# CWE-428.

Every Advisory and CVE whose sources give the weakness CWE-428, newest first.

## Records, newest first (an older page)

- [SAntivirus IC 10.0.21.61 - 'SAntivirusIC' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36980.md)
  `CVE-2020-36980` · CVE record: Segurazo SAntivirus IC · CVSS 8.5 High · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-428
- [Atheros Coex Service Application 8.0.0.255 -'ZAtheros Bt&Wlan Coex Agent' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36979.md)
  `CVE-2020-36979` · CVE record: Atheros Coex Service Application · CVSS 8.5 High · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-428
- [Wondershare Driver Install Service help 10.7.1.321 - 'ElevationService' Unquote Service Path](https://agentprime.io/advisories/CVE-2020-36977.md)
  `CVE-2020-36977` · CVE record: Wondershare Wondershare Driver Install Service help · CVSS 8.5 High · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-428
- [Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36976.md)
  `CVE-2020-36976` · CVE record: Acer Global Registration Service · CVSS 8.5 High · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-428
- [EPSON Status Monitor 3 'EPSON_PM_RPCV4_06' - Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36975.md)
  `CVE-2020-36975` · CVE record: SEIKO EPSON Corp Status Monitor 3 · CVSS 8.5 High · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-428
- [Realtek Andrea RT Filters 1.0.64.7 - 'AERTSr64.EXE' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36974.md)
  `CVE-2020-36974` · CVE record: Realtek Realtek Andrea RT Filters · CVSS 8.5 High · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-428
- [IDT PC Audio 1.0.6499.0 - 'STacSV' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36959.md)
  `CVE-2020-36959` · CVE record: IDT IDT PC Audio · CVSS 8.5 High · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-428
- [Kite 1.2020.1119.0 - 'KiteService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36958.md)
  `CVE-2020-36958` · CVE record: Kite Kite · CVSS 8.5 High · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-428
- [PDF Complete 3.5.310.2002 - 'pdfsvc.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36957.md)
  `CVE-2020-36957` · CVE record: Pdf-Complete PDF Complete · CVSS 8.5 High · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-428
- [MiniTool ShadowMaker 3.2 - 'MTAgentService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36953.md)
  `CVE-2020-36953` · CVE record: Minitool MiniTool ShadowMaker · CVSS 8.5 High · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-428
- [IObit Uninstaller 10 Pro - Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36952.md)
  `CVE-2020-36952` · CVE record: Iobit IObit Uninstaller · CVSS 8.5 High · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-428
- [MEMU PLAY 3.7.0 - 'MEmusvc' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36937.md)
  `CVE-2020-36937` · CVE record: Microvirt MEMU PLAY · CVSS 8.5 High · Not analysed yet · Published 25 Jan 2026 · Tags: CWE-428
- [Magic Mouse 2 utilities 2.20 - 'magicmouse2service' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36936.md)
  `CVE-2020-36936` · CVE record: Magic Utilities Magic Mouse 2 utilities · CVSS 8.5 High · Not analysed yet · Published 25 Jan 2026 · Tags: CWE-428
- [KMSpico 17.1.0.0 - 'Service KMSELDI' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36935.md)
  `CVE-2020-36935` · CVE record: KMSpico Service KMSELDI · CVSS 8.5 High · Not analysed yet · Published 25 Jan 2026 · Tags: CWE-428
- [Deep Instinct Windows Agent 1.2.24.0 - 'DeepNetworkService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36934.md)
  `CVE-2020-36934` · CVE record: Deepinstinct Deep Instinct Windows Agent · CVSS 8.5 High · Not analysed yet · Published 25 Jan 2026 · Tags: CWE-428
- [IPTInstaller 4.0.9 - 'PassThru Service' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36933.md)
  `CVE-2020-36933` · CVE record: HTC IPTInstaller · CVSS 8.5 High · Not analysed yet · Published 25 Jan 2026 · Tags: CWE-428
- [Epson USB Display 1.6.0.0 Unquoted Service Path Vulnerability](https://agentprime.io/advisories/CVE-2021-47898.md)
  `CVE-2021-47898` · CVE record: Epson America, Inc. Epson USB Display · CVSS 8.5 High · Not analysed yet · Published 23 Jan 2026 · Tags: CWE-428
- [PDFCOMPLETE Corporate Edition 4.1.45 - 'pdfcDispatcher' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47896.md)
  `CVE-2021-47896` · CVE record: PDF Complete, Inc. PDFCOMPLETE Corporate Edition · CVSS 8.5 High · Not analysed yet · Published 23 Jan 2026 · Tags: CWE-428
- [LogonExpert 8.1 - 'LogonExpertSvc' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47890.md)
