CWE-428: Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- moxa utility for drp-a100 series, utility for drp-c100 series +1 moreUnquoted Search Path Vulnerability in the Utility for Industrial Computers (Windows)7.3 High
- western digital corporation digital kitfox for windowsWestern Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows...8.4 High
- seagate toolkitThe service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows...6.7 Medium
- asustor abp and aesWindows service registered with an unquoted ImagePath vulnerability in the system registry9.2 Critical
- amd cloud manageability serviceUnquoted search path within AMD Cloud Manageability Service can allow a local attacker to...7.3 High
- amd aim-t manageability serviceUnquoted search path within AIM-T Manageability Service can allow a local attacker to escalate...7.3 High
- lodop c-lodopMTSoftware C-Lodop CLodopPrintService unquoted search path7.3 High
- xerox xerox® desktop print experienceLocal Privilege Escalation on Xerox® Desktop Print Experience® v8.55.2 Medium
- opentext™ service managerPrivilege Escalation vulnerability has been discovered in OpenText™ Service Manager.7.3 High
- acronis cyber protect cloud agentLocal privilege escalation due to unquoted search path vulnerability. The following products are...6.6 Medium
- dell networkerDell NetWorker, version(s) prior to 19.11.0.3, all versions of 19.10 & prior versions contain(s)...7.8 High
- No product listedIn Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service...7.3 High
- python, python software foundation cpython +1 moreVirtual environment (venv) activation scripts don't quote paths5.3 Medium
- intelbras incontrol, incontrol web +1 moreIntelbras InControl incontrol-service-watchdog.exe unquoted search path8.5 High
- grafana agent, agent flow, agent flow windows +2 moreGrafana Agent Flow on Windows Unquoted service path7.3 High
- grafana alloyGrafana Alloy on Windows Unquoted service path7.3 High
- microsoft windows 11 version 24h2, windows 11 24h2 +1 moreWindows Setup and Deployment Elevation of Privilege Vulnerability7.8 High
- qnap qvr smart clientQVR Smart Client6.7 Medium
- hitachi device managerAn unquoted executable path exists in Hitachi Device Manager6.7 Medium
- plug&track thermoscan ipA “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation service. Such...6.5 Medium
- abb mint workbench i, mint workbench +1 moreMint Workbench I Unquoted Service Path Enumeration6.2 Medium
- intelbras incontrolIntelbras InControl incontrolWebcam Service unquoted search path8.5 High
- schneider electric easergy studioCWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could...7.8 High
- lizardbyte sunshine, sunshine for windows +1 moreA local privilege escalation vulnerability exists in LizardBytes' Sunshine for Windows7.8 High
- lizardbyte sunshineSunshine's unquoted executable path could lead to hijacked execution flow4.9 Medium
- rockwell automation factorytalk® remote access™Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables7.0 High
- sugarsyncUnquoted path or search item vulnerability in SugarSync7.8 High
- triangle microworks scada data gatewayTriangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability7.2 High
- acronis cyber protect 16, cyber protect cloud agent, true image +1 more +3 moreLocal privilege escalation due to unquoted search path vulnerability. The following products are...8.2 High
- logitech mevo webcam appMEVO WEBCAM APP Windows Unquoted Service Path Vulnerability4.4 Medium
- terratec dmx 6fire 24\/96 controlpanelAn unquoted service path vulnerability in Terratec DMX_6Fire USB v.1.23.0.02 allows a local...6.7 Medium
- hewlett packard enterprise hpe msa san storage vss provider and capi proxy softwareHPE MSA SAN Storage VSS Provider and CAPI Proxy Software, Elevation of Privilege7.3 High
- faronics deep freeze server standard, deep freeze +1 moreUnquoted item or search path vulnerability in Faronics Deep Freeze Server Standard7.8 High
- w&t com redirector legacy, com redirector pnp, opc-server +4 more +6 moreWiesemann & Theis: Multiple products prone to unquoted search path7.8 High
- 12dsynergy 12d synergy file replication server, 12d synergy server, file replication server +1 more +3 moreAn unquoted service path vulnerability in the 12d Synergy Server and File Replication Server...9.1 Critical
- intel thunderbolt dch driverUnquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before...6.7 Medium
- panterasoft hdd healthPanteraSoft HDD Health search path or unquoted item vulnerability7.8 High
- b&r industrial automation automation studio, net/pvi, br-automation automation net\/pvi +2 moreAutomation Studio and PVI Multiple unquoted service path vulnerabilities7.2 High
- eset endpoint antivirus, endpoint security, internet security +9 more +11 moreUnquoted path privilege vulnerability in ESET products for Windows3.3 Low
- subnet powersystem centerSubnet Solutions Inc. PowerSYSTEM Center Unquoted Search Path or Element7.8 High
- intel hdmi firmware, intel nuc kits nuc7i3dn nuc7i5dn nuc7i7dn hdmi firmware update tool software nuc kits nuc7i3dn nuc7i5dn nuc7i7dn hdmi firmware update tool software +1 moreUnquoted search path in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update...6.7 Medium
- intel server configuration utilityUnquoted search path in the installer for some Intel Server Configuration Utility software before...6.7 Medium
- intel arc a graphics, iris xe graphics +1 moreUnquoted search path or element in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows...6.7 Medium
- okta ldap agentThe LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could...6.7 Medium
- zscaler client connectorUntrusted Search Path While Executing REG DELETE by Uninstaller6.7 Medium
- hcl software appscan presenceHCL AppScan Presence deployed as Windows service might be vulnerable to an Unquoted Service Path vulnerability7.8 High
- fortectFortect - CWE-428: Unquoted Search Path or Element6.3 Medium
- topaz ofdTopaz OFD Protection Module Warsaw core.exe unquoted search path5.3 Medium
- nextbx qwalerter, quescom nextbx qwalerter +1 moreNextBX QWAlerter QWAlerter.exe unquoted search path7.8 High
- opswat metadefender kiosk, media validation agent +1 moreAn issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path...7.8 High
- Show moreLoading…