CWE-284 (2634) CWE-79 (1821) CWE-416 (1289) CWE-862 (1175) CWE-89 (1097) CWE-22 (1023) CWE-125 (880) CWE-200 (847) CWE-306 (838) CWE-122 (830) CWE-20 (795) CWE-78 (710) CWE-918 (689) CWE-787 (681) CWE-94 (641) CWE-863 (617) CWE-74 (600) CWE-639 (542) CWE-400 (530) CWE-269 (501) CWE-119 (494) CWE-502 (470) CWE-770 (440) CWE-287 (431) CWE-121 (406) CWE-77 (373) CWE-190 (367) CWE-362 (323) CWE-352 (276) CWE-285 (243)

CWE-428

10 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2023-53965 high 8.6 0.0024 2025-12-22 SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-
CVE-2016-20057 high 8.5 0.0061 2026-04-04 NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGReg
CVE-2016-20058 high 8.5 0.0072 2026-04-04 Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiA
CVE-2026-25865 high 8.5 0.0020 2026-06-18 Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows
CVE-2026-7280 high 8.4 0.0012 2026-04-28 AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged
CVE-2026-66839 high 8.4 0.0020 2026-08-05 NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path o
CVE-2026-97860 high 8.4 — 2026-10-29 YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file
CVE-2026-8864 high 7.3 0.0014 2026-06-30 The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Cont
CVE-2026-9128 high 7.3 0.0017 2026-07-14 A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search
CVE-2026-18755 high 7.3 0.0019 2026-08-04 A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to