The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
427 vulnerabilities with CWE-428
CVE-2019-25281
HIGH
NCP Secure Entry Client 9.2 - Code Injection
CVSS 7.8
CVE-2019-25276
HIGH
Studio 5000 Logix Designer 30.01.00 - Privilege Escalation
CVSS 7.8
CVE-2019-25275
HIGH
BartVPN 1.2.2 - Unquoted Service Path Privilege Escalation via BartVPNService
CVSS 7.8
CVE-2019-25274
HIGH
ProShow Producer 9.0.3797 - Code Injection
CVSS 7.8
CVE-2019-25273
HIGH
Easy-Hide-IP 5.0.0.3 - Code Injection
CVSS 7.8
CVE-2019-25272
HIGH
TexasSoft CyberPlanet 6.4.131 - Code Injection
CVSS 7.8
CVE-2019-25271
HIGH
NETGATE Data Backup 3.0.620 - Code Injection
CVSS 7.8
CVE-2019-25269
HIGH
Amiti Antivirus <25.0.640 - Code Injection
CVSS 7.8
CVE-2019-25267
HIGH
Wing FTP Server 6.0.7 - Privilege Escalation
CVSS 7.8
CVE-2019-25261
HIGH
AnyDesk 5.4.0 - Unquoted Service Path Privilege Escalation
CVSS 7.8
CVE-2019-25231
HIGH
devolo dLAN Cockpit 4.3.1 - Code Injection
CVSS 8.4
CVE-2019-19705
HIGH
Realtek Audio Drivers - DLL Preloading
CVSS 7.8
CVE-2019-17658
CRITICAL
FortiClient Windows <6.2.2 - Privilege Escalation
CVSS 9.8
CVE-2019-18915
HIGH
HP System Event Utility <1.4.33 - RCE
CVSS 7.8
CVE-2019-20357
HIGH
Trend Micro Security <2019-2020 - RCE
CVSS 7.8
CVE-2019-20362
HIGH
Teradici PCoIP Agent <19.08.1 - Path Traversal
CVSS 7.8
CVE-2019-6008
HIGH
Multiple Yokogawa products - Privilege Escalation
CVSS 7.8
CVE-2019-7487
HIGH
SonicOS SSLVPN NACagent <3.5 - Code Injection
CVSS 7.8
CVE-2019-18245
HIGH
Reliable Controls LicenseManager <3.4 - Code Injection
CVSS 7.8
CVE-2019-7201
HIGH
QNAP NetBak Replicator <4.5.12.1108 - Privilege Escalation
CVSS 7.8
CVE-2019-16647
HIGH
Maxthon <5.2.7 - Privilege Escalation
CVSS 7.2
CVE-2019-6145
MEDIUM
Forcepoint VPN Client < 6.6.1 - Local Privilege Escalation via Unquoted Search Path
CVSS 6.7
CVE-2019-14685
HIGH
Trend Micro Security <15.0 - Privilege Escalation
CVSS 7.8
CVE-2019-7590
MEDIUM
ExacqVision Server <9.8 - Privilege Escalation
CVSS 6.7
CVE-2019-8459
CRITICAL
Check Point Endpoint Security Client <E80.83 - Path Traversal
CVSS 9.8
Details
Vulnerabilities
427