Advisories · Weakness
CWE-428.
Every Advisory and CVE whose sources give the weakness CWE-428, newest first.
- CVSS 8.4 High
Unquoted search path in BUFFALO INC. NAS Navigator2 (Windows version only)
- BUFFALO INC. NAS Navigator2 (Windows version only)
- CWE-428
- CVSS 8.5 High
NetBak Replicator
- QNAP Systems Inc. NetBak Replicator
- CWE-428
- CVSS 7.8 High
Unquoted search path in Dell Wireless 5932e
- Dell Wireless 5932e
- CWE-428
- CVSS 6.7 Medium
SunshineService Has Unquoted Service Path That Allows Local SYSTEM Code Execution
- LizardByte Sunshine
- CWE-428
- CVSS 8.4 High
Unquoted search path in Century Corporation RAID Manager
- Century Corporation RAID Manager
- CWE-428
- CVSS 6.7 Medium
Vulnerability caused by unquoted file paths of Windows services registered by the Uninterruptible Power Supply (UPS) management application
- OMRON SOCIAL SOLUTIONS CO., Ltd. PowerAttendant Standard Edition
- OMRON SOCIAL SOLUTIONS CO., Ltd. PowerAttendant Basic Edition
- CWE-428
- CVSS 7.8 High
A local privilege escalation vulnerability exists in LizardBytes' Sunshine for Windows
- LizardByte Sunshine for Windows
- CWE-428
- CVSS 8.4 High
Unquoted search path in RATOC Systems, Inc. RATOC RAID Monitoring Manager for Windows
- RATOC Systems, Inc. RATOC RAID Monitoring Manager for Windows
- CWE-428
- CVSS 5.3 Medium
Unquoted search path in Hikvision HikCentral FocSign
- Hikvision HikCentral FocSign
- CWE-428
- CVSS 7.3 High
Unquoted Search Path Vulnerability in the Utility for Industrial Computers (Windows)
- Moxa Utility for DRP-A100 Series
- Moxa Utility for DRP-C100 Series
- CWE-428
- CVSS 8.4 High
Unquoted search path in Western Digital Corporation Western Digital Kitfox for Windows
- Western Digital Corporation Western Digital Kitfox for Windows
- CWE-428
- CVSS 6.7 Medium
Unquoted search path in Seagate Toolkit
- Seagate Toolkit
- CWE-428
- CVSS 9.2 CriticalCritical · CVSS 9+
Windows service registered with an unquoted ImagePath vulnerability in the system registry
- ASUSTOR ABP and AES
- CWE-428
- CVSS 7.3 High
Unquoted search path in AMD Cloud Manageability Service
- AMD Cloud Manageability Service
- CWE-428
- CVSS 7.3 High
Unquoted search path in AMD AIM-T Manageability Service
- AMD AIM-T Manageability Service
- CWE-428
- CVSS 7.3 High
MTSoftware C-Lodop CLodopPrintService unquoted search path
- MTSoftware C-Lodop
- CWE-426
- CWE-428
- CVSS 5.2 Medium
Local Privilege Escalation on Xerox® Desktop Print Experience® v8.5
- Xerox® Desktop Print Experience
- CWE-428
- CVSS 7.3 High
Privilege Escalation vulnerability has been discovered in OpenText™ Service Manager.
- OpenText™ Service Manager
- CWE-428
- CVSS 6.6 Medium
Unquoted search path in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- CWE-428
- CVSS 7.8 High
Unquoted search path in Dell NetWorker
- Dell NetWorker
- CWE-428
- CVSS 7.3 High
In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability.
