Advisories · Weakness

CWE-428.

Every Advisory and CVE whose sources give the weakness CWE-428, newest first.

CVE-2020-36928 CVE record

CVSS 8.5 High

Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Path
- Brother BRAgent
- CWE-428
Not analysed yet 15 Jan 2026
CVE-2020-36927 CVE record

CVSS 8.5 High

DiskPulse 13.6.14 - Unquoted Service Path
- DiskPulse
- CWE-428
Not analysed yet 15 Jan 2026
CVE-2021-47773 CVE record

CVSS 8.5 High

Dynojet Power Core 2.3.0 - Unquoted Service Path
- Dynojet Power Core
- CWE-428
Not analysed yet 15 Jan 2026
CVE-2021-47767 CVE record

CVSS 8.5 High

10-Strike Network Inventory Explorer Pro 9.31 - 'srvInventoryWebServer' Unquoted Service Path
- 10-Strike Strike Network Inventory Explorer Pro
- CWE-428
Not analysed yet 15 Jan 2026
CVE-2021-47762 CVE record

CVSS 8.5 High

HTTPDebuggerPro 9.11 - Unquoted Service Path
- HTTPDebuggerPro
- CWE-428
Not analysed yet 15 Jan 2026
CVE-2023-54338 CVE record

CVSS 8.5 High

Tftpd32_SE 4.60 - 'Tftpd32_svc' Unquoted Service Path
- Pjo2 Tftpd32_SE
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2023-54336 CVE record

CVSS 8.5 High

Mediconta 3.7.27 - 'servermedicontservice' Unquoted Service Path
- Infonetsoftware Mediconta
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2023-54331 CVE record

CVSS 8.5 High

Outline 1.6.0 - Unquoted Service Path
- Outline
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2023-53984 CVE record

CVSS 8.5 High

HotKey Clipboard 2.1.0.6 - Privilege Escalation Unquoted Service Path
- clevo HotKey Clipboard
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50938 CVE record

CVSS 8.5 High

CONTPAQi® AdminPAQ 14.0.0 - Unquoted Service Path
- Contpaqi CONTPAQ AdminPAQ
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50935 CVE record

CVSS 8.5 High

FLAME II MODEM USB - Unquoted Service Path
- Telcel FLAME II MODEM USB
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50933 CVE record

CVSS 8.5 High

Cain & Abel 4.9.56 - Unquoted Service Path
- Malavida Cain & Abel
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50930 CVE record

CVSS 8.5 High

Emerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service Path
- Emerson PAC Machine Edition
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50929 CVE record

CVSS 8.5 High

Connectify Hotspot 2018 'ConnectifyService' - Unquoted Service Path
- Connectify Inc Connectify Hotspot
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50928 CVE record

CVSS 8.5 High

Bluetooth Application 5.4.277 - 'BlueSoleilCS' Unquoted Service Path
- IVT Corp Bluetooth Application BlueSoleilCS
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50924 CVE record

CVSS 8.5 High

Private Internet Access 3.3 - 'pia-service' Unquoted Service Path
- Private Internet Access
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50923 CVE record

CVSS 8.5 High

Cobian Backup 0.9 - Unquoted Service Path
- Cobiansoft Cobian Backup
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50921 CVE record

CVSS 8.5 High

WOW21 5.0.1.9 - 'Service WOW21_Service' Unquoted Service Path
- ilwebmaster21 WOW21
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50920 CVE record

CVSS 8.5 High

Sandboxie-Plus 5.50.2 - 'Service SbieSvc' Unquoted Service Path
- Sandboxie Plus
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50918 CVE record

CVSS 8.5 High

VIVE Runtime Service - 'ViveAgentService' Unquoted Service Path
- VIVE Runtime Service
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50917 CVE record

CVSS 8.5 High

ProtonVPN 1.26.0 - Unquoted Service Path
- ProtonVPN
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50915 CVE record

CVSS 8.5 High

PTPublisher 2.3.4 - Unquoted Service Path
- Primera PTPublisher
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50914 CVE record

CVSS 8.5 High

EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path
- EaseUS Data Recovery
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50913 CVE record

CVSS 8.5 High

TCQ - 'ITeCProteccioAppServer.exe' Unquoted Service Path
- ITEC TCQ
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50904 CVE record

