CWE-428 · Unquoted Search Path or Element (page 2)
Page 2 of 5 — CVEs classified under CWE-428, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-37020 | High | 7.8 | 2026-01-29 | SonarQube 8.3.1 contains an unquoted service path vulnerability that allows local attackers to gain SYSTEM privileges by exploiting the service executable path… |
CVE-2020-37017 | High | 7.8 | 2026-01-29 | CodeMeter 6.60 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. A… |
CVE-2020-37016 | High | 7.8 | 2026-01-29 | BarcodeOCR 19.3.6 contains an unquoted service path vulnerability that allows local attackers to execute code with elevated privileges during system startup. A… |
CVE-2020-36992 | High | 7.8 | 2026-01-28 | Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges… |
CVE-2020-36991 | High | 7.8 | 2026-01-28 | ShareMouse 5.0.43 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges… |
CVE-2020-36990 | High | 7.8 | 2026-01-28 | Input Director 1.4.3 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to execute code with elev… |
CVE-2020-36989 | High | 7.8 | 2026-01-28 | ForensiT AppX Management Service 2.2.0.4 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with ele… |
CVE-2020-36987 | High | 7.8 | 2026-01-28 | Program Access Controller 1.2.0.0 contains an unquoted service path vulnerability in PACService.exe that allows local attackers to execute code with elevated p… |
CVE-2020-36986 | High | 7.8 | 2026-01-28 | Prey 1.9.6 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated privileges. Attackers can exploit… |
CVE-2020-36985 | High | 7.8 | 2026-01-28 | IP Watcher 3.0.0.30 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to execute arbitrary code… |
CVE-2020-36984 | High | 7.8 | 2026-01-28 | EPSON 1.124 contains an unquoted service path vulnerability in the SENADB service that allows local attackers to execute code with elevated system privileges… |
CVE-2020-36983 | High | 7.8 | 2026-01-27 | Quick 'n Easy FTP Service 3.2 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code during service startup. Att… |
CVE-2020-36982 | High | 7.8 | 2026-01-27 | Motorola Device Manager 2.5.4 contains an unquoted service path vulnerability in the MotoHelperService.exe service that allows local users to potentially injec… |
CVE-2020-36981 | High | 7.8 | 2026-01-27 | Motorola Device Manager 2.4.5 contains an unquoted service path vulnerability in the PST Service that allows local users to potentially execute arbitrary code… |
CVE-2020-36980 | High | 7.8 | 2026-01-27 | SAntivirus IC 10.0.21.61 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execut… |
CVE-2020-36979 | High | 7.8 | 2026-01-27 | Atheros Coex Service Application 8.0.0.255 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unqu… |
CVE-2020-36977 | High | 7.8 | 2026-01-27 | Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentiall… |
CVE-2020-36976 | High | 7.8 | 2026-01-27 | Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially ex… |
CVE-2020-36975 | High | 7.8 | 2026-01-27 | EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploit… |
CVE-2020-36974 | High | 7.8 | 2026-01-27 | Realtek Andrea RT Filters 1.0.64.7 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated… |
CVE-2020-36959 | High | 7.8 | 2026-01-26 | IDT PC Audio 1.0.6499.0 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system priv… |
CVE-2020-36958 | High | 7.8 | 2026-01-26 | Kite 1.2020.1119.0 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to potentially execute arbitr… |
CVE-2020-36957 | High | 7.8 | 2026-01-26 | PDF Complete 3.5.310.2002 contains an unquoted service path vulnerability in its pdfsvc.exe service configuration. Attackers can exploit the unquoted path to i… |
CVE-2020-36953 | High | 7.8 | 2026-01-26 | MiniTool ShadowMaker 3.2 contains an unquoted service path vulnerability in the MTAgentService that allows local attackers to potentially execute arbitrary cod… |
CVE-2020-36952 | High | 7.8 | 2026-01-26 | IObit Uninstaller 10 Pro contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. A… |
CVE-2020-36937 | High | 7.8 | 2026-01-25 | Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows service that allows local attackers to potentially execute arb… |
