# CWE-428.

Every Advisory and CVE whose sources give the weakness CWE-428, newest first.

## Records, newest first (an older page)

- [Improper Quoting Path Issue in Bitdefender Total Security](https://agentprime.io/advisories/CVE-2022-0357.md)
  `CVE-2022-0357` · CVE record: Bitdefender Total Security and 2 more · CVSS 6.7 Medium · Not analysed yet · Published 24 May 2023 · Tags: CWE-428
- [Wondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path vulnerability via the component NativePushService.](https://agentprime.io/advisories/CVE-2023-31747.md)
  `CVE-2023-31747` · CVE record · CVSS 7.8 High · Not analysed yet · Published 23 May 2023 · Tags: CWE-428
- [DigitalPersona FPSensor DpHost.exe unquoted search path](https://agentprime.io/advisories/CVE-2023-2644.md)
  `CVE-2023-2644` · CVE record: DigitalPersona FPSensor · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2023 · Tags: CWE-428
- [ks-soft Advanced Host Monitor rma_active.exe unquoted search path](https://agentprime.io/advisories/CVE-2023-2417.md)
  `CVE-2023-2417` · CVE record: ks-soft Advanced Host Monitor · CVSS 5.3 Medium · Not analysed yet · Published 29 Apr 2023 · Tags: CWE-428
- [Bypassing hardening via Unquoted Service path vulnerability](https://agentprime.io/advisories/CVE-2023-2331.md)
  `CVE-2023-2331` · CVE record: 42Gears Surelock Windows · CVSS 7.8 High · Not analysed yet · Published 27 Apr 2023 · Tags: CWE-428
- [Unquoted search path in ELECOM CO.,LTD. WAB-MAT](https://agentprime.io/advisories/CVE-2023-22282.md)
  `CVE-2023-22282` · CVE record: ELECOM CO.,LTD. WAB-MAT · CVSS 7.3 High · Not analysed yet · Published 11 Apr 2023 · Tags: CWE-428
- [Unquoted search path in Dell Multifunction Printer E525w Driver and Software Suite](https://agentprime.io/advisories/CVE-2023-24575.md)
  `CVE-2023-24575` · CVE record: Dell Dell Multifunction Printer E525w Driver and Software Suite · CVSS 7.8 High · Not analysed yet · Published 21 Feb 2023 · Tags: CWE-428
- [phjounin TFTPD64-SE tftpd64_svc.exe unquoted search path](https://agentprime.io/advisories/CVE-2023-0887.md)
  `CVE-2023-0887` · CVE record: phjounin TFTPD64-SE · CVSS 7.0 High · Not analysed yet · Published 17 Feb 2023 · Tags: CWE-428
- [Dentsply Sirona Sidexis <= 4.3 is vulnerable to Unquoted Service Path.](https://agentprime.io/advisories/CVE-2022-44264.md)
  `CVE-2022-44264` · CVE record · CVSS 7.8 High · Not analysed yet · Published 26 Jan 2023 · Tags: CWE-428
- [Hima: Unquoted path vulnerabilities in HIMA PC based Software](https://agentprime.io/advisories/CVE-2022-4258.md)
  `CVE-2022-4258` · CVE record: HIMA HOPCS and 3 more · CVSS 7.8 High · Not analysed yet · Published 16 Jan 2023 · Tags: CWE-428
- [Avira Security for Windows - Denial of Service](https://agentprime.io/advisories/CVE-2022-4429.md)
  `CVE-2022-4429` · CVE record: NortonLifelock (GenDigital) Avira Security for Windows · CVSS 5.3 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: CWE-428
- [Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo p…](https://agentprime.io/advisories/CVE-2019-19705.md)
  `CVE-2019-19705` · CVE record · CVSS 7.8 High · Not analysed yet · Published 26 Dec 2022 · Tags: CWE-428
- [Unquoted search path in Corel Corporation Roxio Creator LJB](https://agentprime.io/advisories/CVE-2022-46662.md)
  `CVE-2022-46662` · CVE record: Corel Corporation Roxio Creator LJB · CVSS 6.7 Medium · Not analysed yet · Published 21 Dec 2022 · Tags: CWE-428
- [IOBit IOTransfer V4 is vulnerable to Unquoted Service Path.](https://agentprime.io/advisories/CVE-2022-37197.md)
  `CVE-2022-37197` · CVE record · CVSS 7.8 High · Not analysed yet · Published 18 Nov 2022 · Tags: CWE-428
- [Unquoted search path in Intel(r) NUC Kit Wireless Adapter drivers for Windows 10](https://agentprime.io/advisories/CVE-2022-36384.md)
  `CVE-2022-36384` · CVE record: Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 · CVSS 6.7 Medium · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-428
