The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
427 vulnerabilities with CWE-428
CVE-2020-9292
CRITICAL
FortiSIEM Windows Agent - Privilege Escalation
CVSS 9.8
CVE-2020-5569
HIGH
HDD Password tool <1.20.6620 - Path Traversal
CVSS 8.4
CVE-2020-7275
MEDIUM
McAfee ENS <10.7.0 - Code Injection
CVSS 4.8
CVE-2020-8327
HIGH
Lenovo Vantage <10.2003.10.0 - Privilege Escalation
CVSS 7.3
CVE-2020-1988
MEDIUM
Palo Alto Networks GlobalProtect Agent <5.0.5-4.1.13 - Privilege Es...
CVSS 4.2
CVE-2020-0546
HIGH
Intel Optane DC Persistent Memory Mod... - Denial of Service
CVSS 7.8
CVE-2020-0507
MEDIUM
Intel Graphics Driver < 15.33.49.5100 - Authenticated Denial of Service via Unquoted Service Path
CVSS 4.4
CVE-2020-7252
MEDIUM
McAfee Data eXchange Layer < 6.0.0 - Unquoted Service Path Arbitrary Code Execution
CVSS 4.2
CVE-2019-25345
HIGH
Realtek IIS Codec Service 6.4.10041.133 - Code Injection
CVSS 7.8
CVE-2019-25310
HIGH
ActiveFax Server <6.92 Build 0316 - Code Injection
CVSS 7.8
CVE-2019-25309
HIGH
Zilab Remote Console Server 3.2.9 - Privilege Escalation
CVSS 7.8
CVE-2019-25308
HIGH
Mikogo <5.2.2.150317 - Code Injection
CVSS 7.8
CVE-2019-25307
HIGH
WorkgroupMail 7.5.1 - Code Injection
CVSS 7.8
CVE-2019-25306
HIGH
BlackMoon FTP Server 3.1.2.1731 - Privilege Escalation
CVSS 7.8
CVE-2019-25305
HIGH
JumpStart 0.6.0.0 - Unquoted Service Path Privilege Escalation via jswpbapi Service
CVSS 7.8
CVE-2019-25304
HIGH
SecurOS Enterprise 10.2 - Privilege Escalation
CVSS 7.8
CVE-2019-25302
HIGH
Acer Launch Manager 6.1.7600.16385 - Privilege Escalation
CVSS 7.8
CVE-2019-25293
HIGH
BlueStacks App Player 2.4.44.62.57 - Local Privilege Escalation
CVSS 7.8
CVE-2019-25292
HIGH
Alps HID Monitor Service 8.1.0.10 - Code Injection
CVSS 7.8
CVE-2019-25266
HIGH
Wondershare Application Framework Service 2.4.3.231 - Code Injection
CVSS 7.8
CVE-2019-25288
HIGH
Wacom WTabletService 6.6.7-3 - Code Injection
CVSS 7.8
CVE-2019-25287
HIGH
Adaware Web Companion 4.8.2078.3950 - Code Injection
CVSS 7.8
CVE-2019-25286
HIGH
GCaf 3.0 - Unquoted Service Path in gbClientService
CVSS 7.8
CVE-2019-25285
HIGH
Alps Pointing-device Controller 8.1202.1711.04 - Code Injection
CVSS 7.8
CVE-2019-25283
HIGH
Shrew Soft VPN Client 2.2.2 - Privilege Escalation
CVSS 7.8
Details
Vulnerabilities
427