CVE-2020-36936 | High | 7.8 | 2026-01-25 | Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path to i… |
CVE-2020-36935 | High | 7.8 | 2026-01-25 | KMSpico 17.1.0.0 contains an unquoted service path vulnerability in the Service KMSELDI configuration that allows local attackers to potentially execute arbitr… |
CVE-2020-36934 | High | 7.8 | 2026-01-25 | Deep Instinct Windows Agent 1.2.24.0 contains an unquoted service path vulnerability in the DeepNetworkService that allows local users to potentially execute c… |
CVE-2020-36933 | High | 7.8 | 2026-01-25 | HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service configuration. Attackers can exploit the unquoted binary path to… |
CVE-2021-47898 | High | 7.8 | 2026-01-23 | Epson USB Display 1.6.0.0 contains an unquoted service path vulnerability in the EMP_UDSA service running with LocalSystem privileges. Attackers can exploit th… |
CVE-2021-47896 | High | 7.8 | 2026-01-23 | PDF Complete Corporate Edition 4.1.45 contains an unquoted service path vulnerability in the pdfcDispatcher service that allows local attackers to potentially… |
CVE-2021-47890 | High | 7.8 | 2026-01-23 | LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the un… |
CVE-2021-47889 | High | 7.8 | 2026-01-23 | Softros LAN Messenger 9.6.4 contains an unquoted service path vulnerability in the SoftrosSpellChecker service that allows local attackers to potentially execu… |
CVE-2021-47887 | High | 7.8 | 2026-01-21 | OKI Print Job Accounting 4.4.10 contains an unquoted service path vulnerability in the OkiJaSvc service that allows local attackers to potentially execute arbi… |
CVE-2021-47886 | High | 7.8 | 2026-01-21 | Pingzapper 2.3.1 contains an unquoted service path vulnerability in the PingzapperSvc service that allows local attackers to potentially execute arbitrary code… |
CVE-2021-47884 | High | 7.8 | 2026-01-21 | OKI Configuration Tool 1.6.53 contains an unquoted service path vulnerability in the OKI Local Port Manager service that allows local attackers to potentially… |
CVE-2021-47883 | High | 7.8 | 2026-01-21 | Sandboxie Plus 0.7.2 contains an unquoted service path vulnerability in the SbieSvc service that allows local attackers to execute code with elevated privilege… |
CVE-2021-47882 | High | 7.8 | 2026-01-21 | FreeLAN 2.2 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to execute arbitrary code. Attacke… |
CVE-2021-47880 | High | 7.8 | 2026-01-21 | Realtek Wireless LAN Utility 700.1631 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system… |
CVE-2021-47879 | High | 7.8 | 2026-01-21 | eBeam Interactive Suite 3.6 contains an unquoted service path vulnerability in the eBeam Stylus Driver service that allows local users to potentially execute c… |
CVE-2021-47878 | High | 7.8 | 2026-01-21 | eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code w… |
CVE-2021-47874 | High | 7.8 | 2026-01-21 | VFS for Git 1.0.21014.1 contains an unquoted service path vulnerability in the GVFS.Service Windows service that allows local attackers to execute code with el… |
CVE-2021-47869 | High | 7.8 | 2026-01-21 | Brother BRAdmin Professional 3.75 contains an unquoted service path vulnerability in the BRA_Scheduler service that allows local users to potentially execute a… |
CVE-2021-47868 | High | 7.8 | 2026-01-21 | WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the WPCommandFileService that allows local users to potentially execute code with elevated… |
CVE-2021-47867 | High | 7.8 | 2026-01-21 | WIN-PACK PRO4.8 contains an unquoted service path vulnerability in the ScheduleService that allows local users to potentially execute code with elevated system… |
CVE-2021-47866 | High | 7.8 | 2026-01-21 | WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the GuardTourService that allows local users to potentially execute code with elevated syst… |
CVE-2021-47864 | High | 7.8 | 2026-01-21 | OSAS Traverse Extension 11 contains an unquoted service path vulnerability in the TravExtensionHostSvc service running with LocalSystem privileges. Attackers c… |
