QSearchQSearch

CVE-2021-38469

9.1 CRITICAL

Many of the services used by the affected product do not specify full paths for the DLLs they are loading

Published: 2021-10-22 · Last updated: 2026-06-17

Severity and scoring

CVSS
9.1 CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CWE
CWE-427

Affected products

VendorProduct
auvesyversiondog

Description

Many of the services used by the affected product do not specify full paths for the DLLs they are loading. An attacker can exploit the uncontrolled search path by implanting their own DLL near the affected product’s binaries, thus hijacking the loaded DLL.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2021-38481 — The scheduler service running on a specific TCP port enables the user to start and stop jobs (8.1 HIGH)
  • CVE-2021-38479 — Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions (6.5 MEDIUM)
  • CVE-2021-38477 — There are multiple API function codes that permit reading and writing data to or from files and directories, which could lead to the mani... (9.8 CRITICAL)
  • CVE-2021-38475 — The database connection to the server is performed by calling a specific API, which could allow an unprivileged user to gain SYSDBA permi... (7.3 HIGH)
  • CVE-2021-38473 — The affected product’s code base doesn’t properly control arguments for specific functions, which could lead to a stack overflow (8.0 HIGH)

Same CWE

  • CVE-2026-12003 — To allow builds of Python to be run from an in-tree layout (rather than an installed file layout), the VPATH variable is defined at build...
  • CVE-2024-22451 — Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability (6.7 MEDIUM)
  • CVE-2024-22447 — Dell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulnerability (6.7 MEDIUM)
  • CVE-2026-5064 — Potential security vulnerabilities have been identified in the HP One Agent for certain HP PC products, which might allow ...
  • CVE-2026-50100 — Multiple printer drivers provided by Ricoh Company, Ltd (7.8 HIGH)