CVSS 8.5 High

Wondershare UBackit 2.0.5 - 'wsbackup' Unquoted Service Path
- Wondershare UBackit
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50903 CVE record

CVSS 8.5 High

Wondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service Path
- Wondershare MobileTrans
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50901 CVE record

CVSS 8.5 High

Wondershare Dr.Fone 11.4.9 - 'DFWSIDService' Unquoted Service Path
- Wondershare Dr.Fone
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50900 CVE record

CVSS 8.5 High

Wondershare Dr.Fone 12.0.18 - 'Wondershare InstallAssist' Unquoted Service Path
- Wondershare Dr.Fone
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2022-50693 CVE record

CVSS 8.5 High

Splashtop 8.71.12001.0 - Unquoted Service Path
- Splashtop
- CWE-428
Not analysed yet 13 Jan 2026
CVE-2019-25231 CVE record

CVSS 8.5 High

devolo dLAN Cockpit 4.3.1 Unquoted Service Path Privilege Escalation
- devolo AG devolo dLAN Cockpit
- CWE-428
Not analysed yet 7 Jan 2026
CVE-2020-36903 CVE record

CVSS 8.5 High

Selea CarPlateServer 4.0.1.6 Local Privilege Escalation via Unquoted Service Path
- Selea CarPlateServer (CPS)
- CWE-428
Not analysed yet 31 Dec 2025
CVE-2024-58315 CVE record

CVSS 8.5 High

Tosibox Key Service 3.3.0 Local Privilege Escalation via Unquoted Service Path
- Tosibox Oy Tosibox Key Service
- CWE-428
Not analysed yet 30 Dec 2025
CVE-2025-59888 CVE record

CVSS 6.7 Medium

Unquoted search path in Eaton UPS Companion software
- Eaton UPS Companion software
- CWE-428
Not analysed yet 26 Dec 2025
CVE-2021-47739 CVE record

CVSS 8.5 High

Epic Games Easy Anti-Cheat 4.0 Local Privilege Escalation via Unquoted Service Path
- Epic Games Easy Anti-Cheat
- CWE-428
Not analysed yet 23 Dec 2025
CVE-2023-53965 CVE record

CVSS 8.6 High

SOUND4 Server Service 4.1.102 Local Privilege Escalation via Unquoted Service Path
- SOUND4 Ltd. SOUND4 Server Service
- CWE-428
Not analysed yet 22 Dec 2025
CVE-2022-50688 CVE record

CVSS 8.5 High

Cobian Backup Gravity 11.2.0.582 Unquoted Service Path Privilege Escalation
- Cobiansoft Cobian Backup Gravity
- CWE-428
Not analysed yet 22 Dec 2025
CVE-2025-14018 CVE record

CVSS 7.3 High

Unquoted Service Path in NetBT Consultancy's e-Fatura
- NetBT Consulting Services Inc. e-Fatura
- CWE-428
Not analysed yet 22 Dec 2025
CVE-2023-53954 CVE record

CVSS 8.5 High

ActFax 10.10 Unquoted Path Services Privilege Escalation Vulnerability
- ActFax
- CWE-428
Not analysed yet 19 Dec 2025
CVE-2023-53947 CVE record

CVSS 8.5 High

OCS Inventory NG 2.3.0.0 Unquoted Service Path Privilege Escalation
- oscinventory OCS Inventory NG
- CWE-428
Not analysed yet 19 Dec 2025
CVE-2023-53946 CVE record

CVSS 8.5 High

Arcsoft PhotoStudio 6.0.0.172 Unquoted Service Path Privilege Escalation
- Arcsoft PhotoStudio
- CWE-428
Not analysed yet 19 Dec 2025
CVE-2023-53912 CVE record

CVSS 8.5 High

USB Flash Drives Control 4.1.0.0 Unquoted Service Path Privilege Escalation
- BiniSoft USB Flash Drives Control
- CWE-428
Not analysed yet 17 Dec 2025
CVE-2025-34499 CVE record

CVSS 6.9 Medium

AnyDesk 9.0.1 Unquoted Service Path Privilege Escalation Vulnerability
- AnyDesk
- CWE-428
Not analysed yet 11 Dec 2025
CVE-2024-58288 CVE record

CVSS 8.7 High

Genexus Protection Server 9.7.2.10 Unquoted Service Path Privilege Escalation
- Genexus Protection Server
- CWE-428
Not analysed yet 11 Dec 2025
CVE-2025-66271 CVE record

