The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
418 vulnerabilities with CWE-428
CVE-2025-12507
HIGH
Bizerba Communication Server - Code Injection
CVSS 8.8
CVE-2025-60320
MEDIUM
memoQ 10.1.13.ef1b2b52aae - Privilege Escalation
CVSS 6.7
CVE-2025-57227
HIGH
Kingo ROOT <1.5.8.3353 - Privilege Escalation
CVSS 7.8
CVE-2025-12286
HIGH
VeePN <1.6.2 - Unquoted Search Path
CVSS 7.0
CVE-2025-12247
HIGH
Hasleo Backup Suite <5.2 - Path Traversal
CVSS 7.0
CVE-2025-61865
MEDIUM
I-O DATA DEVICE, INC. - Privilege Escalation
CVSS 6.7
CVE-2025-61871
MEDIUM
BUFFALO INC. NAS Navigator2 - Privilege Escalation
CVSS 6.7
CVE-2025-57714
HIGH
NetBak Replicator <4.5.15.0807 - Code Injection
CVSS 7.8
CVE-2025-43993
HIGH
Dell Wireless 5932e Qualcomm Snapdragon X62 Firmware GNSS/GPS Drive...
CVSS 7.8
CVE-2025-54081
MEDIUM
Sunshine <2025.923.33222 - Path Traversal
CVSS 6.7
CVE-2025-9818
MEDIUM
OMRON UPS - Code Injection
CVSS 6.7
CVE-2025-59307
MEDIUM
RAID Manager - Code Injection
CVSS 6.7
CVE-2025-10199
HIGH
Lizardbyte Sunshine - Privilege Escalation
CVSS 7.8
CVE-2025-58400
MEDIUM
RATOC RAID Monitoring Manager - Code Injection
CVSS 6.7
CVE-2025-39246
MEDIUM
HikCentral FocSign - Privilege Escalation
CVSS 5.3
CVE-2025-5191
HIGH
Moxa's industrial computers - Privilege Escalation
CVE-2025-57699
MEDIUM
Western Digital Kitfox - Privilege Escalation
CVSS 6.7
CVE-2025-9043
MEDIUM
Seagate Toolkit <2.34.0.33 - Privilege Escalation
CVE-2025-8070
CRITICAL
ABP and AES - Privilege Escalation
CVE-2025-0035
HIGH
AMD Cloud Manageability Service - Privilege Escalation
CVSS 7.3
CVE-2025-4540
HIGH
MTSoftware C-Lodop <6.6.1.1 - Unquoted Search Path
CVSS 7.0
CVE-2025-1984
MEDIUM
Xerox Desktop Print Experience - Privilege Escalation
CVSS 5.2
CVE-2025-0884
HIGH
OpenText Service Manager <9.72 - Privilege Escalation
CVE-2025-24831
MEDIUM
Acronis Cyber Protect Cloud Agent <39378 - Privilege Escalation
CVSS 6.6
CVE-2025-21107
HIGH
Dell NetWorker <19.11.0.3 - Code Injection
CVSS 7.8
Details
Vulnerabilities
418