CWE-428: Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- intel server firmware update utilityUnquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt)...6.7 Medium
- abb ao-opcUnquoted Service Path in ABB AO-OPC7.2 High
- asus armoury crate, setupasusservices +1 moreASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path...7.8 High
- pointware easyinventoryPointware EasyInventory Easy2W.exe unquoted search path7.8 High
- openbsd openssh, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreThe PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search...9.8 Critical
- trellix moveAn unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier...4.4 Medium
- bitdefender antivirus plus, internet security, total security +2 moreImproper Quoting Path Issue in Bitdefender Total Security6.7 Medium
- wondershare filmoraWondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path...7.8 High
- digitalpersona fpsensorDigitalPersona FPSensor DpHost.exe unquoted search path5.3 Medium
- intel wake up latency tracerUncontrolled search path in the WULT software maintained by Intel(R) before version 1.0.0 (commit...8.8 High
- intel dsp builderUncontrolled search path for the DSP Builder software installer before version 22.4 for Intel(R)...6.7 Medium
- intel quartus primeUncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22...6.7 Medium
- intel iflashvUncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version...6.7 Medium
- intel nuc pro software suiteUncontrolled search path for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow...6.7 Medium
- intel pathfinder for risc-vUncontrolled search path in some Intel(R) Pathfinder for RISC-V software may allow an...6.7 Medium
- ks-soft advanced host monitorks-soft Advanced Host Monitor rma_active.exe unquoted search path5.3 Medium
- 42gears surelock, surelock windows +1 moreBypassing hardening via Unquoted Service path vulnerability7.8 High
- elecom wab-matWAB-MAT Ver.5.0.0.8 and earlier starts another program with an unquoted file path. Since a...7.3 High
- vxsearch vx searchVX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which...7.8 High
- dell multifunction printer e525w driver and software suiteDell Multifunction Printer E525w Driver and Software Suite, versions prior to 1.047.2022, A05,...7.8 High
- phjounin tftpd64-se, tftpd64 project tftpd64 +1 morephjounin TFTPD64-SE tftpd64_svc.exe unquoted search path7.0 High
- dentsplysirona sidexisDentsply Sirona Sidexis <= 4.3 is vulnerable to Unquoted Service Path.7.8 High
- hima hopcs, x-opc a+e, x-opc da +2 more +4 moreHima: Unquoted path vulnerabilities in HIMA PC based Software7.8 High
- avira security, nortonlifelock (gendigital) avira security for windows +1 moreAvira Security for Windows - Denial of Service5.3 Medium
- lenovo aio300-23isu firmware, aio310-20iap firmware, aio510-22ish firmware +133 more +135 moreRealtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and...7.8 High
- baidu baidunetdiskUntrusted search path vulnerability in Baidunetdisk Version 7.4.3 and earlier allows an attacker...6.7 Medium
- corel roxio creator ljbRoxio Creator LJB starts another program with an unquoted file path. Since a registered Windows...6.7 Medium
- iobit iotransferIOBit IOTransfer V4 is vulnerable to Unquoted Service Path.7.8 High
- intel nuc kit wireless adapter driver installerUnquoted search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers...6.7 Medium
- feishuBeijing Feishu Technology Co., Ltd Feishu v3.40.3 was discovered to contain an untrusted search...7.8 High
- dell geodriveDell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability. A low...7.8 High
- panini everest enginePanini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the ...7.8 High
- sap business oneIn SAP Business One application when a service is created, the executable path contains spaces...7.8 High
- okta active directory agentOkta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update...3.9 Low
- justsystems corporation just online update for j-license', justsystems atok medical 2, atok medical 3 +58 more +60 moreAn unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License'...9.8 Critical
- asus aura ready game software development kitThere is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4....7.8 High
- filezilla client, filezilla-project filezilla client +1 moreFileZilla Client Installer uninstall.exe unquoted search path6.3 Medium
- sap businessobjects bw publisher service, sap se businessobjects (bw publisher service) +1 moreSAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an...7.8 High
- cloudflare warpUnquoted Service Path in Cloudflare WARP for Windows6.5 Medium
- sap powerdesigner proxy, sap se powerdesigner proxy 16.7 +1 moreSAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local...7.8 High
- minitool partition wizardMiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to...7.8 High
- battleyeBattlEye v0.9 contains an unquoted service path which allows attackers to escalate privileges to...7.8 High
- sony playmemories homeSony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate...6.7 Medium
- hma hidemyassHMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate...7.8 High
- snow license manager, snowsoftware snow license manager +1 moreWindows Unquoted/Trusted Service Paths7.3 High
- controlupIn ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An...7.2 High
- ivanti dsm remoteIvanti DSM Remote <= 6.3.1.1862 is vulnerable to an unquoted service path allowing local users to...7.8 High
- fujitsu plugfree networkIn Fujitsu PlugFree Network <= 7.3.0.3, an Unquoted service path in PFNService.exe software...7.8 High
- gimmal sherpa connector serviceThere is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2...7.8 High
- ext2 file system driver project file system driverAn Unquoted Service Path vulnerability exists in Ext2Fsd v0.68 via a specially crafted file in...7.8 High
- Show moreLoading…