← Back
CWE-426

655 CVEs • Abstraction: Base • Likelihood of Exploit: High

Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

JSON object

Loading...

CVEs (655)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Resume Next
1Filecapsule Deluxe Portable
May 13, 2026
Jul 17, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
1Resume Next
1Filecapsule Deluxe Portable
May 13, 2026
Jul 17, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecifi...Show more
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Show less
1Resume Next
1Filecapsule Deluxe Portable
May 13, 2026
Jul 17, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
1Resume Next
1Filecapsule Deluxe Portable
May 13, 2026
Jul 17, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecifi...Show more
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Show less
1Resume Next
1Filecapsule Deluxe Portable
May 13, 2026
Jul 17, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
1Yahoo
1Toolbar
May 13, 2026
Jul 17, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in Installer of Yahoo! Toolbar (for Internet explorer) v8.0.0.6 and earlier, with its timestamp prior to June 13, 2017, 18:18:55 allows an attacker to gain privileges via a Trojan hors...Show more
Untrusted search path vulnerability in Installer of Yahoo! Toolbar (for Internet explorer) v8.0.0.6 and earlier, with its timestamp prior to June 13, 2017, 18:18:55 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Show less
1Sourcenext
1File Compact
May 13, 2026
Jul 17, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in self-extracting archive files created by File Compact Ver.5 version 5.10 and earlier, Ver.6 version 6.02 and earlier, Ver.7 version 7.02 and earlier allows an attacker to gain privi...Show more
Untrusted search path vulnerability in self-extracting archive files created by File Compact Ver.5 version 5.10 and earlier, Ver.6 version 6.02 and earlier, Ver.7 version 7.02 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Show less
1Chitora
1Lhaz+
May 13, 2026
Jul 17, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in Self-extracting archive files created by Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
1Chitora
1Lhaz+
May 13, 2026
Jul 17, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in Installer of Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
1Chitora
1Lhaz+
May 13, 2026
Jul 17, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
1Chitora
1Lhaz+
May 13, 2026
Jul 17, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
1Moj
1Pdf Digital Signature
May 13, 2026
Jul 7, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in Installer of PDF Digital Signature Plugin (G2.30) and earlier, distributed till June 29, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified director...Show more
Untrusted search path vulnerability in Installer of PDF Digital Signature Plugin (G2.30) and earlier, distributed till June 29, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Show less
1Moj
1Shinseiyo Sogo Soft
May 13, 2026
Jul 7, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in Installer of Shinseiyo Sogo Soft (4.8A) and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
1Mlit
1Denshiseikabutsusakuseishienkensa
May 13, 2026
Jul 7, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in The installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till June 20, 2017, The self-extracting archive including the installer of MLIT Densh...Show more
Untrusted search path vulnerability in The installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till June 20, 2017, The self-extracting archive including the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till June 20, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Show less
1Nilim
1Road Construction Completion Diagram Check Program
May 13, 2026
Jul 7, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Untrusted search path vulnerability in Douro Kouji Kanseizutou Check Program Ver3.1 (cdrw_checker_3.1.0.lzh) and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
1Douroshisetu
1Kihon Data Sakusei System
May 13, 2026
Jul 7, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Untrusted search path vulnerability in Douroshisetu Kihon Data Sakusei System Ver1.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
1Charamin
1Omp
May 13, 2026
Jul 7, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Untrusted search path vulnerability in The installer of Charamin OMP Version 1.1.7.4 and earlier, Version 1.2.0.0 Beta and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
1Nta
1E Tax
May 13, 2026
Jul 7, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Untrusted search path vulnerability in Setup file of advance preparation for e-Tax software (WEB version) (1.17.1) and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
1Mext
1Ebidsettingchecker
May 13, 2026
Jul 7, 2017
N/A· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
Untrusted search path vulnerability in EbidSettingChecker.exe (version 1.0.0.0) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
1Ipa
1Casl Ii Simulator
May 13, 2026
Jul 7, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Untrusted search path vulnerability in Installer of CASL II simulator (self-extract format) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.