CWE-428: Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- systemexplorer system explorerAn Unquoted Service Path vulnerability exists in System Explorer 7.0.0 via via a specially...7.8 High
- vembu bdr suiteAn Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in...7.8 High
- bvpnAn Unquoted Service Path vulnerability exists in bVPN 2.5.1 via a specially crafted file in the...7.8 High
- rumble mail server project mail serverAn Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a...7.8 High
- freelanAn Unquoted Service Path vulnerability exists in FreeLAN 2.2 via a specially crafted file in the...7.8 High
- anytxt searcherAn Unquoted Service Path vulnerability exists in AnyTXT Searcher 1.2.394 via a specially crafted...7.8 High
- netsarang xshellXshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to...6.5 Medium
- netsarang xlpdXlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute...6.5 Medium
- netsarang xmanagerXmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to...6.5 Medium
- netsarang xftpXftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute...6.5 Medium
- freesshd freeftpdFreeFtpd version 1.0.13 and below contains an unquoted service path vulnerability which allows...7.8 High
- bitcometBitComet Service for Windows before version 1.8.6 contains an unquoted service path vulnerability...7.8 High
- rapid7 insight agentRapid7 Insight Agent Privilege Escalation4.0 Medium
- rdpsoft remote desktop commander suite agentRemote Desktop Commander Suite Agent before v4.8 contains an unquoted service path which allows...7.8 High
- wordline hidccemonitorsvcWordline HIDCCEMonitorSVC before v5.2.4.3 contains an unquoted service path which allows...6.4 Medium
- trigonesoft remote system monitorTRIGONE Remote System Monitor 3.61 is vulnerable to an unquoted path service allowing local users...7.8 High
- mitsubishi electric c controller interface module utility, cc-link ie control network data collector, cc-link ie field network data collector +52 more +54 moreMitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element8.3 High
- hpe agentless management, proliant agentless management +1 moreA local unquoted search path security vulnerability has been identified in HPE Agentless...6.7 Medium
- siemens sicam pq analyzer, sicam pq analyzer firmware +1 moreA vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18). A service is...8.1 High
- sophos exploit prevention, intercept x advanced, intercept x advanced for server +2 more +4 moreA local administrator could prevent the HMPA service from starting despite tamper protection...4.4 Medium
- gallagher command centreUnquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged...5.2 Medium
- intel nuc m15 laptop kit keyboard led service driver packUnquoted search path in the installer for the Intel(R) NUC M15 Laptop Kit Keyboard LED Service...7.8 High
- ni service locatorThere is an Unquoted Service Path in NI Service Locator (nisvcloc.exe) in versions prior to 18.0...7.8 High
- solarwinds kiwi syslog serverUnquoted Path (SMB Login) Vulnerability6.7 Medium
- akamai enterprise application accessIn Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x...7.8 High
- zscaler client connectorThe Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which...7.8 High
- unisys stealthUnisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0 has an unquoted Windows search path...6.7 Medium
- lexmark printer software g2, printer software g3, printer software g4 +2 moreThe Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of...7.8 High
- intel uniteUnquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow...7.3 High
- windscribeIn Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates...7.8 High
- aviatrix vpn clientAviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local...7.8 High
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.35.2. MediaWiki...6.5 Medium
- sap setupAn unquoted service path in SAPSetup, version - 9.0, could lead to privilege escalation during...7.5 High
- mcafee endpoint product removal toolUnquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from…6.7 Medium
- cloudflare warp for windows, warp +1 morePrivilege escalation through unquoted service binary path on Cloudflare WARP for Windows4.5 Medium
- traccarUnquoted Windows binary path in Traccar5.5 Medium
- sonicwall netextenderSonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this...5.3 Medium
- 1e clientThe Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing ...8.8 High
- 1e clientThe Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing ...8.8 High
- schneider-electric enterprise server installerA CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation...7.0 High
- mcafee endpoint security, mcafee, llc mcafee endpoint security (ens) +1 moreUnquoted service executable path in McAfee Endpoint Security (ENS)7.8 High
- wondershare dr.foneDr.Fone 3.0.0 allows local users to gain privileges via a Trojan horse DriverInstall.exe because ...7.8 High
- veyonUnquoted service path vulnerability on Veyon8.0 High
- mcafee file and removable media protection, file & removable media protection (frp) +1 moreFile and Removable Media Protection update fixes one vulnerability6.6 Medium
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2)....7.8 High
- rapid7 nexposeUnquoted Path in Rapid7 Nexpose Installer6.8 Medium
- teamviewerTeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A...8.8 High
- lenovo drivers managementAn unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version...7.3 High
- siemens opcenter execution discrete, opcenter execution foundation, opcenter execution process +16 more +18 moreA vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2),...6.7 Medium
- rakuten viberViber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious...7.5 High
- Show moreLoading…