Advisories · Weakness

CWE-428.

Every Advisory and CVE whose sources give the weakness CWE-428, newest first.

CVE-2022-0357 CVE record

CVSS 6.7 Medium

Improper Quoting Path Issue in Bitdefender Total Security
- Bitdefender Total Security
- Bitdefender Internet Security
- CWE-428
Not analysed yet 24 May 2023
CVE-2023-31747 CVE record

CVSS 7.8 High

Wondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path vulnerability via the component NativePushService.
- CWE-428
Not analysed yet 23 May 2023
CVE-2023-2644 CVE record

CVSS 5.3 Medium

DigitalPersona FPSensor DpHost.exe unquoted search path
- DigitalPersona FPSensor
- CWE-428
Not analysed yet 11 May 2023
CVE-2023-2417 CVE record

CVSS 5.3 Medium

ks-soft Advanced Host Monitor rma_active.exe unquoted search path
- ks-soft Advanced Host Monitor
- CWE-428
Not analysed yet 29 Apr 2023
CVE-2023-2331 CVE record

CVSS 7.8 High

Bypassing hardening via Unquoted Service path vulnerability
- 42Gears Surelock Windows
- CWE-428
Not analysed yet 27 Apr 2023
CVE-2023-22282 CVE record

CVSS 7.3 High

Unquoted search path in ELECOM CO.,LTD. WAB-MAT
- ELECOM CO.,LTD. WAB-MAT
- CWE-428
Not analysed yet 11 Apr 2023
CVE-2023-24575 CVE record

CVSS 7.8 High

Unquoted search path in Dell Multifunction Printer E525w Driver and Software Suite
- Dell Multifunction Printer E525w Driver and Software Suite
- CWE-428
Not analysed yet 21 Feb 2023
CVE-2023-0887 CVE record

CVSS 7.0 High

phjounin TFTPD64-SE tftpd64_svc.exe unquoted search path
- phjounin TFTPD64-SE
- CWE-428
Not analysed yet 17 Feb 2023
CVE-2022-44264 CVE record

CVSS 7.8 High

Dentsply Sirona Sidexis <= 4.3 is vulnerable to Unquoted Service Path.
- CWE-428
Not analysed yet 26 Jan 2023
CVE-2022-4258 CVE record

CVSS 7.8 High

Hima: Unquoted path vulnerabilities in HIMA PC based Software
- HIMA HOPCS
- HIMA X-OPC DA
- CWE-428
Not analysed yet 16 Jan 2023
CVE-2022-4429 CVE record

CVSS 5.3 Medium

Avira Security for Windows - Denial of Service
- NortonLifelock (GenDigital) Avira Security for Windows
- CWE-428
Not analysed yet 10 Jan 2023
CVE-2019-19705 CVE record

CVSS 7.8 High

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo p…
- CWE-428
Not analysed yet 26 Dec 2022
CVE-2022-46662 CVE record

CVSS 6.7 Medium

Unquoted search path in Corel Corporation Roxio Creator LJB
- Corel Corporation Roxio Creator LJB
- CWE-428
Not analysed yet 21 Dec 2022
CVE-2022-37197 CVE record

CVSS 7.8 High

IOBit IOTransfer V4 is vulnerable to Unquoted Service Path.
- CWE-428
Not analysed yet 18 Nov 2022
CVE-2022-36384 CVE record

CVSS 6.7 Medium

Unquoted search path in Intel(r) NUC Kit Wireless Adapter drivers for Windows 10
- Intel(r) NUC Kit Wireless Adapter drivers for Windows 10
- CWE-428
Not analysed yet 11 Nov 2022
CVE-2022-33920 CVE record

CVSS 7.8 High

Unquoted search path in Dell GeoDrive
- Dell GeoDrive
- CWE-428
Not analysed yet 12 Oct 2022
CVE-2022-35292 CVE record

Unquoted search path in SAP SE SAP Business One
- SAP SE SAP Business One
- CWE-428
Not analysed yet 13 Sept 2022
CVE-2016-15003 CVE record

CVSS 6.3 Medium

FileZilla Client Installer uninstall.exe unquoted search path
- FileZilla Client
- CWE-428
Not analysed yet 18 Jul 2022
CVE-2022-31591 CVE record

Unquoted search path in SAP SE SAP BusinessObjects (BW Publisher Service)
- SAP SE SAP BusinessObjects (BW Publisher Service)
- CWE-428
Not analysed yet 12 Jul 2022
CVE-2022-2147 CVE record

