The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
418 vulnerabilities with CWE-428
CVE-2021-47825
HIGH
Acer Updater Service 1.2.3500.0 - Privilege Escalation
CVSS 7.8
CVE-2021-47823
HIGH
Acer ePowerSvc 6.0.3008.0 - Privilege Escalation
CVSS 7.8
CVE-2021-47822
HIGH
DiskBoss Service 12.2.18 - Privilege Escalation
CVSS 7.8
CVE-2021-47810
HIGH
WibuKey Runtime 6.51 - Code Injection
CVSS 7.8
CVE-2021-47809
HIGH
Disk Sorter Enterprise 13.6.12 - Code Injection
CVSS 7.8
CVE-2021-47807
HIGH
Sync Breeze 13.6.18 - Code Injection
CVSS 7.8
CVE-2021-47806
HIGH
Dup Scout 13.5.28 - Code Injection
CVSS 7.8
CVE-2021-47805
HIGH
Disk Savvy 13.6.14 - Code Injection
CVSS 7.8
CVE-2021-47804
HIGH
Wise Care 365 <5.6.7.568 - Code Injection
CVSS 7.8
CVE-2021-47803
HIGH
iFunbox 4.2 - Code Injection
CVSS 7.8
CVE-2021-47792
HIGH
Remote Mouse 4.002 - Privilege Escalation
CVSS 7.8
CVE-2021-47790
HIGH
Active WebCam 11.5 - Code Injection
CVSS 7.8
CVE-2021-47787
HIGH
TotalAV <5.15.69 - Privilege Escalation
CVSS 7.8
CVE-2021-47780
HIGH
Macro Expert 4.7 - Privilege Escalation
CVSS 7.8
CVE-2021-47773
HIGH
Dynojet Power Core 2.3.0 - Code Injection
CVSS 7.8
CVE-2021-47767
HIGH
10-strike Network Inventory Explorer - Privilege Escalation
CVSS 7.8
CVE-2021-47762
HIGH
HTTPDebuggerPro 9.11 - Code Injection
CVSS 7.8
CVE-2021-47739
HIGH
Epic Games Easy Anti-Cheat 4.0 - Code Injection
CVSS 8.4
CVE-2021-26735
MEDIUM
Zscaler Client Connector < 3.6 - Origin Validation Error
CVSS 6.7
CVE-2021-43463
HIGH
Ext2Fsd 0.68 - Buffer Overflow
CVSS 7.8
CVE-2021-43460
HIGH
System Explorer 7.0.0 - Privilege Escalation
CVSS 7.8
CVE-2021-43458
HIGH
Vembu BDR 4.2.0.1 - Unquoted Service Path
CVSS 7.8
CVE-2021-43457
HIGH
bVPN 2.5.1 - Path Traversal
CVSS 7.8
CVE-2021-43456
HIGH
Rumble Mail Server 0.51.3135 - Buffer Overflow
CVSS 7.8
CVE-2021-43455
HIGH
FreeLAN 2.2 - Buffer Overflow
CVSS 7.8
Details
Vulnerabilities
418