# CWE-428.

Every Advisory and CVE whose sources give the weakness CWE-428, newest first.

## Records, newest first (an older page)

- [Zilab Remote Console Server 3.2.9 - 'Zilab Remote Console Server' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25309.md)
  `CVE-2019-25309` · CVE record: Zilab Software Inc Zilab Remote Console Server · CVSS 8.5 High · Not analysed yet · Published 11 Feb 2026 · Tags: CWE-428
- [Mikogo 5.2.2.150317 - 'Mikogo-Service' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25308.md)
  `CVE-2019-25308` · CVE record: LiteManager Team Mikogo · CVSS 8.5 High · Not analysed yet · Published 11 Feb 2026 · Tags: CWE-428
- [WorkgroupMail 7.5.1 - 'WorkgroupMail' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25307.md)
  `CVE-2019-25307` · CVE record: Softalk WorkgroupMail · CVSS 8.5 High · Not analysed yet · Published 11 Feb 2026 · Tags: CWE-428
- [BlackMoon FTP Server 3.1.2.1731 - 'BMFTP-RELEASE' Unquoted Serive Path](https://agentprime.io/advisories/CVE-2019-25306.md)
  `CVE-2019-25306` · CVE record: Blackmoon BlackMoon FTP Server · CVSS 8.5 High · Not analysed yet · Published 11 Feb 2026 · Tags: CWE-428
- [Unquoted search path in Oki Electric Industry Co., Ltd. See "References" section and others](https://agentprime.io/advisories/CVE-2026-24466.md)
  `CVE-2026-24466` · CVE record: Oki Electric Industry Co., Ltd. See "References" section and 2 more · CVSS 8.4 High · Not analysed yet · Published 9 Feb 2026 · Tags: CWE-428
- [Blue Stacks App Player 2.4.44.62.57 - "BstHdLogRotatorSvc" Unquote Service Path](https://agentprime.io/advisories/CVE-2019-25293.md)
  `CVE-2019-25293` · CVE record: bluestacks Blue Stacks App Player · CVSS 8.5 High · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-428
- [JumpStart 0.6.0.0 - 'jswpbapi' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25305.md)
  `CVE-2019-25305` · CVE record: Inforprograma JumpStart · CVSS 8.5 High · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-428
- [Intelligent Security System SecurOS Enterprise 10.2 - 'SecurosCtrlService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25304.md)
  `CVE-2019-25304` · CVE record: Issivs Intelligent Security System SecurOS Enterprise · CVSS 8.5 High · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-428
- [Acer Launch Manager 6.1.7600.16385 - 'DsiWMIService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25302.md)
  `CVE-2019-25302` · CVE record: Acer Launch Manager · CVSS 8.5 High · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-428
- [Alps HID Monitor Service 8.1.0.10 - 'ApHidMonitorService' Unquote Service Path](https://agentprime.io/advisories/CVE-2019-25292.md)
  `CVE-2019-25292` · CVE record: Alps Alps HID Monitor Service · CVSS 8.5 High · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-428
- [Wondershare Application Framework Service 2.4.3.231 - 'WsAppService' Unquote Service Path](https://agentprime.io/advisories/CVE-2019-25266.md)
  `CVE-2019-25266` · CVE record: Wondershare Wondershare Application Framework Service · CVSS 8.5 High · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-428
- [\_GCafé 3.0 - 'gbClienService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25286.md)
  `CVE-2019-25286` · CVE record: Gcafe \_GCafé · CVSS 8.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-428
- [Shrew Soft VPN Client 2.2.2 - 'iked' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25283.md)
  `CVE-2019-25283` · CVE record: shrew Shrew Soft VPN Client · CVSS 8.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-428
- [Wacom WTabletService 6.6.7-3 - 'WTabletServicePro' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25288.md)
  `CVE-2019-25288` · CVE record: Wacom Wacom WTabletService · CVSS 8.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-428