CVSS 6.5 Medium

Unquoted Service Path in Cloudflare WARP for Windows
- Cloudflare WARP
- CWE-428
Not analysed yet 23 Jun 2022
CVE-2022-31590 CVE record

Unquoted search path in SAP SE SAP PowerDesigner Proxy 16.7
- SAP SE SAP PowerDesigner Proxy 16.7
- CWE-428
Not analysed yet 14 Jun 2022
CVE-2022-0883 CVE record

CVSS 7.3 High

Windows Unquoted/Trusted Service Paths
- Snow License Manager
- CWE-428
Not analysed yet 18 May 2022
CVE-2020-14521 CVE record

CVSS 8.3 High

Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element
- Mitsubishi Electric C Controller Interface Module Utility
- Mitsubishi Electric CC-Link IE Control Network Data Collector
- CWE-428
Not analysed yet 11 Feb 2022
CVE-2021-45460 CVE record

Unquoted search path in Siemens SICAM PQ Analyzer
- Siemens SICAM PQ Analyzer
- CWE-428
Not analysed yet 11 Jan 2022
CVE-2021-23197 CVE record

CVSS 5.2 Medium

Unquoted search path in Gallagher Command Centre
- Gallagher Command Centre
- CWE-428
Not analysed yet 18 Nov 2021
CVE-2021-35231 CVE record

CVSS 6.7 Medium

Unquoted Path (SMB Login) Vulnerability
- SolarWinds Kiwi Syslog Server
- CWE-428
Not analysed yet 25 Oct 2021
CVE-2021-23879 CVE record

CVSS 6.7 Medium

Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from…
- McAfee, LLC Endpoint Product Removal Tool
- CWE-428
Not analysed yet 15 Mar 2021
CVE-2020-35152 CVE record

CVSS 4.5 Medium

Privilege escalation through unquoted service binary path on Cloudflare WARP for Windows
- Cloudflare WARP for Windows
- CWE-428
Not analysed yet 2 Feb 2021
CVE-2021-21292 CVE record

CVSS 5.5 Medium

Unquoted Windows binary path in Traccar
- traccar
- CWE-428
Not analysed yet 2 Feb 2021
CVE-2020-5147 CVE record

Unquoted search path in SonicWall NetExtender
- SonicWall NetExtender
- CWE-428
Not analysed yet 9 Jan 2021
CVE-2020-28209 CVE record

CVSS 7.0 High

Unquoted search path in EcoStruxure Building Operation Enterprise Server installer V1.9…
- EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1
- CWE-428
Not analysed yet 19 Nov 2020
CVE-2020-7331 CVE record

CVSS 7.8 High

Unquoted service executable path in McAfee Endpoint Security (ENS)
- McAfee, LLC McAfee Endpoint Security (ENS)
- CWE-428
Not analysed yet 12 Nov 2020
CVE-2020-15261 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

Unquoted service path vulnerability on Veyon
- veyon
- CWE-428
Not analysed yet 19 Oct 2020
CVE-2020-7316 CVE record

CVSS 6.6 Medium

File and Removable Media Protection update fixes one vulnerability
- McAfee File & Removable Media Protection (FRP)
- CWE-428
Not analysed yet 7 Oct 2020
CVE-2020-10051 CVE record

Unquoted search path in Siemens AG SIMATIC RTLS Locating Manager
- Siemens AG SIMATIC RTLS Locating Manager
- CWE-428
Not analysed yet 9 Sept 2020
CVE-2020-7382 CVE record

CVSS 6.8 Medium

Unquoted Path in Rapid7 Nexpose Installer
- Rapid7 Nexpose
- CWE-428
Not analysed yet 3 Sept 2020
CVE-2020-8326 CVE record

CVSS 7.3 High

Unquoted search path in Lenovo Drivers Management
- Lenovo Drivers Management
- CWE-428
Not analysed yet 24 Jul 2020
CVE-2020-7581 CVE record

Unquoted search path in Siemens Opcenter Execution Discrete and others
- Siemens Opcenter Execution Discrete
- Siemens Opcenter Execution Foundation
- CWE-428
Not analysed yet 14 Jul 2020
CVE-2020-7580 CVE record