CVE-2021-47863 | High | 7.8 | 2026-01-21 | MacPaw Encrypto 1.0.1 contains an unquoted service path vulnerability in its Encrypto Service configuration that allows local attackers to potentially execute… |
CVE-2021-47862 | High | 7.8 | 2026-01-21 | Hi-Rez Studios 5.1.6.3 contains an unquoted service path vulnerability in the HiPatchService that allows local attackers to execute code with elevated privileg… |
CVE-2021-47861 | High | 7.8 | 2026-01-21 | Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system pri… |
CVE-2021-47859 | High | 7.8 | 2026-01-21 | ActivIdentity 8.2 contains an unquoted service path vulnerability in the ac.sharedstore service that allows local attackers to potentially execute arbitrary co… |
CVE-2021-47847 | High | 7.8 | 2026-01-16 | Disk Sorter Server 13.6.12 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to potentially execute… |
CVE-2021-47845 | High | 7.8 | 2026-01-16 | Spy Emergency 25.0.650 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to execute code with e… |
CVE-2021-47833 | High | 7.8 | 2026-01-16 | WifiHotSpot 1.0.0.0 contains an unquoted service path vulnerability in its WifiHotSpotService.exe that allows local attackers to execute code with elevated pri… |
CVE-2021-47829 | High | 7.8 | 2026-01-16 | DHCP Broadband 4.1.0.1503 contains an unquoted service path vulnerability in its service configuration that allows local attackers to execute code with elevate… |
CVE-2021-47828 | High | 7.8 | 2026-01-16 | BOOTP Turbo 2.0.0.1253 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path to execute… |
CVE-2021-47826 | High | 7.8 | 2026-01-16 | Acer Backup Manager 3.0.0.99 contains an unquoted service path vulnerability in the NTI IScheduleSvc service that allows local users to potentially execute arb… |
CVE-2021-47825 | High | 7.8 | 2026-01-16 | Acer Updater Service 1.2.3500.0 contains an unquoted service path vulnerability that allows local users to execute code with elevated system privileges. Attack… |
CVE-2021-47823 | High | 7.8 | 2026-01-16 | Acer ePowerSvc 6.0.3008.0 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges… |
CVE-2021-47822 | High | 7.8 | 2026-01-16 | DiskBoss Service 12.2.18 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to execute code with elev… |
CVE-2021-47810 | High | 7.8 | 2026-01-16 | WibuKey Runtime 6.51 contains an unquoted service path vulnerability in the WkSvW32.exe service that allows local attackers to potentially execute arbitrary co… |
CVE-2021-47809 | High | 7.8 | 2026-01-16 | Disk Sorter Enterprise 13.6.12 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially… |
CVE-2021-47807 | High | 7.8 | 2026-01-16 | Sync Breeze 13.6.18 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arb… |
CVE-2021-47806 | High | 7.8 | 2026-01-16 | Dup Scout 13.5.28 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbit… |
CVE-2021-47805 | High | 7.8 | 2026-01-16 | Disk Savvy 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbi… |
CVE-2021-47804 | High | 7.8 | 2026-01-16 | Wise Care 365 5.6.7.568 contains an unquoted service path vulnerability in the WiseBootAssistant service running with LocalSystem privileges. Attackers can exp… |
CVE-2021-47803 | High | 7.8 | 2026-01-16 | iFunbox 4.2 contains an unquoted service path vulnerability in the Apple Mobile Device Service that allows local attackers to execute code with elevated privil… |
CVE-2021-47792 | High | 7.8 | 2026-01-16 | Remote Mouse 4.002 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attac… |
CVE-2021-47790 | High | 7.8 | 2026-01-16 | Active WebCam 11.5 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attac… |
CVE-2021-47787 | High | 7.8 | 2026-01-16 | TotalAV 5.15.69 contains an unquoted service path vulnerability in multiple system services running with LocalSystem privileges. Attackers can place malicious… |
CVE-2021-47780 | High | 7.8 | 2026-01-16 | Macro Expert 4.7 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges… |
CVE-2020-36930 | High | 7.8 | 2026-01-16 | SysGauge Server 7.9.18 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to potentially execute arbi… |
CVE-2020-36929 | High | 7.8 | 2026-01-16 | Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to potentially… |
