CWE-428: Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- myscada myproAn Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior....7.8 High
- i-sens smartlog diabetes management softwareAn Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes...7.8 High
- emc elan touchpad driver, lenovo group ltd. elantech touchpad driver +1 moreAn unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad,...7.8 High
- automatedlogic i-vu, sitescan web, carrier automatedlogic webctrl +2 moreAn Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC...7.0 High
- lenovo thinkpad compact usb keyboard driver, lenovo group ltd. thinkpad compact usb keyboard with trackpoint driver +1 moreAn unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB...7.8 High
- sierrawireless sierra wireless em7345 software, sierra wireless em7455 software, sierra wireless location sensor driver +2 moreMultiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver...7.8 High
- eduiq net monitor for employeesNet Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security...7.3 High
- adobe photoshop ccAdobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have an...7.8 High
- unisys secure partitioningUnquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20...6.7 Medium
- lenovo slim usb keyboard driver, edge keyboard driver, lenovo group ltd. edge and slim usb keyboard driver +2 moreUnquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions...7.8 High
- adobe creative cloudUnquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.8...7.8 High
- moxa active opc serverUnquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local...8.8 High
- sonicwall netextenderUnquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender...6.9 Medium
- openvpn, privatetunnel +1 moreUnquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel...6.9 Medium
- schneider electric floating license managerSchneider Electric Floating License Manager Unquoted Search Path or Element6.9
- symantec enterprise vault for file system archivingMultiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File...6.8 Medium