CWE-428 · Unquoted Search Path or Element (page 5)
Page 5 of 5 — CVEs classified under CWE-428, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2012-0945 | Medium | 4.9 | 2020-01-15 | whoopsie-daisy before 0.1.26: Root user can remove arbitrary files |
CVE-2019-20362 | High | 7.8 | 2020-01-08 | In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause execution of %PROGRAMFILES(X86)%\Teradici\PCoIP.exe… |
CVE-2019-6008 | High | 7.8 | 2019-12-26 | An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10… |
CVE-2019-7487 | High | 7.8 | 2019-12-19 | Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious… |
CVE-2019-18245 | High | 7.8 | 2019-12-11 | Reliable Controls LicenseManager versions 3.4 and prior may allow an authenticated user to insert malicious code into the system root path, which may allow exe… |
CVE-2019-7201 | High | 7.8 | 2019-12-04 | An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized bu… |
CVE-2019-16647 | High | 7.2 | 2019-10-29 | Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows. |
CVE-2019-6145 | Medium | 6.7 | 2019-09-20 | Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user… |
CVE-2019-14685 | High | 7.8 | 2019-08-21 | A local privilege escalation vulnerability exists in Trend Micro Security 2019 (v15.0) in which, if exploited, would allow an attacker to manipulate a specific… |
CVE-2019-7590 | Medium | 6.7 | 2019-07-19 | ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to inser… |
CVE-2019-8459 | Critical | 9.8 | 2019-06-20 | Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause… |
CVE-2019-11093 | Medium | 6.7 | 2019-05-17 | Unquoted service path in the installer for the Intel(R) SCS Discovery Utility version 12.0.0.129 and earlier may allow an authenticated user to potentially ena… |
CVE-2018-20341 | High | 7.8 | 2019-04-08 | WINMAGIC SecureDoc Disk Encryption software before 8.3 has an Unquoted Service Path vulnerability, which could allow an attacker to execute arbitrary code on a… |
CVE-2019-6149 | Medium | 6.7 | 2019-03-18 | An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with… |
CVE-2018-16098 | High | 7.8 | 2019-01-24 | In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unautho… |
CVE-2017-3141 | High | 7.2 | 2019-01-16 | The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions a… |
CVE-2018-16183 | High | 7.8 | 2019-01-09 | An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 (32bit), Windows 7 (64bit), Windows 8 (64bit), Window… |
CVE-2018-14789 | Medium | 6.7 | 2018-08-22 | In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulner… |
CVE-2018-11063 | High | 7.8 | 2018-08-10 | Dell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities. Affected software installs multiple services incorrectly by spe… |
CVE-2018-3688 | High | 7.8 | 2018-07-10 | Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code. |
CVE-2018-3687 | High | 7.8 | 2018-07-10 | Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code. |
CVE-2018-3684 | High | 7.8 | 2018-07-10 | Unquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code. |
CVE-2018-3683 | High | 7.8 | 2018-07-10 | Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code. |
CVE-2018-3668 | High | 7.8 | 2018-07-10 | Unquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code. |
CVE-2017-11672 | High | 7.8 | 2018-06-13 | The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executab… |
CVE-2018-10619 | High | 7.8 | 2018-06-07 | An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized… |
CVE-2018-4873 | High | 7.8 | 2018-05-19 | Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Unquoted Search Path vulnerability. Successful exploitation could l… |
CVE-2017-6015 | High | 7.8 | 2018-05-11 | Without quotation marks, any whitespace in the file path for Rockwell Automation FactoryTalk Activation version 4.00.02 remains ambiguous, which may allow an a… |
CVE-2018-2406 | Medium | 5.3 | 2018-04-10 | Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path. |
CVE-2018-5470 | High | 7.8 | 2018-03-26 | Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an… |
CVE-2018-6321 | High | 7.8 | 2018-03-12 | Unquoted Windows search path vulnerability in the panda_url_filtering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a mal… |
CVE-2018-6016 | High | 7.8 | 2018-03-12 | Unquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike Network Monitor 5.4 allows local users to gain privileges via a ma… |
CVE-2018-6384 | High | 7.8 | 2018-01-31 | Unquoted Windows search path vulnerability in NSClient++ before 0.4.1.73 allows non-privileged local users to execute arbitrary code with elevated privileges o… |
CVE-2017-1000475 | High | 7.8 | 2018-01-24 | FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges. |
CVE-2017-14030 | High | 7.8 | 2018-01-12 | An issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation vulnerability could allow an authorized user with file access to es… |
CVE-2017-14019 | Medium | 6.7 | 2017-10-19 | An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has bee… |
CVE-2017-15383 | High | 7.8 | 2017-10-16 | Nero 7.10.1.0 has an unquoted BINARY_PATH_NAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILES(x86)%\Nero directory. |
CVE-2017-12730 | High | 7.8 | 2017-10-06 | An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior. Application services utilize unquoted search path elements, which coul… |
CVE-2017-13993 | High | 7.8 | 2017-10-05 | An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior versions. An uncontrolled… |
CVE-2017-3757 | High | 7.8 | 2017-08-29 | An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks (not Think… |
CVE-2017-9644 | High | 7.0 | 2017-08-25 | An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteSc… |
CVE-2017-3751 | High | 7.8 | 2017-08-10 | An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This c… |
CVE-2017-9247 | High | 7.8 | 2017-08-02 | Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) with build ID < 4657 allows local users to lau… |
CVE-2017-7180 | High | 7.3 | 2017-06-08 | Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented "Block applications" design… |
CVE-2017-3005 | High | 7.8 | 2017-04-12 | Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have an unquoted search path vulnerability. |
CVE-2017-5873 | Medium | 6.7 | 2017-04-11 | Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executab… |
CVE-2016-8225 | High | 7.8 | 2017-01-26 | Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with eleva… |
CVE-2016-6935 | High | 7.8 | 2016-10-13 | Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.8.0.310 on Windows allows local users to gain privileges via a… |
CVE-2016-5793 | High | 8.8 | 2016-09-24 | Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in… |
CVE-2015-4173 | | 2015-08-26 | Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmw… | |
CVE-2014-5455 | Medium | 5.3 | 2014-08-25 | Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allo… |
CVE-2014-0759 | Medium | 5.9 | 2014-02-28 | Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Troja… |
CVE-2013-1609 | High | 7.8 | 2013-03-26 | Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vault (EV) for File Sy… |