CVE Database

5+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

5 results for "CWE-428"

CVE-2026-66839

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability (CWE-428). An authenticated attacker may exploit this vulnerability to …

Aug 5, 2026

CVE-2025-9818

6.7 MEDIUM

A vulnerability (CWE-428) has been identified in the Uninterruptible Power Supply (UPS) management application provided by OMRON SOCIAL SOLUTIONS Co., Ltd., where the executable file …

Sep 17, 2025

CVE-2025-9043

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as …

Aug 14, 2025

CVE-2024-31201

6.5 MEDIUM

A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation service. Such misconfiguration could be abused in scenarios where incorrect permissions were assigned to the …

Jul 31, 2024

CVE-2024-2747

7.8 HIGH

CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user replaces a trusted file name …

Jun 12, 2024

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Website Scanner Port Scanner

CVE Database

Scan your infrastructure for known CVEs

Patch and protect