  `CVE-2021-47890` · CVE record: Softros Systems LogonExpert · CVSS 8.5 High · Not analysed yet · Published 23 Jan 2026 · Tags: CWE-428
- [Softros LAN Messenger 9.6.4 - 'SoftrosSpellChecker' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47889.md)
  `CVE-2021-47889` · CVE record: Softros Systems LAN Messenger · CVSS 8.5 High · Not analysed yet · Published 23 Jan 2026 · Tags: CWE-428
- [Print Job Accounting 4.4.10 - 'OkiJaSvc' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47887.md)
  `CVE-2021-47887` · CVE record: OKI Print Job Accounting · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [Pingzapper 2.3.1 - 'PingzapperSvc' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47886.md)
  `CVE-2021-47886` · CVE record: Fyrolabs LLC. Pingzapper · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [Configuration Tool 1.6.53 - 'OpLclSrv' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47884.md)
  `CVE-2021-47884` · CVE record: OKI Configuration Tool · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [Sandboxie Plus v0.7.2 - 'SbieSvc' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47883.md)
  `CVE-2021-47883` · CVE record: Sandboxie-Plus Sandboxie Plus · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [FreeLAN 2.2 - 'FreeLAN Service' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47882.md)
  `CVE-2021-47882` · CVE record: FreeLAN FreeLAN · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [Realtek Wireless LAN Utility 700.1631 - 'Realtek11nSU' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47880.md)
  `CVE-2021-47880` · CVE record: Realtek Semiconductor Corp. Realtek Wireless LAN Utility · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [eBeam Interactive Suite 3.6 - 'eBeam Stylus Driver' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47879.md)
  `CVE-2021-47879` · CVE record: Luidia eBeam Interactive Suite · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [eBeam Education Suite 2.5.0.9 - 'eBeam Device Service' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47878.md)
  `CVE-2021-47878` · CVE record: Luidia eBeam Education Suite · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [VFS for Git 1.0.21014.1 - 'GVFS.Service' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47874.md)
  `CVE-2021-47874` · CVE record: Vfsforgit VFS for Git · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47869.md)
  `CVE-2021-47869` · CVE record: Brother Industries, Ltd. BRAdmin Professional · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [WIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47868.md)
  `CVE-2021-47868` · CVE record: Honeywell WIN-PACK PRO · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [WIN-PACK PRO 4.8 - 'ScheduleService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47867.md)
  `CVE-2021-47867` · CVE record: Security Winpakpro · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [WIN-PACK PRO 4.8 - 'GuardTourService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47866.md)
  `CVE-2021-47866` · CVE record: Honeywell WIN-PACK PRO · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [OSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47864.md)
  `CVE-2021-47864` · CVE record: OSAS OSAS Traverse Extension · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [MacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47863.md)
  `CVE-2021-47863` · CVE record: MacPaw Way Ltd. Encrypto · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [Hi-Rez Studios 5.1.6.3 - 'HiPatchService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47862.md)
  `CVE-2021-47862` · CVE record: HI-REZ STUDIOS HiPatchService · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [Event Log Explorer 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47861.md)
  `CVE-2021-47861` · CVE record: FSPro Labs Event Log Explorer · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47859.md)
  `CVE-2021-47859` · CVE record: HID Global ActivIdentity · CVSS 8.5 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-428
- [Disk Sorter Server 13.6.12 - 'Disk Sorter Server' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47847.md)
  `CVE-2021-47847` · CVE record: Disksorter Disk Sorter Server · CVSS 8.5 High · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-428
- [Spy Emergency 25.0.650 - Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47845.md)
  `CVE-2021-47845` · CVE record: Spy-Emergency Spy Emergency · CVSS 8.5 High · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-428
- [WifiHotSpot 1.0.0.0 - 'WifiHotSpotService.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47833.md)
  `CVE-2021-47833` · CVE record: Gearboxcomputers WifiHotSpot · CVSS 8.5 High · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-428
