#cwe-427

共收录 126 条相关情报。

← 返回所有主题
漏洞预警2026-07-28 发布INFO

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current us...

CVE-2026-48388

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue aff...

CVE-2026-8164

Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desk

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content.

CVE-2026-21770

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which could allow an attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-16 发布INFO

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio c...

CVE-2026-5674

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed application

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be...

CVE-2026-42936

The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory wh

历史摘要 · 未重新核验 · NVD

安全公告2026-07-14 发布INFO

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that...

CVE-2026-48272

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary c

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-14 发布INFO

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit...

CVE-2026-48272

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary c

历史摘要 · 未重新核验 · NVD

安全公告2026-07-14 发布INFO

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files...

CVE-2026-0487

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-14 发布INFO

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to execute malicious code on the system. ...

CVE-2026-0487

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location

历史摘要 · 未重新核验 · NVD

安全公告2026-07-13 发布INFO

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path...

CVE-2026-48364

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-13 发布INFO

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path...

CVE-2026-48363

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that c

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-13 发布INFO

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of...

CVE-2026-48364

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of...

CVE-2026-48363

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk...

CVE-2026-15515

A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown process

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer ...

CVE-2026-56437

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

electron-updater allows for automatic updates for Electron apps. Prior to 26.15.0, AppImage targets built by app-builder-lib could use an empty path component when setting the L...

CVE-2026-54672

electron-updater allows for automatic updates for Electron apps. Prior to 26.15.0, AppImage targets built by app-builder

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-22 发布HIGH

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashin...

CVE-2026-54232

vLLM 是一个用于大语言模型(LLM)的推理和服务引擎。在 0.22.1 版本之前,vLLM 的 Dockerfile 存在依赖混淆漏洞,具体涉及 flashinfer-jit-cache 包。该包通过自定义索引(flashinfer.a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-22 发布INFO

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extens...

CVE-2026-49241

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-22 发布INFO

An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application, which typically oper...

CVE-2026-6645

An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-18 发布INFO

Local privilege escalation by loading DLLs from a shared temporary directory in ANSSI’s DFIR-ORC, versions 10.2.7 and prior. An attacker with prior access to the system, can pla...

CVE-2026-11958

Local privilege escalation by loading DLLs from a shared temporary directory in ANSSI’s DFIR-ORC, versions 10.2.7 and pr

历史摘要 · 未重新核验 · NVD