23241 matches found
PT-2026-3831
eBeam Interactive Suite 3.6 contains an unquoted service path vulnerability in the eBeam Stylus Driver service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:Program Files x86LuidiaeBeam Stylus Driver to inject malicious...
IBM Business Automation Workflow security vulnerabilities
IBM Business Automation Workflow is a workflow automation solution developed by the American multinational company International Business Machines IBM. This product is primarily used for workflow management and compliance control, and it features workflow visibility and scalability. Versions of I...
CVE-2021-47826
CVE-2021-47826 affects Acer Backup Manager 3.0.0.99: an unquoted service path in the NTI IScheduleSvc service allows local users to potentially execute arbitrary code with LocalSystem privileges. The unquoted path is in C:\Program Files (x86)\NTI\Acer Backup Manager. Exploitation would require lo...
CVE-2021-47825 Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service Path
Acer Updater Service 1.2.3500.0 contains an unquoted service path vulnerability that allows local users to execute code with elevated system privileges. Attackers can exploit the unquoted path in C:\Program Files\Acer\Acer Updater\ to inject malicious executables that will run with LocalSystem...
CVE-2021-47823
Acer ePowerSvc 6.0.3008.0 contains an unquoted service path vulnerability in its service configuration. The unquoted path could allow a local attacker to inject and execute code with LocalSystem privileges during service startup. Reported impact includes potential for full local privilege escalat...
CVE-2021-47806
Dup Scout 13.5.28 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Dup Scout Server\bin\dupscts.exe' to inject malicious executables...
PT-2026-3279
Acer ePowerSvc 6.0.3008.0 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute with LocalSystem...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001032)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001032 advisory. The hoststart function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003683)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003683 advisory. The Linux kernel through 5.3.13 has a startoffset+size Integer Overflow in cpia2remapbuffer in drivers/media/usb/cpia2/cpia2core.c because cpia2 has its own mmap...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001156)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001156 advisory. The blkcginitqueue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to cause a denial of service double free or possibly have...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003795)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003795 advisory. The Linux kernel through 5.3.13 has a startoffset+size Integer Overflow in cpia2remapbuffer in drivers/media/usb/cpia2/cpia2core.c because cpia2 has its own mmap...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000831)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000831 advisory. Buffer overflow in the nfs4getacluncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service memory...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003675)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003675 advisory. Memory leak in the hwsimnewradionl function in drivers/net/wireless/mac80211hwsim.c in the Linux kernel through 4.15.9 allows local users to cause a denial of servic...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001529)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001529 advisory. The cdcparsecdcheader function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003613)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003613 advisory. btrfsfreeextent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfsprintleaf in a certain ENOENT case, which allows local users to obtain...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000974)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000974 advisory. The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allow...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003624)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003624 advisory. There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000850)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000850 advisory. The InfiniBand IB implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux RHEL 6 does not properly restrict use of User Verbs f...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001273)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001273 advisory. The Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs such as /bin/su because installexeccreds is called too late in loadelfbinary in...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000710)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000710 advisory. The memory resource controller aka memcg in the Linux kernel allows local users to cause a denial of service deadlock by spawning new processes within a...