- [DHCP Broadband 4.1.0.1503 - 'dhcpt.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47829.md)
  `CVE-2021-47829` · CVE record: Weird-Solutions DHCP Broadband · CVSS 8.5 High · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-428
- [BOOTP Turbo 2.0.0.1253 - 'bootpt.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47828.md)
  `CVE-2021-47828` · CVE record: Weird-Solutions BOOTP Turbo · CVSS 8.5 High · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-428
- [Acer Backup Manager Module 3.0.0.99 - 'IScheduleSvc.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47826.md)
  `CVE-2021-47826` · CVE record: Acer Acer Backup Manager Module · CVSS 8.5 High · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-428
- [Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47825.md)
  `CVE-2021-47825` · CVE record: Acer Acer Updater Service · CVSS 8.5 High · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-428
- [ePowerSvc 6.0.3008.0 - 'ePowerSvc.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47823.md)
  `CVE-2021-47823` · CVE record: Acer ePowerSvc · CVSS 8.5 High · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-428
- [DiskBoss Service 12.2.18 - 'diskbsa.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47822.md)
  `CVE-2021-47822` · CVE record: Diskboss DiskBoss Service · CVSS 8.5 High · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-428
- [WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47810.md)
  `CVE-2021-47810` · CVE record: Wibu WibuKey Runtime · CVSS 8.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-428
- [Disk Sorter Enterprise 13.6.12 - 'Disk Sorter Enterprise' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47809.md)
  `CVE-2021-47809` · CVE record: Disksorter Disk Sorter Enterprise · CVSS 8.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-428
- [Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47807.md)
  `CVE-2021-47807` · CVE record: Syncbreeze Sync Breeze · CVSS 8.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-428
- [Dup Scout 13.5.28 - 'Multiple' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47806.md)
  `CVE-2021-47806` · CVE record: Dupscout Dup Scout · CVSS 8.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-428
- [Disk Savvy 13.6.14 - 'Multiple' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47805.md)
  `CVE-2021-47805` · CVE record: Disksavvy Disk Savvy · CVSS 8.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-428
- [Wise Care 365 5.6.7.568 - 'WiseBootAssistant' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47804.md)
  `CVE-2021-47804` · CVE record: Wisecleaner Wise Care · CVSS 8.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-428
- [iFunbox 4.2 - 'Apple Mobile Device Service' Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47803.md)
  `CVE-2021-47803` · CVE record: I-Funbox iFunbox · CVSS 8.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-428
- [Remote Mouse 4.002 - Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47792.md)
  `CVE-2021-47792` · CVE record: Remotemouse Remote Mouse · CVSS 8.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-428
- [Active WebCam 11.5 - Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47790.md)
  `CVE-2021-47790` · CVE record: Pysoft Active WebCam · CVSS 8.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-428
- [TotalAV 5.15.69 - Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47787.md)
  `CVE-2021-47787` · CVE record: Totalav TotalAV · CVSS 8.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-428
- [Macro Expert 4.7 - Unquoted Service Path](https://agentprime.io/advisories/CVE-2021-47780.md)
  `CVE-2021-47780` · CVE record: Macro-Expert Macro Expert · CVSS 8.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-428
- [SysGauge 7.9.18 - ' SysGauge Server' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36930.md)
  `CVE-2020-36930` · CVE record: Sysgauge SysGauge · CVSS 8.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-428
- [Brother BRPrint Auditor 3.0.7 - 'Multiple' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36929.md)
  `CVE-2020-36929` · CVE record: Support Brother BRPrint Auditor · CVSS 8.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-428

Newest: <https://agentprime.io/advisories/tag/cwe-428.md>
Older: <https://agentprime.io/advisories/tag/cwe-428.md?cursor=WyIyMDI2LTAxLTE1VDIzOjI1OjM0Ljg4MTAwMFoiLCJDVkUtMjAyMC0zNjkyOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-428&cursor=WyIyMDI2LTAxLTI3VDE4OjUxOjA1LjI5MTAwMFoiLCJDVkUtMjAyMC0zNjk4MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-428/?cursor=WyIyMDI2LTAxLTI3VDE4OjUxOjA1LjI5MTAwMFoiLCJDVkUtMjAyMC0zNjk4MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.