The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
427 vulnerabilities with CWE-428
CVE-2021-43456
HIGH
Rumble Mail Server 0.51.3135 - Buffer Overflow
CVSS 7.8
CVE-2021-43455
HIGH
freelan 2.2 - Unquoted Service Path
CVSS 7.8
CVE-2021-43454
HIGH
AnyTXT Searcher <1.2.394 - Buffer Overflow
CVSS 7.8
CVE-2021-45819
MEDIUM
Wordline HIDCCEMonitorSVC <5.2.4.3 - Privilege Escalation
CVSS 6.4
CVE-2021-46368
HIGH
TRIGONE Remote System Monitor <3.61 - Privilege Escalation
CVSS 7.8
CVE-2021-29218
MEDIUM
HPE Agentless Mgmt Svcs <1.44.0.0 - Privilege Escalation
CVSS 6.7
CVE-2021-45460
HIGH
SICAM PQ Analyzer Firmware < 3.18 - Unquoted Service Path Hijacking
CVSS 8.1
CVE-2021-25269
MEDIUM
Sophos Intercept X Advanced <2.0.23 - Privilege Escalation
CVSS 4.4
CVE-2021-23197
MEDIUM
Gallagher Command Centre <8.50.2048 - RCE
CVSS 5.2
CVE-2021-33095
HIGH
Intel(R) NUC M15 Laptop Kit Keyboard LED Service <1.0.0.4 - Privile...
CVSS 7.8
CVE-2021-42563
HIGH
NI Service Locator <18.0 - Privilege Escalation
CVSS 7.8
CVE-2021-35231
MEDIUM
Kiwi Syslog Server - Privilege Escalation
CVSS 6.7
CVE-2021-40683
HIGH
Akamai EAA Client <2.3.1-2.5.3 - Path Traversal
CVSS 7.8
CVE-2021-35056
MEDIUM
Unisys Stealth <5.1.025.0, <6.0.055.0 - Info Disclosure
CVSS 6.7
CVE-2021-35469
HIGH
Lexmark Printer Software - Privilege Escalation
CVSS 7.8
CVE-2021-0112
HIGH
Intel Unite(R) Client <4.2.25031 - Privilege Escalation
CVSS 7.3
CVE-2021-31776
HIGH
Aviatrix VPN Client < 2.14.14 - Local Privilege Escalation via Unquoted Search Path
CVSS 7.8
CVE-2021-31553
MEDIUM
MediaWiki < 1.35.2 - Denial of Service via CheckUser Extension Username Handling
CVSS 6.5
CVE-2021-27608
HIGH
SAPSetup <9.0 - Privilege Escalation
CVSS 7.5
CVE-2021-23879
MEDIUM
McAfee Endpoint Product Removal <21.2 - RCE
CVSS 6.7
CVE-2021-21292
MEDIUM
Traccar <4.12 - Privilege Escalation
CVSS 5.5
CVE-2020-37247
HIGH
Kite 4.2.0.1 U1 Unquoted Service Path Privilege Escalation
CVSS 7.8
CVE-2020-37232
HIGH
Advanced System Care Service 13.0.0.157 Unquoted Service Path Privilege Escalation
CVSS 7.8
CVE-2020-37231
HIGH
Privacy Drive 3.17.0 Unquoted Service Path Privilege Escalation
CVSS 7.8
CVE-2020-37230
HIGH
Syncplify.me Server! 5.0.37 Unquoted Service Path Privilege Escalation
CVSS 7.8
Details
Vulnerabilities
427