Unquoted Search Path or Element

The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

CVEs (456)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-16183 1Panasonic 2System Interface Device 0021 System Interface Device 0040 Nov 21, 2024 Jan 9, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 (32bit), Windows 7 (64bit), Windows 8 (64bit), Windows 8.1 (64bit), Windows 10 (64bit) delivered in or later than...Show more An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 (32bit), Windows 7 (64bit), Windows 8 (64bit), Windows 8.1 (64bit), Windows 10 (64bit) delivered in or later than October 2009 allow local users to gain privileges via a Trojan horse executable file and execute arbitrary code with eleveted privileges.Show less
CVE-2018-14789 1Philips 2Intellispace Cardiovascular Xcelera Nov 21, 2024 Aug 22, 2018 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulnerability has been identified, which may allow an attacker to e...Show more In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulnerability has been identified, which may allow an attacker to execute arbitrary code and escalate their level of privileges.Show less
CVE-2018-11063 1Dell 1Wyse Management Suite Nov 21, 2024 Aug 10, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Dell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities. Affected software installs multiple services incorrectly by specifying the paths to the service executables without quotes....Show more Dell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities. Affected software installs multiple services incorrectly by specifying the paths to the service executables without quotes. This could potentially allow a low-privileged local user to execute arbitrary executables with elevated privileges.Show less
CVE-2018-3688 1Intel 1Quartus Prime Programmer And Tools Nov 21, 2024 Jul 10, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.
CVE-2018-3687 1Intel 1Quartus Ii Programmer And Tools Nov 21, 2024 Jul 10, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.
CVE-2018-3684 1Intel 1Quartus Ii Nov 21, 2024 Jul 10, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Unquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.
CVE-2018-3683 1Intel 1Quartus Prime Nov 21, 2024 Jul 10, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.
CVE-2018-3668 1Intel 1Processor Diagnostic Tool Nov 21, 2024 Jul 10, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Unquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code.
CVE-2017-11672 1Opcfoundation 1Local Discovery Server Nov 21, 2024 Jun 13, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might allow local users to gain privileges.
CVE-2018-10619 1Rockwellautomation 2Factorytalk Linx Gateway Rslinx Classic Nov 21, 2024 Jun 7, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized, but non-privileged local user to execute arbitrary code and...Show more An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation.Show less
CVE-2018-4873 1Adobe 1Creative Cloud Nov 21, 2024 May 19, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Unquoted Search Path vulnerability. Successful exploitation could lead to local privilege escalation.
CVE-2017-6015 1Rockwellautomation 1Factorytalk Activation Nov 21, 2024 May 11, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Without quotation marks, any whitespace in the file path for Rockwell Automation FactoryTalk Activation version 4.00.02 remains ambiguous, which may allow an attacker to link to or run a malicious executable. This may al...Show more Without quotation marks, any whitespace in the file path for Rockwell Automation FactoryTalk Activation version 4.00.02 remains ambiguous, which may allow an attacker to link to or run a malicious executable. This may allow an authorized, but not privileged local user to execute arbitrary code with elevated privileges on the system. CVSS v3 base score: 8.8, CVSS vector string: (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Rockwell Automation has released a new version of FactoryTalk Activation, Version 4.01, which addresses the identified vulnerability. Rockwell Automation recommends upgrading to the latest version of FactoryTalk Activation, Version 4.01 or later.Show less
CVE-2018-2406 1Sap 1Crystal Reports Server Nov 21, 2024 Apr 10, 2018 N/A· v4 5.3 MEDIUM· v3 4.6 MEDIUM· v2 Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path.
CVE-2018-5470 1Philips 1Intellispace Portal Jun 17, 2026 Mar 26, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate...Show more Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate their level of privileges.Show less
CVE-2018-6321 1Pandasecurity 1Panda Global Protection Jun 17, 2026 Mar 12, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Unquoted Windows search path vulnerability in the panda_url_filtering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact.
CVE-2018-6016 110 Strike 1Network Monitor Jun 17, 2026 Mar 12, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Unquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike Network Monitor 5.4 allows local users to gain privileges via a malicious artefact.
CVE-2018-6384 1Nsclient 1Nsclient++ Jun 17, 2026 Jan 31, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Unquoted Windows search path vulnerability in NSClient++ before 0.4.1.73 allows non-privileged local users to execute arbitrary code with elevated privileges on the system via a malicious program.exe executable in the %S...Show more Unquoted Windows search path vulnerability in NSClient++ before 0.4.1.73 allows non-privileged local users to execute arbitrary code with elevated privileges on the system via a malicious program.exe executable in the %SYSTEMDRIVE% folder.Show less
CVE-2017-1000475 1Freesshd 1Freesshd Nov 21, 2024 Jan 24, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges.
CVE-2017-14030 1Moxa 1Mxview Nov 21, 2024 Jan 12, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation vulnerability could allow an authorized user with file access to escalate privileges by inserting arbitrary code into the unquot...Show more An issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation vulnerability could allow an authorized user with file access to escalate privileges by inserting arbitrary code into the unquoted service path.Show less
CVE-2017-14019 1Progea 1Movicon May 13, 2026 Oct 19, 2017 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has been identified, which may allow an authorized local user to ins...Show more An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has been identified, which may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate his or her privileges.Show less

Previous 1...19 20 212223 Next