- [Adaware Web Companion version 4.8.2078.3950 - 'WCAssistantService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25287.md)
  `CVE-2019-25287` · CVE record: Webcompanion Adaware Web Companion version · CVSS 8.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-428
- [Alps Pointing-device Controller 8.1202.1711.04 - 'ApHidMonitorService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25285.md)
  `CVE-2019-25285` · CVE record: Alps device Controller · CVSS 8.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-428
- [NCP_Secure_Entry_Client 9.2 - Unquoted Service Paths](https://agentprime.io/advisories/CVE-2019-25281.md)
  `CVE-2019-25281` · CVE record: ncp-e NCP_Secure_Entry_Client · CVSS 8.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-428
- [Studio 5000 Logix Designer 30.01.00 - 'FactoryTalk Activation Service' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25276.md)
  `CVE-2019-25276` · CVE record: Rockwellautomation Studio · CVSS 8.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-428
- [BartVPN 1.2.2 - 'BartVPNService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25275.md)
  `CVE-2019-25275` · CVE record: FileHorse BartVPN · CVSS 8.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-428
- [ProShow Producer 9.0.3797 - Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25274.md)
  `CVE-2019-25274` · CVE record: Photodex ProShow Producer · CVSS 8.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-428
- [Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25273.md)
  `CVE-2019-25273` · CVE record: Easy-Hide-Ip IP · CVSS 8.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-428
- [TexasSoft CyberPlanet 6.4.131 - 'CCSrvProxy' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25272.md)
  `CVE-2019-25272` · CVE record: Tenaxsoft TexasSoft CyberPlanet · CVSS 8.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-428
- [NETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25271.md)
  `CVE-2019-25271` · CVE record: NETGATE Data Backup · CVSS 8.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-428
- [Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability](https://agentprime.io/advisories/CVE-2019-25269.md)
  `CVE-2019-25269` · CVE record: Netgate Amiti Antivirus · CVSS 8.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-428
- [Wing FTP Server 6.0.7 - Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25267.md)
  `CVE-2019-25267` · CVE record: Wftpserver Wing FTP Server · CVSS 8.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-428
- [Adaware Web Companion 4.9.2159 - 'WCAssistantService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37102.md)
  `CVE-2020-37102` · CVE record: Lavasoft Web Companion · CVSS 8.5 High · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-428
- [VPN unlimited 6.1 - Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37101.md)
  `CVE-2020-37101` · CVE record: Vpnunlimitedapp VPN unlimited · CVSS 8.5 High · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-428
- [Sync Breeze Enterprise 12.4.18 - Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37100.md)
  `CVE-2020-37100` · CVE record: SyncBreeze Sync Breeze Enterprise · CVSS 8.5 High · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-428
- [Disk Savvy Enterprise 12.3.18 - 'disksvs.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37099.md)
  `CVE-2020-37099` · CVE record: DiskSavvy Disk Savvy Enterprise · CVSS 8.5 High · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-428
- [Disk Sorter Enterprise 12.4.16 - Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37098.md)
  `CVE-2020-37098` · CVE record: DiskSorter Disk Sorter Enterprise · CVSS 8.5 High · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-428