CVSS 8.4 High

Unquoted search path in ELECOM CO.,LTD. Clone for Windows
- ELECOM CO.,LTD. Clone for Windows
- CWE-428
Not analysed yet 9 Dec 2025
CVE-2025-66461 CVE record

CVSS 8.4 High

Unquoted search path in GS Yuasa International Ltd. FULLBACK Manager Pro (for Windows) and others
- GS Yuasa International Ltd. FULLBACK Manager Pro (for Windows)
- GS Yuasa International Ltd. FULLBACK Manager Pro for Network (for Windows)
- CWE-428
Not analysed yet 8 Dec 2025
CVE-2020-36879 CVE record

CVSS 8.5 High

Flexsense DiskBoss Service Unquoted Service Path Vulnerability
- Flexsense DiskBoss
- Flexsense DiskBoss Pro
- CWE-428
Not analysed yet 5 Dec 2025
CVE-2025-66575 CVE record

CVSS 8.5 High

VeeVPN 1.6.1 - Unquoted Service Path Remote Code Execution
- VeePN VeeVPN
- CWE-428
Not analysed yet 4 Dec 2025
CVE-2025-66269 CVE record

CVSS 7.1 High

Unquoted Service Path in UPSilon2000V6.0(RupsMon and USBMate) running as SYSTEM
- MegaTec Taiwan UPSilon2000V6.0
- CWE-428
Not analysed yet 26 Nov 2025
CVE-2025-66264 CVE record

CVSS 7.2 High

Unquoted Service path in UPSilon2000V6.0 SYSTEM privilege service
- MegaTec Taiwan ClientMate
- CWE-428
Not analysed yet 26 Nov 2025
CVE-2025-13433 CVE record

CVSS 7.3 High

Muse Group MuseHub Windows Service Muse.Updater.exe unquoted search path
- Muse Group MuseHub
- CWE-426
- CWE-428
Not analysed yet 20 Nov 2025
CVE-2025-32449 CVE record

CVSS 5.4 Medium

Unquoted search path in PRI Driver software
- PRI Driver software
- CWE-428
Not analysed yet 11 Nov 2025
CVE-2025-10714 CVE record

CVSS 8.4 High

Unquoted search path in Axis Communications AB AXIS Optimizer
- Axis Communications AB AXIS Optimizer
- CWE-428
Not analysed yet 11 Nov 2025
CVE-2025-62225 CVE record

CVSS 8.4 High

Unquoted search path in Sony Corporation Optical Disc Archive Software (for Windows)
- Sony Corporation Optical Disc Archive Software (for Windows)
- CWE-428
Not analysed yet 5 Nov 2025
CVE-2025-64151 CVE record

CVSS 8.4 High

Unquoted search path in Roboticsware PTE. LTD. FA-Panel6 and others
- Roboticsware PTE. LTD. FA-Panel6
- Roboticsware PTE. LTD. BA-Panel6
- CWE-428
Not analysed yet 5 Nov 2025
CVE-2025-12507 CVE record

CVSS 8.8 High

Insecure service configuration – unquoted path
- Bizerba _connect.BRAIN
- CWE-428
Not analysed yet 31 Oct 2025
CVE-2025-60320 CVE record

CVSS 6.7 Medium

memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service (memoQauhlp101).
- CWE-428
Not analysed yet 29 Oct 2025
CVE-2025-57227 CVE record

CVSS 7.8 High

An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a crafted executable file into a parent folder.
- CWE-428
Not analysed yet 29 Oct 2025
CVE-2025-12286 CVE record

CVSS 7.3 High

VeePN AVService avservice.exe unquoted search path
- VeePN
- CWE-426
- CWE-428
Not analysed yet 27 Oct 2025
CVE-2025-12247 CVE record

CVSS 7.3 High

Hasleo Backup Suite HasleoImageMountService/HasleoBackupSuiteService unquoted search path
- Hasleo Backup Suite
- CWE-426
- CWE-428
Not analysed yet 27 Oct 2025
CVE-2025-61865 CVE record

CVSS 8.4 High

Unquoted search path in I-O DATA DEVICE, INC. NarSuS App and others
- I-O DATA DEVICE, INC. NarSuS App
- I-O DATA DEVICE, INC. Clone for Windows
- CWE-428
Not analysed yet 23 Oct 2025