CWE-428: Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- sandboxie plus, sandboxie-plus sandboxie plus +1 moreSandboxie-Plus 5.50.2 - 'Service SbieSvc' Unquoted Service Path8.5 High
- vive runtime serviceVIVE Runtime Service - 'ViveAgentService' Unquoted Service Path8.5 High
- proton protonvpnProtonVPN 1.26.0 - Unquoted Service Path8.5 High
- primera ptpublisherPTPublisher 2.3.4 - Unquoted Service Path8.5 High
- easeus data recoveryEaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path8.5 High
- itec tcqTCQ - 'ITeCProteccioAppServer.exe' Unquoted Service Path8.5 High
- wondershare ubackitWondershare UBackit 2.0.5 - 'wsbackup' Unquoted Service Path8.5 High
- wondershare mobiletransWondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service Path8.5 High
- wondershare dr.foneWondershare Dr.Fone 11.4.9 - 'DFWSIDService' Unquoted Service Path8.5 High
- wondershare dr.foneWondershare Dr.Fone 12.0.18 - 'Wondershare InstallAssist' Unquoted Service Path8.5 High
- splashtopSplashtop 8.71.12001.0 - Unquoted Service Path8.5 High
- devolo ag dlan cockpitdevolo dLAN Cockpit 4.3.1 Unquoted Service Path Privilege Escalation8.5 High
- selea carplateserver (cps)Selea CarPlateServer 4.0.1.6 Local Privilege Escalation via Unquoted Service Path8.5 High
- tosi tosibox key, tosibox oy key service +1 moreTosibox Key Service 3.3.0 Local Privilege Escalation via Unquoted Service Path8.5 High
- eaton ups companion software, ups companion +1 moreImproper quotation in search paths in the Eaton UPS Companion software installer could lead to...6.7 Medium
- epic games easy anti-cheatEpic Games Easy Anti-Cheat 4.0 Local Privilege Escalation via Unquoted Service Path8.5 High
- sound4 ltd. server service, sound4 big voice firmware, first firmware +13 more +15 moreSOUND4 Server Service 4.1.102 Local Privilege Escalation via Unquoted Service Path8.6 High
- cobiansoft cobian backup gravityCobian Backup Gravity 11.2.0.582 Unquoted Service Path Privilege Escalation8.5 High
- netbt consulting services inc. e-faturaUnquoted Service Path in NetBT Consultancy's e-Fatura7.3 High
- actfaxActFax 10.10 Unquoted Path Services Privilege Escalation Vulnerability8.5 High
- oscinventory ocs inventory ngOCS Inventory NG 2.3.0.0 Unquoted Service Path Privilege Escalation8.5 High
- arcsoft photostudioArcsoft PhotoStudio 6.0.0.172 Unquoted Service Path Privilege Escalation8.5 High
- binisoft usb flash drives controlUSB Flash Drives Control 4.1.0.0 Unquoted Service Path Privilege Escalation8.5 High
- anydeskAnyDesk 9.0.1 Unquoted Service Path Privilege Escalation Vulnerability6.9 Medium
- genexus protection serverGenexus Protection Server 9.7.2.10 Unquoted Service Path Privilege Escalation8.7 High
- elecom co.,ltd. clone for windowsClone for Windows provided by ELECOM CO.,LTD. registers a Windows service with an unquoted file...8.4 High
- gs yuasa international ltd. fullback manager pro (for windows), fullback manager pro for network (for windows) +1 moreFULLBACK Manager Pro provided by GS Yuasa International Ltd. registers two Windows services with...8.4 High
- flexsense diskboss, diskboss enterprise, diskboss pro +2 more +4 moreFlexsense DiskBoss Service Unquoted Service Path Vulnerability8.5 High
- veepn, veepn veevpn +1 moreVeeVPN 1.6.1 - Unquoted Service Path Remote Code Execution8.5 High
- megatec taiwan upsilon2000v6.0Unquoted Service Path in UPSilon2000V6.0(RupsMon and USBMate) running as SYSTEM7.1 High
- megatec taiwan clientmateUnquoted Service path in UPSilon2000V6.0 SYSTEM privilege service7.2 High
- muse group musehubMuse Group MuseHub Windows Service Muse.Updater.exe unquoted search path7.3 High
- No product listedUnquoted search path for some PRI Driver software before version 03.03.1002 within Ring 3: User...5.4 Medium
- axis communications ab optimizerAXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially...8.4 High
- sony corporation optical disc archive software (for windows)Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an...8.4 High
- roboticsware pte. ltd. ba-panel6, fa-panel6, fa-server6 +1 more +3 moreMultiple Roboticsware products provided by Roboticsware PTE. LTD. register Windows services with...8.4 High
- bizerba connect.brainInsecure service configuration – unquoted path8.8 High
- No product listedmemoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the...6.7 Medium
- No product listedAn unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to...7.8 High
- No product listedVeePN AVService avservice.exe unquoted search path7.3 High
- hasleo backup suiteHasleo Backup Suite HasleoImageMountService/HasleoBackupSuiteService unquoted search path7.3 High
- i-o data device, inc. narsus app, clone for windows +1 moreNarSuS App registers a Windows service with an unquoted file path. A user with the write...8.4 High
- buffalo inc. nas navigator2 (windows version only)NAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file...8.4 High
- qnap netbak replicatorNetBak Replicator8.5 High
- dell wireless 5932e, latitude 5350 firmware, latitude 5550 firmware +12 more +14 moreDell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3...7.8 High
- lizardbyte sunshineSunshineService Has Unquoted Service Path That Allows Local SYSTEM Code Execution6.7 Medium
- century corporation raid managerRAID Manager provided by Century Corporation registers a Windows service with an unquoted file...8.4 High
- omron social solutions co., ltd. poweract pro <master agent>, poweract pro <slave agent>, powerattendant basic edition +2 more +4 moreVulnerability caused by unquoted file paths of Windows services registered by the Uninterruptible Power Supply (UPS) management application6.7 Medium
- ratoc systems, inc. raid monitoring manager for windowsRATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc. registers a Windows...8.4 High
- hikvision hikcentral focsignThere is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could...5.3 Medium
- Show moreLoading…