- [AnyDesk 5.4.0 - Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-25261.md)
  `CVE-2019-25261` · CVE record: Anydesk AnyDesk · CVSS 8.5 High · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-428
- [EPSON EasyMP Network Projection 2.81 - 'EMP_NSWLSV' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37064.md)
  `CVE-2020-37064` · CVE record: Epson EPSON EasyMP Network Projection · CVSS 8.5 High · Not analysed yet · Published 1 Feb 2026 · Tags: CWE-428
- [TFTP Turbo 4.6.1273 - 'TFTP Turbo 4' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37063.md)
  `CVE-2020-37063` · CVE record: Weird-Solutions TFTP Turbo · CVSS 8.5 High · Not analysed yet · Published 1 Feb 2026 · Tags: CWE-428
- [DHCP Turbo 4.6.1298- 'DHCP Turbo 4' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37062.md)
  `CVE-2020-37062` · CVE record: Weird Solutions DHCP Turbo · CVSS 8.5 High · Not analysed yet · Published 1 Feb 2026 · Tags: CWE-428
- [BOOTP Turbo 2.0.1214 - 'BOOTP Turbo' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37061.md)
  `CVE-2020-37061` · CVE record: Weird-Solutions BOOTP Turbo · CVSS 8.5 High · Not analysed yet · Published 1 Feb 2026 · Tags: CWE-428
- [SpyHunter 4 - 'SpyHunter 4 Service' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37055.md)
  `CVE-2020-37055` · CVE record: Enigmasoftware SpyHunter · CVSS 8.5 High · Not analysed yet · Published 1 Feb 2026 · Tags: CWE-428
- [Iskysoft Application Framework Service 2.4.3.241 - 'IsAppService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37048.md)
  `CVE-2020-37048` · CVE record: Iskysoft Iskysoft Application Framework Service · CVSS 8.5 High · Not analysed yet · Published 1 Feb 2026 · Tags: CWE-428
- [Deep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37047.md)
  `CVE-2020-37047` · CVE record: Deepinstinct Deep Instinct Windows Agent · CVSS 8.5 High · Not analysed yet · Published 1 Feb 2026 · Tags: CWE-428
- [NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37045.md)
  `CVE-2020-37045` · CVE record: Veritas NetBackup · CVSS 8.5 High · Not analysed yet · Published 1 Feb 2026 · Tags: CWE-428
- [AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37037.md)
  `CVE-2020-37037` · CVE record: Avast AVAST SecureLine · CVSS 8.5 High · Not analysed yet · Published 1 Feb 2026 · Tags: CWE-428
- [IBM Db2 Privilege Escalation](https://agentprime.io/advisories/CVE-2025-36384.md)
  `CVE-2025-36384` · CVE record: IBM Db2 for Linux, UNIX and Windows · CVSS 8.4 High · Not analysed yet · Published 30 Jan 2026 · Tags: CWE-428
- [Atomic Alarm Clock x86 6.3 - 'AtomicAlarmClock' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37060.md)
  `CVE-2020-37060` · CVE record: Drive-Software Atomic Alarm Clock x86 · CVSS 8.5 High · Not analysed yet · Published 30 Jan 2026 · Tags: CWE-428
- [Popcorn Time 6.2 - 'Update service' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37059.md)
  `CVE-2020-37059` · CVE record: Getpopcorntime Popcorn Time · CVSS 8.5 High · Not analysed yet · Published 30 Jan 2026 · Tags: CWE-428
- [Andrea ST Filters Service 1.0.64.7 - Unquoted service path](https://agentprime.io/advisories/CVE-2020-37058.md)
  `CVE-2020-37058` · CVE record: Andrea Electronics Andrea ST Filters Service · CVSS 8.5 High · Not analysed yet · Published 30 Jan 2026 · Tags: CWE-428
- [Outline Service 1.3.3 - 'Outline Service ' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37030.md)
  `CVE-2020-37030` · CVE record: Getoutline Outline Service · CVSS 8.5 High · Not analysed yet · Published 30 Jan 2026 · Tags: CWE-428
- [Bandwidth Monitor 3.9 - 'Svc10StrikeBandMontitor' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37021.md)
  `CVE-2020-37021` · CVE record: 10-Strike Bandwidth Monitor · CVSS 8.5 High · Not analysed yet · Published 29 Jan 2026 · Tags: CWE-428