- [Unquoted search path in Dell GeoDrive](https://agentprime.io/advisories/CVE-2022-33920.md)
  `CVE-2022-33920` · CVE record: Dell GeoDrive · CVSS 7.8 High · Not analysed yet · Published 12 Oct 2022 · Tags: CWE-428
- [Unquoted search path in SAP SE SAP Business One](https://agentprime.io/advisories/CVE-2022-35292.md)
  `CVE-2022-35292` · CVE record: SAP SE SAP Business One · No CVSS score · Not analysed yet · Published 13 Sept 2022 · Tags: CWE-428
- [FileZilla Client Installer uninstall.exe unquoted search path](https://agentprime.io/advisories/CVE-2016-15003.md)
  `CVE-2016-15003` · CVE record: FileZilla Client · CVSS 6.3 Medium · Not analysed yet · Published 18 Jul 2022 · Tags: CWE-428
- [Unquoted search path in SAP SE SAP BusinessObjects (BW Publisher Service)](https://agentprime.io/advisories/CVE-2022-31591.md)
  `CVE-2022-31591` · CVE record: SAP SE SAP BusinessObjects (BW Publisher Service) · No CVSS score · Not analysed yet · Published 12 Jul 2022 · Tags: CWE-428
- [Unquoted Service Path in Cloudflare WARP for Windows](https://agentprime.io/advisories/CVE-2022-2147.md)
  `CVE-2022-2147` · CVE record: Cloudflare WARP · CVSS 6.5 Medium · Not analysed yet · Published 23 Jun 2022 · Tags: CWE-428
- [Unquoted search path in SAP SE SAP PowerDesigner Proxy 16.7](https://agentprime.io/advisories/CVE-2022-31590.md)
  `CVE-2022-31590` · CVE record: SAP SE SAP PowerDesigner Proxy 16.7 · No CVSS score · Not analysed yet · Published 14 Jun 2022 · Tags: CWE-428
- [Windows Unquoted/Trusted Service Paths](https://agentprime.io/advisories/CVE-2022-0883.md)
  `CVE-2022-0883` · CVE record: SNOW Snow License Manager · CVSS 7.3 High · Not analysed yet · Published 18 May 2022 · Tags: CWE-428
- [Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element](https://agentprime.io/advisories/CVE-2020-14521.md)
  `CVE-2020-14521` · CVE record: Mitsubishi Electric C Controller Interface Module Utility and 4 more · CVSS 8.3 High · Not analysed yet · Published 11 Feb 2022 · Tags: CWE-428
- [Unquoted search path in Siemens SICAM PQ Analyzer](https://agentprime.io/advisories/CVE-2021-45460.md)
  `CVE-2021-45460` · CVE record: Siemens SICAM PQ Analyzer · No CVSS score · Not analysed yet · Published 11 Jan 2022 · Tags: CWE-428
- [Unquoted search path in Gallagher Command Centre](https://agentprime.io/advisories/CVE-2021-23197.md)
  `CVE-2021-23197` · CVE record: Gallagher Command Centre · CVSS 5.2 Medium · Not analysed yet · Published 18 Nov 2021 · Tags: CWE-428
- [Unquoted Path (SMB Login) Vulnerability](https://agentprime.io/advisories/CVE-2021-35231.md)
  `CVE-2021-35231` · CVE record: SolarWinds Kiwi Syslog Server · CVSS 6.7 Medium · Not analysed yet · Published 25 Oct 2021 · Tags: CWE-428
- [Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from…](https://agentprime.io/advisories/CVE-2021-23879.md)
  `CVE-2021-23879` · CVE record: McAfee, LLC Endpoint Product Removal Tool · CVSS 6.7 Medium · Not analysed yet · Published 15 Mar 2021 · Tags: CWE-428
- [Privilege escalation through unquoted service binary path on Cloudflare WARP for Windows](https://agentprime.io/advisories/CVE-2020-35152.md)
  `CVE-2020-35152` · CVE record: Cloudflare Cloudflare WARP for Windows · CVSS 4.5 Medium · Not analysed yet · Published 2 Feb 2021 · Tags: CWE-428
- [Unquoted Windows binary path in Traccar](https://agentprime.io/advisories/CVE-2021-21292.md)
  `CVE-2021-21292` · CVE record: traccar traccar · CVSS 5.5 Medium · Not analysed yet · Published 2 Feb 2021 · Tags: CWE-428
- [Unquoted search path in SonicWall NetExtender](https://agentprime.io/advisories/CVE-2020-5147.md)
  `CVE-2020-5147` · CVE record: SonicWall SonicWall NetExtender · No CVSS score · Not analysed yet · Published 9 Jan 2021 · Tags: CWE-428
- [Unquoted search path in EcoStruxure Building Operation Enterprise Server installer V1.9…](https://agentprime.io/advisories/CVE-2020-28209.md)
