Unquoted Search Path or Element

Every one of the 449 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-co…CVE-2023-38408CVSS 9.8 · 80% likely
2. Unquoted service path vulnerability on VeyonCVE-2020-15261veyon · CVSS 8 · 11% likely
3. An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized, but non-privileged…CVE-2018-10619ICS-CERT · 2.7% likely

   ICS-CERT

4. An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the FortiCli…CVE-2019-17658Fortinet · 2.2% likely

   Fortinet

5. Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-4…CVE-2015-41732.1% likely
6. Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution VulnerabilityCVE-2023-39464Triangle MicroWorks · CVSS 7.2 · 2.0% likely

   Triangle MicroWorks

7. Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows.CVE-2019-166472.0% likely
8. An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior versions. An uncontrolled search path element…CVE-2017-13993i-SENS, Inc. SmartLog Diabetes Management Software · 1.8% likely
9. An issue was discovered in the CheckUser extension for MediaWiki through 1.35.2. MediaWiki usernames with trailing whitespace could be stored in the cu_log database table such tha…CVE-2021-315531.7% likely
10. SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This…CVE-2020-5147SonicWall · 1.7% likely

    SonicWall

11. An unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an attacker to gain elevated privileges via the AoWinAgt executable service path.CVE-2020-9292Fortinet FortiSIEMWindowsAgent · 1.6% likely
12. A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version 1.4.33. This vulnerability may allow a local attacker to e…CVE-2019-18915HP System Event Utility · 1.5% likely
13. Windows service and uninstall paths are not quoted when BIND is installedCVE-2017-3141ISC · CVSS 7.2 · 1.4% likely

    ISC

14. An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior…CVE-2017-9644Automated Logic Corporation WebCTRL, i-VU, SiteScan · 1.4% likely
15. An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 (32bit), Windows 7 (64bit), Windows 8 (64bit), Windows 8.1 (64bit), Windo…CVE-2018-16183Panasonic Corporation · 1.3% likely

    Panasonic

16. Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or ElementCVE-2020-14521Mitsubishi Electric · CVSS 8.3 · 1.3% likely

    Mitsubishi Electric

17. An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10.00 ? R3.02.00 and R…CVE-2019-6008Yokogawa Electric Corporation · 1.3% likely

    Yokogawa Electric Corporation

18. The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.Metrics.exe. This may allow remote auth…CVE-2020-276451.2% likely
19. Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previou…CVE-2019-8459Check Point · 1.2% likely

    Check Point

20. The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.Metrics.exe. This may allow remote auth…CVE-2020-276441.2% likely
21. Path Traversal VulnerabilityCVE-2026-15358Zohocorp · CVSS 7.5 · 1.1% likely

    Zoho (ManageEngine)

22. Wondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path vulnerability via the component NativePushService. This vulnerability allows attacker…CVE-2023-31747CVSS 7.8 · 1.1% likely
23. IOBit IOTransfer V4 is vulnerable to Unquoted Service Path.CVE-2022-37197CVSS 7.8 · 1.1% likely
24. In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An attacker would require write permissions to the root level of the OS drive (C:\) t…CVE-2022-279051.1% likely
25. Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Unquoted Search Path vulnerability. Successful exploitation could lead to local privile…CVE-2018-4873Creative Cloud Desktop Application 4.4.1.298 and earlier versions · 1.1% likely
26. Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented "Block applications" design goal. The local atta…CVE-2017-71801.1% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.