrary code execution with the privileges of the user invoking the...

CVE-2018-16182

CVE-2018-16182 concerns an untrusted DLL search path in the installer for MARKET SPEED, affecting Ver.16.4 and earlier. The root cause is insecure DLL loading (CWE-427) that can allow arbitrary code execution with the invoking user’s privileges. Public sources in the connected documents confirm t...

CVE-2018-1888

IBM i Access for Windows (IBM) vulnerable to CVE-2018-1888 on Windows versions 7.1 and earlier due to an untrusted search path that allows arbitrary code execution via a Trojan horse DLL in the current working directory, related to LoadLibrary. Connected IBM bulletin confirms affected release 7.1...

CVE-2018-18629

An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search path vulnerability in the keybase-redirector application allows a local, unprivileged user on Linux to gain root privileges via a Trojan horse binary...

CVE-2018-7365

CVE-2018-7365 affects ZTE uSmartView prior to and including v5.01.05. The root cause is an untrusted search path, which may allow an unauthorized user to perform unauthorized operations. Public documents provided do not specify exploit details or confirmed in-the-wild use. Depending on the source...

CVE-2018-0692

CVE-2018-0692 concerns an untrusted search path vulnerability in Baidu Browser, where Baidu Browser 43.23.1000.500 and earlier can be exploited via a Trojan horse DLL located in an unspecified directory, enabling privilege escalation and arbitrary code execution with the caller’s privileges. Conn...