  `CVE-2020-28209` · CVE record: EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1 · CVSS 7.0 High · Not analysed yet · Published 19 Nov 2020 · Tags: CWE-428
- [Unquoted service executable path in McAfee Endpoint Security (ENS)](https://agentprime.io/advisories/CVE-2020-7331.md)
  `CVE-2020-7331` · CVE record: McAfee, LLC McAfee Endpoint Security (ENS) · CVSS 7.8 High · Not analysed yet · Published 12 Nov 2020 · Tags: CWE-428
- [Unquoted service path vulnerability on Veyon](https://agentprime.io/advisories/CVE-2020-15261.md)
  `CVE-2020-15261` · CVE record: veyon veyon · CVSS 8.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 19 Oct 2020 · Tags: CWE-428
- [File and Removable Media Protection update fixes one vulnerability](https://agentprime.io/advisories/CVE-2020-7316.md)
  `CVE-2020-7316` · CVE record: McAfee File & Removable Media Protection (FRP) · CVSS 6.6 Medium · Not analysed yet · Published 7 Oct 2020 · Tags: CWE-428
- [Unquoted search path in Siemens AG SIMATIC RTLS Locating Manager](https://agentprime.io/advisories/CVE-2020-10051.md)
  `CVE-2020-10051` · CVE record: Siemens AG SIMATIC RTLS Locating Manager · No CVSS score · Not analysed yet · Published 9 Sept 2020 · Tags: CWE-428
- [Unquoted Path in Rapid7 Nexpose Installer](https://agentprime.io/advisories/CVE-2020-7382.md)
  `CVE-2020-7382` · CVE record: Rapid7 Nexpose · CVSS 6.8 Medium · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-428
- [Unquoted search path in Lenovo Drivers Management](https://agentprime.io/advisories/CVE-2020-8326.md)
  `CVE-2020-8326` · CVE record: Lenovo Drivers Management · CVSS 7.3 High · Not analysed yet · Published 24 Jul 2020 · Tags: CWE-428
- [Unquoted search path in Siemens Opcenter Execution Discrete and others](https://agentprime.io/advisories/CVE-2020-7581.md)
  `CVE-2020-7581` · CVE record: Siemens Opcenter Execution Discrete and 4 more · No CVSS score · Not analysed yet · Published 14 Jul 2020 · Tags: CWE-428
- [Unquoted search path in Siemens SIMATIC Automation Tool and others](https://agentprime.io/advisories/CVE-2020-7580.md)
  `CVE-2020-7580` · CVE record: Siemens SIMATIC Automation Tool and 4 more · No CVSS score · Not analysed yet · Published 10 Jun 2020 · Tags: CWE-428
- [Unquoted search path in Lenovo Synaptics Smart Audio UWP App](https://agentprime.io/advisories/CVE-2020-8337.md)
  `CVE-2020-8337` · CVE record: Lenovo Synaptics Smart Audio UWP App · No CVSS score · Not analysed yet · Published 9 Jun 2020 · Tags: CWE-428
- [Unquoted service paths for some McAfee ENS files](https://agentprime.io/advisories/CVE-2020-7275.md)
  `CVE-2020-7275` · CVE record: McAfee LLC McAfee Endpoint Security (ENS) · CVSS 4.8 Medium · Not analysed yet · Published 15 Apr 2020 · Tags: CWE-428
- [Unquoted search path in Lenovo Vantage](https://agentprime.io/advisories/CVE-2020-8327.md)
  `CVE-2020-8327` · CVE record: Lenovo Vantage · CVSS 7.3 High · Not analysed yet · Published 14 Apr 2020 · Tags: CWE-428
- [Global Protect Agent: Local privilege escalation due to an unquoted search path vulnerability](https://agentprime.io/advisories/CVE-2020-1988.md)
  `CVE-2020-1988` · CVE record: Palo Alto Networks Global Protect Agent · CVSS 4.2 Medium · Not analysed yet · Published 8 Apr 2020 · Tags: CWE-428
- [Unquoted search path in SonicWall SonicOS](https://agentprime.io/advisories/CVE-2019-7487.md)
  `CVE-2019-7487` · CVE record: SonicWall SonicOS · No CVSS score · Not analysed yet · Published 19 Dec 2019 · Tags: CWE-428
- [Unquoted search path in Reliable Controls LicenseManager](https://agentprime.io/advisories/CVE-2019-18245.md)
  `CVE-2019-18245` · CVE record: Reliable Controls LicenseManager · No CVSS score · Not analysed yet · Published 11 Dec 2019 · Tags: CWE-428
- [exacqVision Server Unquoted Service Path](https://agentprime.io/advisories/CVE-2019-7590.md)
  `CVE-2019-7590` · CVE record: Exacq Technologies, Inc. exacqVision Server · CVSS 6.7 Medium · Not analysed yet · Published 19 Jul 2019 · Tags: CWE-428