Unquoted search path in Siemens SIMATIC Automation Tool and others
- Siemens SIMATIC Automation Tool
- Siemens SIMATIC NET PC Software V14
- CWE-428
Not analysed yet 10 Jun 2020
CVE-2020-8337 CVE record

Unquoted search path in Lenovo Synaptics Smart Audio UWP App
- Lenovo Synaptics Smart Audio UWP App
- CWE-428
Not analysed yet 9 Jun 2020
CVE-2020-7275 CVE record

CVSS 4.8 Medium

Unquoted service paths for some McAfee ENS files
- McAfee LLC McAfee Endpoint Security (ENS)
- CWE-428
Not analysed yet 15 Apr 2020
CVE-2020-8327 CVE record

CVSS 7.3 High

Unquoted search path in Lenovo Vantage
- Lenovo Vantage
- CWE-428
Not analysed yet 14 Apr 2020
CVE-2020-1988 CVE record

CVSS 4.2 Medium

Global Protect Agent: Local privilege escalation due to an unquoted search path vulnerability
- Palo Alto Networks Global Protect Agent
- CWE-428
Not analysed yet 8 Apr 2020
CVE-2019-7487 CVE record

Unquoted search path in SonicWall SonicOS
- SonicWall SonicOS
- CWE-428
Not analysed yet 19 Dec 2019
CVE-2019-18245 CVE record

Unquoted search path in Reliable Controls LicenseManager
- Reliable Controls LicenseManager
- CWE-428
Not analysed yet 11 Dec 2019
CVE-2019-7590 CVE record

CVSS 6.7 Medium

exacqVision Server Unquoted Service Path
- Exacq Technologies, Inc. exacqVision Server
- CWE-428
Not analysed yet 19 Jul 2019
CVE-2019-8459 CVE record

Unquoted search path in Check Point Endpoint Security Client for Windows, VPN blade
- Check Point Endpoint Security Client for Windows, VPN blade
- CWE-428
Not analysed yet 20 Jun 2019
CVE-2018-14789 CVE record

Unquoted search path in Philips IntelliSpace Cardiovascular (ISCV) products
- Philips IntelliSpace Cardiovascular (ISCV) products
- CWE-428
Not analysed yet 22 Aug 2018
CVE-2018-10619 CVE record

Unquoted search path in ICS-CERT Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway
- ICS-CERT Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway
- CWE-428
Not analysed yet 7 Jun 2018
CVE-2017-6015 CVE record

Unquoted search path in Rockwell Automation FactoryTalk Activation
- Rockwell Automation FactoryTalk Activation
- CWE-428
Not analysed yet 11 May 2018
CVE-2018-5470 CVE record

Unquoted search path in Philips IntelliSpace Portal
- Philips IntelliSpace Portal
- CWE-428
Not analysed yet 26 Mar 2018
CVE-2017-14030 CVE record

Unquoted search path in Moxa MXview
- Moxa MXview
- CWE-428
Not analysed yet 12 Jan 2018
CVE-2017-14019 CVE record

Unquoted search path in Progea Movicon SCADA/HMI
- Progea Movicon SCADA/HMI
- CWE-428
Not analysed yet 19 Oct 2017
CVE-2017-12730 CVE record

Unquoted search path in mySCADA myPRO
- mySCADA myPRO
- CWE-428
Not analysed yet 6 Oct 2017
CVE-2017-13993 CVE record

Unquoted search path in i-SENS, Inc. SmartLog Diabetes Management Software
- i-SENS, Inc. SmartLog Diabetes Management Software
- CWE-428
Not analysed yet 4 Oct 2017
CVE-2017-9644 CVE record

Unquoted search path in Automated Logic Corporation WebCTRL, i-VU, SiteScan
- Automated Logic Corporation WebCTRL, i-VU, SiteScan
- CWE-428
Not analysed yet 25 Aug 2017
CVE-2014-5455 CVE record

CVSS 5.3 Medium

Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allows local users to gain privileges via a…
- CWE-428
Not analysed yet 25 Aug 2014
CVE-2014-0759 CVE record

CVSS 5.9 Medium

Schneider Electric Floating License Manager Unquoted Search Path or Element
- Schneider Electric Floating License Manager
- CWE-428
Not analysed yet 28 Feb 2014
CVE-2013-1609 CVE record

CVSS 7.8 High

Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vault (EV) for File System Archiving before 9.0.4 and 10.x bef…
- CWE-428
Not analysed yet 26 Mar 2013