- [SonarQube 8.3.1 - Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37020.md)
  `CVE-2020-37020` · CVE record: Sonarqube SonarQube · CVSS 8.5 High · Not analysed yet · Published 29 Jan 2026 · Tags: CWE-428
- [CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37017.md)
  `CVE-2020-37017` · CVE record: Wibu CodeMeter · CVSS 8.5 High · Not analysed yet · Published 29 Jan 2026 · Tags: CWE-428
- [BarcodeOCR 19.3.6 - 'BarcodeOCR' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-37016.md)
  `CVE-2020-37016` · CVE record: Barcode-Ocr BarcodeOCR · CVSS 8.5 High · Not analysed yet · Published 29 Jan 2026 · Tags: CWE-428
- [Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36992.md)
  `CVE-2020-36992` · CVE record: nordvpn nordvpn · CVSS 8.5 High · Not analysed yet · Published 28 Jan 2026 · Tags: CWE-428
- [ShareMouse 5.0.43 - 'ShareMouse Service' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36991.md)
  `CVE-2020-36991` · CVE record: Sharemouse ShareMouse · CVSS 8.5 High · Not analysed yet · Published 28 Jan 2026 · Tags: CWE-428
- [Input Director 1.4.3 - 'Input Director' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36990.md)
  `CVE-2020-36990` · CVE record: Inputdirector Input Director · CVSS 8.5 High · Not analysed yet · Published 28 Jan 2026 · Tags: CWE-428
- [ForensiTAppxService 2.2.0.4 - 'ForensiTAppxService.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36989.md)
  `CVE-2020-36989` · CVE record: Forensit ForensiTAppxService · CVSS 8.5 High · Not analysed yet · Published 28 Jan 2026 · Tags: CWE-428
- [Program Access Controller v1.2.0.0 - 'PACService.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36987.md)
  `CVE-2020-36987` · CVE record: Gearboxcomputers Program Access Controller · CVSS 8.5 High · Not analysed yet · Published 28 Jan 2026 · Tags: CWE-428
- [Prey 1.9.6 - "CronService" Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36986.md)
  `CVE-2020-36986` · CVE record: Preyproject Prey · CVSS 8.5 High · Not analysed yet · Published 28 Jan 2026 · Tags: CWE-428
- [IP Watcher v3.0.0.30 - 'PACService.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36985.md)
  `CVE-2020-36985` · CVE record: Gearboxcomputers IP Watcher · CVSS 8.5 High · Not analysed yet · Published 28 Jan 2026 · Tags: CWE-428
- [EPSON 1.124 - 'seksmdb.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36984.md)
  `CVE-2020-36984` · CVE record: Epson EPSON · CVSS 8.5 High · Not analysed yet · Published 28 Jan 2026 · Tags: CWE-428
- [Quick 'n Easy FTP Service 3.2 - Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36983.md)
  `CVE-2020-36983` · CVE record: Pablosoftwaresolutions Quick 'n Easy FTP Service · CVSS 8.5 High · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-428
- [Motorola Device Manager 2.5.4 - 'MotoHelperService.exe' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36982.md)
  `CVE-2020-36982` · CVE record: Motorola-Device-Manager Motorola Device Manager · CVSS 8.5 High · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-428
- [Motorola Device Manager 2.4.5 - 'ForwardDaemon.exe ' Unquoted Service Path](https://agentprime.io/advisories/CVE-2020-36981.md)
  `CVE-2020-36981` · CVE record: Filehorse Motorola Device Manager · CVSS 8.5 High · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-428

Newest: <https://agentprime.io/advisories/tag/cwe-428.md>
Older: <https://agentprime.io/advisories/tag/cwe-428.md?cursor=WyIyMDI2LTAxLTI3VDE4OjUxOjA1LjI5MTAwMFoiLCJDVkUtMjAyMC0zNjk4MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-428&cursor=WyIyMDI2LTAyLTExVDE0OjU2OjUyLjExODAwMFoiLCJDVkUtMjAxOS0yNTMxMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-428/?cursor=WyIyMDI2LTAyLTExVDE0OjU2OjUyLjExODAwMFoiLCJDVkUtMjAxOS0yNTMxMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.