CWE-428
456 CVEs • Abstraction: Base
Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
CVEs (456)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Unquoted service path in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable denial of service vi...Show more |
Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefully crafted and named...Show more |
A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version 1.4.33. This vulnerability may allow a local attacker to execute arbitrary code via an HP System Ev...Show more |
1Trendmicro 8Antivirus + Security 2019 Antivirus + Security 2020Internet Security 2019+5 moreJun 17, 2026 Jan 18, 2020 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious pr...Show more |
1Whoopsie Daisy Project 1Whoopsie Daisy Nov 21, 2024 Jan 15, 2020 N/A· v4 4.9 MEDIUM· v3 5.5 MEDIUM· v2 whoopsie-daisy before 0.1.26: Root user can remove arbitrary files |
1Teradici 3Pcoip Client Pcoip Graphics AgentPcoip Standard AgentJun 17, 2026 Jan 8, 2020 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause execution of %PROGRAMFILES(X86)%\Teradici\PCoIP.exe instead of the intended pcoip_vchan_printing_svc.exe file. |
1Yokogawa 8Exaopc ExaplogExaquantum+5 moreJun 17, 2026 Dec 26, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10.00 ? R3.02.00 and R3.15.00), Exaquantum/Batch (R1.01.00 ? R2...Show more |
1Sonicwall 2Sonicos Sonicos Sslvpn NacagentJun 17, 2026 Dec 19, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow cod...Show more |
1Reliablecontrols 1Rc Licensemanager Jun 17, 2026 Dec 11, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Reliable Controls LicenseManager versions 3.4 and prior may allow an authenticated user to insert malicious code into the system root path, which may allow execution of code with elevated privileges of the application. |
An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute arbitrary code with el...Show more |
Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows. |
Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables...Show more |
1Trendmicro 4Antivirus + Security 2019 Internet Security 2019Maximum Security 2019+1 moreJun 17, 2026 Aug 21, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 A local privilege escalation vulnerability exists in Trend Micro Security 2019 (v15.0) in which, if exploited, would allow an attacker to manipulate a specific product feature to load a malicious service. |
1Johnsoncontrols 1Exacqvision Server Jun 17, 2026 Jul 19, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be execut...Show more |
1Checkpoint 6Capsule Docs Standalone Client Endpoint Security ClientsEndpoint Security Server Package+3 moreJun 17, 2026 Jun 20, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar...Show more |
1Intel 1Scs Discovery Utility Jun 17, 2026 May 17, 2019 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 Unquoted service path in the installer for the Intel(R) SCS Discovery Utility version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access. |
1Winmagic 1Securedoc Disk Encryption Nov 21, 2024 Apr 8, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 WINMAGIC SecureDoc Disk Encryption software before 8.3 has an Unquoted Service Path vulnerability, which could allow an attacker to execute arbitrary code on a target system. If the executable is enclosed in quote tags "...Show more |
1Lenovo 1Dynamic Power Reduction Jun 17, 2026 Mar 18, 2019 N/A· v4 6.7 MEDIUM· v3 7.2 HIGH· v2 An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with administrative privileges. |
1Lenovo 59Synaptics Thinkpad Ultranav Driver Thiankpad L430 FirmwareThiankpad L530 Firmware+56 moreNov 21, 2024 Jan 24, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user. |
The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2->9.2.9, 9.3.2-P1->9.3.6, 9.4...Show more |