CWE-428: Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- siemens simatic automation tool, simatic net pc software v14, simatic net pc software v15 +33 more +35 moreA vulnerability has been identified in SIMATIC Automation Tool (All versions), SIMATIC NET PC...6.7 Medium
- lenovo synaptics smart audio uwp app, synaptics smart audio uwp +1 moreAn unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics...6.7 Medium
- fortinet fortisiem windows agent, fortisiemwindowsagent +1 moreAn unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an...9.8 Critical
- toshiba electronic devices & storage corporation hdd password tool (for windows), toshiba password tool for windows +1 moreAn unquoted search path vulnerability exists HDD Password tool (for Windows) in version 1.20.6620...8.4 High
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 moreUnquoted service paths for some McAfee ENS files4.8 Medium
- lenovo vantageA privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System...7.3 High
- palo alto networks global protect agent, paloaltonetworks globalprotect +1 moreGlobal Protect Agent: Local privilege escalation due to an unquoted search path vulnerability4.2 Medium
- fortinet forticlient, forticlientwindows +1 moreAn unquoted service path vulnerability in the FortiClient FortiTray component of...9.8 Critical
- intel intel® optane(tm) dc persistent memory module management software, optane dc persistent memory module management +1 moreUnquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software...7.8 High
- intel graphics driver, intel(r) graphics drivers +1 moreUnquoted service path in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117,...4.4 Medium
- mcafee data exchange layer, mcafee, llc data exchange layer (dxl) broker +1 moreUnquoted service executable path4.2 Medium
- hp system event utilityA potential security vulnerability has been identified with certain versions of HP System Event...7.8 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus \+ security 2019 +7 more +9 moreA Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160...7.8 High
- whoopsie-daisywhoopsie-daisy before 0.1.26: Root user can remove arbitrary files4.9 Medium
- teradici pcoip client, pcoip graphics agent, pcoip standard agent +2 moreIn Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path...7.8 High
- yokogawa exaopc, exaplog, exaquantum +6 more +8 moreAn unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00...7.8 High
- sonicwall sonicos, sonicos sslvpn nacagent +1 moreInstallation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value...7.8 High
- reliablecontrols rc-licensemanagerReliable Controls LicenseManager versions 3.4 and prior may allow an authenticated user to insert...7.8 High
- qnap netbak replicatorAn unquoted service path vulnerability is reported to affect the service ?QVssService? in QNAP...7.8 High
- maxthon browserUnquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows.7.2 High
- forcepoint vpn client for windows, vpn client +1 moreForcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path...6.7 Medium
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus \+ security 2019 +3 more +5 moreA local privilege escalation vulnerability exists in Trend Micro Security 2019 (v15.0) in which,...7.8 High
- exacq technologies, inc. exacqvision serverexacqVision Server Unquoted Service Path6.7 Medium
- check point endpoint security client for windows, vpn blade, checkpoint capsule docs standalone client, endpoint security clients +4 more +6 moreCheck Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83,...9.8 Critical
- intel scs discovery utilityUnquoted service path in the installer for the Intel(R) SCS Discovery Utility version 12.0.0.129...6.7 Medium
- winmagic securedoc disk encryptionWINMAGIC SecureDoc Disk Encryption software before 8.3 has an Unquoted Service Path vulnerability...7.8 High
- lenovo dynamic power reduction, unspecified +1 moreAn unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility...6.7 Medium
- lenovo synaptics thinkpad ultranav driver, thiankpad l430 firmware, thiankpad l530 firmware +57 more +59 moreIn some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of...7.8 High
- isc bind, bind 9 +1 moreWindows service and uninstall paths are not quoted when BIND is installed7.2 High
- panasonic corporation some pre-installed applications on panasonic pc, panasonic system interface device 0021, system interface device 0040 +2 moreAn unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on...7.8 High
- philips intellispace cardiovascular (iscv) products, intellispace cardiovascular, xcelera +2 moreIn Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera...6.7 Medium
- dell wyse management suiteDell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities....7.8 High
- intel quartus prime programmer and toolsUnquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow...7.8 High
- intel quartus ii programmer and toolsUnquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a...7.8 High
- intel quartus iiUnquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local attacker to...7.8 High
- intel quartus primeUnquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to...7.8 High
- intel processor diagnostic toolUnquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a...7.8 High
- opcfoundation local discovery serverThe OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service...7.8 High
- rockwellautomation factorytalk linx gateway, rslinx classic, ics-cert rockwell automation rslinx classic and factorytalk linx gateway +2 moreAn unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk...7.8 High
- adobe creative cloudAdobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable...7.8 High
- rockwell automation factorytalk activationWithout quotation marks, any whitespace in the file path for Rockwell Automation FactoryTalk...7.8 High
- sap crystal reports server, sap se crystal reports server, oem edition +1 moreUnquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server,...5.3 Medium
- philips intellispace portalPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or...7.8 High
- pandasecurity panda global protectionUnquoted Windows search path vulnerability in the panda_url_filtering service in Panda Global...7.8 High
- 10-strike network monitorUnquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike...7.8 High
- nsclient nsclient\+\+Unquoted Windows search path vulnerability in NSClient++ before 0.4.1.73 allows non-privileged...7.8 High
- freesshdFreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch...7.8 High
- ics-cert moxa mxview, moxa mxview +1 moreAn issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation...7.8 High
- progea moviconAn Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and...6.7 Medium
- neroNero 7.10.1.0 has an unquoted BINARY_PATH_NAME for NBService, exploitable via a Trojan horse Nero...7.8 High
- Show moreLoading…