- CWE-428
- CVSS 5.3 Medium
Virtual environment (venv) activation scripts don't quote paths
- Python Software Foundation CPython
- CWE-428
- CVSS 7.3 High
Grafana Agent (Flow mode) on Windows has Unquoted Search Path or Element vulnerability in github.com/grafana/agent
- CWE-428
<0.43.3 · fixed in 0.43.3
GHSA-m5gv-m5f9-wgv4 · CVE-2024-8996 - CVSS 7.3 High
Grafana Alloy on Windows has Unquoted Search Path or Element vulnerability in github.com/grafana/alloy
- CWE-428
<1.3.4 || >=1.4.0-rc.0, <1.4.1 · fixed in 1.3.4, 1.4.1
GHSA-chqx-36rm-rf8h · CVE-2024-8975 - CVSS 8.5 High
Intelbras InControl incontrol-service-watchdog.exe unquoted search path
- Intelbras InControl
- CWE-426
- CWE-428
- CVSS 7.8 High
Windows Setup and Deployment Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- CWE-428
- CVSS 6.7 Medium
QVR Smart Client
- QNAP Systems Inc. QVR Smart Client
- CWE-428
- CVSS 6.7 Medium
An unquoted executable path exists in Hitachi Device Manager
- Hitachi Device Manager
- CWE-428
- CVSS 6.5 Medium
Unquoted search path in Plug&Track Thermoscan IP
- Plug&Track Thermoscan IP
- CWE-428
- CVSS 6.2 Medium
Mint Workbench I Unquoted Service Path Enumeration
- ABB Mint Workbench I
- CWE-428
- CVSS 8.5 High
Intelbras InControl incontrolWebcam Service unquoted search path
- Intelbras InControl
- CWE-426
- CWE-428
- CVSS 7.8 High
Unquoted search path in Schneider Electric Easergy Studio
- Schneider Electric Easergy Studio
- CWE-428
- CVSS 4.9 Medium
Sunshine's unquoted executable path could lead to hijacked execution flow
- LizardByte Sunshine
- CWE-428
- CVSS 7.0 High
Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables
- Rockwell Automation FactoryTalk® Remote Access™
- CWE-428
- CVSS 7.8 High
Unquoted path or search item vulnerability in SugarSync
- SugarSync
- CWE-428
- CVSS 7.2 High
Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability
- Triangle MicroWorks SCADA Data Gateway
- CWE-428
- CVSS 8.2 High
Unquoted search path in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- CWE-428
- CVSS 4.4 Medium
MEVO WEBCAM APP Windows Unquoted Service Path Vulnerability
- Logitech MEVO WEBCAM APP
- CWE-428
- CVSS 6.7 Medium
An unquoted service path vulnerability in Terratec DMX_6Fire USB v.1.23.0.02 allows a local attacker to escalate privileges via the Program.exe component.
- CWE-428
- CVSS 7.3 High
HPE MSA SAN Storage VSS Provider and CAPI Proxy Software, Elevation of Privilege
- Hewlett Packard Enterprise HPE MSA SAN Storage VSS Provider and CAPI Proxy Software
- CWE-428
- CVSS 7.8 High
Unquoted item or search path vulnerability in Faronics Deep Freeze Server Standard
- Faronics Deep Freeze Server Standard
- CWE-428
- CVSS 7.8 High
Wiesemann & Theis: Multiple products prone to unquoted search path
- W&T Com Redirector PnP
- W&T Com Redirector Legacy
- CWE-428
- CVSS 9.1 CriticalCritical · CVSS 9+
An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an attacker to gain elevated privileges via the 12d Synergy Server and/or 12d Synergy…
- CWE-428
- CVSS 6.7 Medium
Unquoted search path in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CWE-428
- CVSS 7.8 High
PanteraSoft HDD Health search path or unquoted item vulnerability
- PanteraSoft HDD Health
- CWE-428
- CVSS 7.2 High
Automation Studio and PVI Multiple unquoted service path vulnerabilities
- B&R Industrial Automation Automation Studio
- B&R Industrial Automation NET/PVI
- CWE-428
- CVSS 3.3 Low
Unquoted path privilege vulnerability in ESET products for Windows
- ESET, spol. s r.o. ESET Endpoint Security
- ESET, spol. s r.o. ESET Endpoint Antivirus
- CWE-428
- CVSS 7.8 High
Subnet Solutions Inc. PowerSYSTEM Center Unquoted Search Path or Element
- Subnet Solutions Inc. PowerSYSTEM Center
- CWE-428
- CVSS 6.7 Medium
Unquoted search path in Intel(R) NUC Kits NUC7i3DN, NUC7i5DN…
- Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software
- CWE-428
- CVSS 6.7 Medium
Unquoted search path in Intel Server Configuration Utility software
- Intel Server Configuration Utility software
- CWE-428
- CVSS 6.7 Medium
Unquoted search path in Intel(R) Arc(TM) Control software
- Intel(R) Arc(TM) Control software
- CWE-428
- CVSS 3.9 Low
Unquoted search path in Okta LDAP Agent
- Okta LDAP Agent
- CWE-428
- CVSS 6.3 Medium
Fortect - CWE-428: Unquoted Search Path or Element
- Fortect
- CWE-428
- CVSS 5.3 Medium
Topaz OFD Protection Module Warsaw core.exe unquoted search path
- Topaz OFD
- CWE-428
- CVSS 7.8 High
NextBX QWAlerter QWAlerter.exe unquoted search path
- NextBX QWAlerter
- CWE-428
- CVSS 6.7 Medium
Unquoted search path in System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and…
- System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipset
- CWE-428
- CVSS 7.2 High
Unquoted Service Path in ABB AO-OPC
- ABB AO-OPC
- CWE-428
- CVSS 7.8 High
Pointware EasyInventory Easy2W.exe unquoted search path
- Pointware EasyInventory
- CWE-428
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system.
- CWE-428
- CVSS 4.4 Medium
Unquoted search path in Trellix Move
- Trellix Move
- CWE-428