- [Unquoted search path in Check Point Endpoint Security Client for Windows, VPN blade](https://agentprime.io/advisories/CVE-2019-8459.md)
  `CVE-2019-8459` · CVE record: Check Point Check Point Endpoint Security Client for Windows, VPN blade · No CVSS score · Not analysed yet · Published 20 Jun 2019 · Tags: CWE-428
- [Unquoted search path in Philips IntelliSpace Cardiovascular (ISCV) products](https://agentprime.io/advisories/CVE-2018-14789.md)
  `CVE-2018-14789` · CVE record: Philips IntelliSpace Cardiovascular (ISCV) products · No CVSS score · Not analysed yet · Published 22 Aug 2018 · Tags: CWE-428
- [Unquoted search path in ICS-CERT Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway](https://agentprime.io/advisories/CVE-2018-10619.md)
  `CVE-2018-10619` · CVE record: ICS-CERT Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway · No CVSS score · Not analysed yet · Published 7 Jun 2018 · Tags: CWE-428
- [Unquoted search path in Rockwell Automation FactoryTalk Activation](https://agentprime.io/advisories/CVE-2017-6015.md)
  `CVE-2017-6015` · CVE record: Rockwell Automation FactoryTalk Activation · No CVSS score · Not analysed yet · Published 11 May 2018 · Tags: CWE-428
- [Unquoted search path in Philips IntelliSpace Portal](https://agentprime.io/advisories/CVE-2018-5470.md)
  `CVE-2018-5470` · CVE record: Philips Philips IntelliSpace Portal · No CVSS score · Not analysed yet · Published 26 Mar 2018 · Tags: CWE-428
- [Unquoted search path in Moxa MXview](https://agentprime.io/advisories/CVE-2017-14030.md)
  `CVE-2017-14030` · CVE record: Moxa MXview · No CVSS score · Not analysed yet · Published 12 Jan 2018 · Tags: CWE-428
- [Unquoted search path in Progea Movicon SCADA/HMI](https://agentprime.io/advisories/CVE-2017-14019.md)
  `CVE-2017-14019` · CVE record: Progea Movicon SCADA/HMI · No CVSS score · Not analysed yet · Published 19 Oct 2017 · Tags: CWE-428
- [Unquoted search path in mySCADA myPRO](https://agentprime.io/advisories/CVE-2017-12730.md)
  `CVE-2017-12730` · CVE record: mySCADA myPRO · No CVSS score · Not analysed yet · Published 6 Oct 2017 · Tags: CWE-428
- [Unquoted search path in i-SENS, Inc. SmartLog Diabetes Management Software](https://agentprime.io/advisories/CVE-2017-13993.md)
  `CVE-2017-13993` · CVE record: i-SENS, Inc. SmartLog Diabetes Management Software · No CVSS score · Not analysed yet · Published 4 Oct 2017 · Tags: CWE-428
- [Unquoted search path in Automated Logic Corporation WebCTRL, i-VU, SiteScan](https://agentprime.io/advisories/CVE-2017-9644.md)
  `CVE-2017-9644` · CVE record: Automated Logic Corporation WebCTRL, i-VU, SiteScan · No CVSS score · Not analysed yet · Published 25 Aug 2017 · Tags: CWE-428
- [Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allows local users to gain privileges via a…](https://agentprime.io/advisories/CVE-2014-5455.md)
  `CVE-2014-5455` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2014 · Tags: CWE-428
- [Schneider Electric Floating License Manager Unquoted Search Path or Element](https://agentprime.io/advisories/CVE-2014-0759.md)
  `CVE-2014-0759` · CVE record: Schneider Electric Floating License Manager · CVSS 5.9 Medium · Not analysed yet · Published 28 Feb 2014 · Tags: CWE-428
- [Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vault (EV) for File System Archiving before 9.0.4 and 10.x bef…](https://agentprime.io/advisories/CVE-2013-1609.md)
  `CVE-2013-1609` · CVE record · CVSS 7.8 High · Not analysed yet · Published 26 Mar 2013 · Tags: CWE-428

Newest: <https://agentprime.io/advisories/tag/cwe-428.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-428&cursor=WyIyMDIzLTA3LTAzVDA3OjM1OjI0LjI1NTAwMFoiLCJDVkUtMjAyMy0zNDM4Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-428/?cursor=WyIyMDIzLTA3LTAzVDA3OjM1OjI0LjI1NTAwMFoiLCJDVkUtMjAyMy0zNDM4Il0>. Everything for agents: <https://agentprime.io/llms.txt>.