CWE-428: Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- smallsrv small http, small http server +1 moreMultiple vulnerabilities in Small HTTP server by Smallsrv8.5 High
- smallsrv small http, small http server +1 moreMultiple vulnerabilities in Small HTTP server by Smallsrv8.7 High
- sanyo denki co., ltd. sanups software, sanups software standalone +1 moreSANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file...8.4 High
- serviio proServiio PRO 1.8 Local Privilege Escalation via Unquoted Path8.5 High
- mobatek mobaxtermMobaXterm < 26.1 Notepad++ Unquoted Service Path8.5 High
- dell ups multi-ups management console, dell inc. ups multi-ups management console (mumc) +1 moreUPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default...8.5 High
- dell ups multi-ups management console, dell inc. ups multi-ups management console (mumc) +1 moreUPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path...8.4 High
- openclawOpenClaw < 2026.2.24 - Binary Hijacking via Static Default Trusted Directories in safeBins7.0 High
- canon inc. ij scan utilityAn unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions...8.4 High
- No product listedTotal VPN win-service.exe unquoted search path7.3 High
- realtek rtk iis codec serviceRTK IIS Codec Service 6.4.10041.133 - 'RtkI2SCodec' Unquote Service Path8.5 High
- actfax activefax serverActiveFax Server 6.92 Build 0316 - 'ActiveFaxServiceNT' Unquoted Service Path8.5 High
- zilab software inc remote console serverZilab Remote Console Server 3.2.9 - 'Zilab Remote Console Server' Unquoted Service Path8.5 High
- litemanager team mikogoMikogo 5.2.2.150317 - 'Mikogo-Service' Unquoted Service Path8.5 High
- softalk workgroupmailWorkgroupMail 7.5.1 - 'WorkgroupMail' Unquoted Service Path8.5 High
- blackmoon ftp serverBlackMoon FTP Server 3.1.2.1731 - 'BMFTP-RELEASE' Unquoted Serive Path8.5 High
- murata machinery, ltd. see "references" sectionProducts provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd.,...8.4 High
- bluestacks blue stacks app playerBlue Stacks App Player 2.4.44.62.57 - "BstHdLogRotatorSvc" Unquote Service Path8.5 High
- inforprograma jumpstartJumpStart 0.6.0.0 - 'jswpbapi' Unquoted Service Path8.5 High
- issivs intelligent security system securos enterpriseIntelligent Security System SecurOS Enterprise 10.2 - 'SecurosCtrlService' Unquoted Service Path8.5 High
- acer launch managerAcer Launch Manager 6.1.7600.16385 - 'DsiWMIService' Unquoted Service Path8.5 High
- alps hid monitor serviceAlps HID Monitor Service 8.1.0.10 - 'ApHidMonitorService' Unquote Service Path8.5 High
- wondershare application framework serviceWondershare Application Framework Service 2.4.3.231 - 'WsAppService' Unquote Service Path8.5 High
- gcafe gcafé_GCafé 3.0 - 'gbClienService' Unquoted Service Path8.5 High
- shrew soft vpn clientShrew Soft VPN Client 2.2.2 - 'iked' Unquoted Service Path8.5 High
- wacom wtabletserviceWacom WTabletService 6.6.7-3 - 'WTabletServicePro' Unquoted Service Path8.5 High
- webcompanion adaware web companion versionAdaware Web Companion version 4.8.2078.3950 - 'WCAssistantService' Unquoted Service Path8.5 High
- alps device controllerAlps Pointing-device Controller 8.1202.1711.04 - 'ApHidMonitorService' Unquoted Service Path8.5 High
- ncp-e ncp secure entry clientNCP_Secure_Entry_Client 9.2 - Unquoted Service Paths8.5 High
- rockwellautomation studioStudio 5000 Logix Designer 30.01.00 - 'FactoryTalk Activation Service' Unquoted Service Path8.5 High
- filehorse bartvpnBartVPN 1.2.2 - 'BartVPNService' Unquoted Service Path8.5 High
- photodex proshow producerProShow Producer 9.0.3797 - Unquoted Service Path8.5 High
- easy-hide-ip ipEasy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path8.5 High
- tenaxsoft texassoft cyberplanetTexasSoft CyberPlanet 6.4.131 - 'CCSrvProxy' Unquoted Service Path8.5 High
- netgate data backupNETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service Path8.5 High
- netgate amiti antivirusAmiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability8.5 High
- wftpserver wing ftp server, wing ftp server ftp server +1 moreWing FTP Server 6.0.7 - Unquoted Service Path8.5 High
- lavasoft web companionAdaware Web Companion 4.9.2159 - 'WCAssistantService' Unquoted Service Path8.5 High
- vpnunlimitedapp vpn unlimitedVPN unlimited 6.1 - Unquoted Service Path8.5 High
- syncbreeze sync breeze enterprise, flexense syncbreeze +1 moreSync Breeze Enterprise 12.4.18 - Unquoted Service Path8.5 High
- disksavvy disk savvy enterpriseDisk Savvy Enterprise 12.3.18 - 'disksvs.exe' Unquoted Service Path8.5 High
- disksorter disk sorter enterpriseDisk Sorter Enterprise 12.4.16 - Unquoted Service Path8.5 High
- anydeskAnyDesk 5.4.0 - Unquoted Service Path8.5 High
- epson easymp network projectionEPSON EasyMP Network Projection 2.81 - 'EMP_NSWLSV' Unquoted Service Path8.5 High
- weird-solutions tftp turboTFTP Turbo 4.6.1273 - 'TFTP Turbo 4' Unquoted Service Path8.5 High
- weird solutions dhcp turboDHCP Turbo 4.6.1298- 'DHCP Turbo 4' Unquoted Service Path8.5 High
- weird-solutions bootp turboBOOTP Turbo 2.0.1214 - 'BOOTP Turbo' Unquoted Service Path8.5 High
- enigmasoftware spyhunterSpyHunter 4 - 'SpyHunter 4 Service' Unquoted Service Path8.5 High
- iskysoft application framework serviceIskysoft Application Framework Service 2.4.3.241 - 'IsAppService' Unquoted Service Path8.5 High
- deepinstinct deep instinct windows agentDeep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service Path8.5 High
- Show moreLoading…