CVE-2020-36928 | High | 7.8 | 2026-01-16 | Brother BRAgent 1.38 contains an unquoted service path vulnerability in the WBA_Agent_Client service running with LocalSystem privileges. Attackers can exploit… |
CVE-2020-36927 | High | 7.8 | 2026-01-16 | DiskPulse Enterprise 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially ex… |
CVE-2021-47773 | High | 7.8 | 2026-01-15 | Dynojet Power Core 2.3.0 contains an unquoted service path vulnerability in the DJ.UpdateService that allows local authenticated users to potentially execute c… |
CVE-2021-47767 | High | 7.8 | 2026-01-15 | 10-Strike Network Inventory Explorer Pro 9.31 contains an unquoted service path vulnerability in the srvInventoryWebServer service running with LocalSystem pri… |
CVE-2021-47762 | High | 7.8 | 2026-01-15 | HTTPDebuggerPro 9.11 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system pri… |
CVE-2023-54338 | High | 8.4 | 2026-01-13 | Tftpd32 SE 4.60 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Att… |
CVE-2023-54336 | High | 8.4 | 2026-01-13 | Mediconta 3.7.27 contains an unquoted service path vulnerability in the servermedicontservice that allows local users to potentially execute code with elevated… |
CVE-2023-54331 | High | 7.8 | 2026-01-13 | Outline 1.6.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges… |
CVE-2023-53984 | High | 8.4 | 2026-01-13 | Clevo HotKey Clipboard 2.1.0.6 contains an unquoted service path vulnerability in the HKClipSvc service that allows local non-privileged users to potentially e… |
CVE-2022-50938 | High | 8.4 | 2026-01-13 | CONTPAQi AdminPAQ 14.0.0 contains an unquoted service path vulnerability in the AppKeyLicenseServer service running with LocalSystem privileges. Attackers can… |
CVE-2022-50935 | Critical | 9.8 | 2026-01-13 | Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Pr… |
CVE-2022-50933 | High | 7.8 | 2026-01-13 | Cain & Abel 4.9.56 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges… |
CVE-2022-50930 | High | 8.4 | 2026-01-13 | Emerson PAC Machine Edition 9.80 contains an unquoted service path vulnerability in the TrapiServer service that allows local users to potentially execute code… |
CVE-2022-50929 | High | 8.4 | 2026-01-13 | Connectify Hotspot 2018 contains an unquoted service path vulnerability in its ConnectifyService executable that allows local attackers to potentially execute… |
CVE-2022-50928 | High | 7.8 | 2026-01-13 | BlueSoleilCS 5.4.277 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute ar… |
CVE-2022-50924 | High | 8.4 | 2026-01-13 | Private Internet Access 3.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system… |
CVE-2022-50923 | High | 7.8 | 2026-01-13 | Cobian Backup 0.9 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers… |
CVE-2022-50921 | High | 7.8 | 2026-01-13 | WOW21 5.0.1.9 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges… |
CVE-2022-50920 | High | 8.4 | 2026-01-13 | Sandboxie-Plus 5.50.2 contains an unquoted service path vulnerability in the SbieSvc Windows service that allows local attackers to potentially execute arbitra… |
CVE-2022-50918 | High | 8.4 | 2026-01-13 | VIVE Runtime Service 1.0.0.4 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges… |
CVE-2022-50917 | High | 7.8 | 2026-01-13 | ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attackers to potentially execute arbi… |
CVE-2022-50915 | High | 7.8 | 2026-01-13 | PTPublisher 2.3.4 contains an unquoted service path vulnerability in the PTProtect service that allows local attackers to potentially execute arbitrary code wi… |
CVE-2022-50914 | High | 8.4 | 2026-01-13 | EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. Attackers can exploit the unquoted path… |
CVE-2022-50913 | High | 8.4 | 2026-01-13 | ITeC ITeCProteccioAppServer contains an unquoted service path vulnerability that allows local attackers to execute code with elevated system privileges. Attack… |
CVE-2022-50904 | High | 8.4 | 2026-01-13 | Wondershare UBackit 2.0.5 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system pr… |
CVE-2022-50903 | High | 8.4 | 2026-01-13 | Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that allows local users to potentially execute code with… |