Lucene search
K

1059 matches found

Positive Technologies
Positive Technologies
added 2026/01/26 12:0 a.m.4 views

PT-2026-4783

IDT PC Audio 1.0.6499.0 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the STacSV service to inject malicious code that would execute with LocalSystem account...

8.5CVSS6.2AI score0.0013EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/25 2:1 p.m.36 views

CVE-2020-36937 MEMU PLAY 3.7.0 - 'MEmusvc' Unquoted Service Path

Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with elevated LocalSystem...

8.5CVSS0.00119EPSS
Exploits0References3
CVE
CVE
added 2026/01/25 2:1 p.m.11 views

CVE-2020-36937

The CVE-2020-36937 entry concerns Microvirt MEMU Play 3.7.0, where the MEmusvc Windows service has an unquoted service path. This allows a local attacker to potentially execute arbitrary code by injecting a malicious executable placed in the unquoted path, with elevated LocalSystem privileges. Do...

8.5CVSS5.9AI score0.00119EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/25 2:0 p.m.37 views

CVE-2020-36934 Deep Instinct Windows Agent 1.2.24.0 - 'DeepNetworkService' Unquoted Service Path

Deep Instinct Windows Agent 1.2.24.0 contains an unquoted service path vulnerability in the DeepNetworkService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepNetworkService.exe to inject...

8.5CVSS0.00152EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/25 2:0 p.m.3 views

EUVD-2026-4640

Deep Instinct Windows Agent 1.2.24.0 contains an unquoted service path vulnerability in the DeepNetworkService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepNetworkService.exe to inject...

8.5CVSS5.7AI score0.00152EPSS
Exploits0References6
EUVD
EUVD
added 2026/01/25 2:0 p.m.4 views

EUVD-2026-4631

HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service configuration. Attackers can exploit the unquoted binary path to inject and execute malicious code with elevated LocalSystem privileges...

8.5CVSS5.7AI score0.00154EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/01/25 2:0 p.m.3 views

CVE-2020-36933 IPTInstaller 4.0.9 - 'PassThru Service' Unquoted Service Path

HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service configuration. Attackers can exploit the unquoted binary path to inject and execute malicious code with elevated LocalSystem privileges...

8.5CVSS6AI score0.00154EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/25 2:0 p.m.2 views

CVE-2020-36933

HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service configuration. Attackers can exploit the unquoted binary path to inject and execute malicious code with elevated LocalSystem privileges...

8.5CVSS6AI score0.00154EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/25 12:0 a.m.4 views

PT-2026-4655

Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with elevated LocalSystem...

8.5CVSS5.9AI score0.00119EPSS
Exploits0References4
NVD
NVD
added 2026/01/23 5:15 p.m.4 views

CVE-2021-47890

LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to place malicious executables in intermediate directories, potentially gaining elevated system access during service startup...

8.5CVSS0.0012EPSS
Exploits0References4
CVE
CVE
added 2026/01/23 4:47 p.m.7 views

CVE-2021-47898

CVE-2021-47898 affects Epson USB Display 1.6.0.0, with an unquoted service path in the EMP_UDSA service running as LocalSystem. The vulnerability allows attackers to drop executables in unquoted/intermediate directories to gain elevated system access, as described in public advisories and the NVD...

8.5CVSS5.4AI score0.00121EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/23 4:47 p.m.3 views

CVE-2021-47898

Epson USB Display 1.6.0.0 contains an unquoted service path vulnerability in the EMPUDSA service running with LocalSystem privileges. Attackers can exploit the unquoted path by placing malicious executables in intermediate directories to gain elevated system access...

8.5CVSS5.9AI score0.00121EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/01/23 4:47 p.m.29 views

CVE-2021-47898 Epson USB Display 1.6.0.0 Unquoted Service Path Vulnerability

Epson USB Display 1.6.0.0 contains an unquoted service path vulnerability in the EMPUDSA service running with LocalSystem privileges. Attackers can exploit the unquoted path by placing malicious executables in intermediate directories to gain elevated system access...

8.5CVSS0.00121EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/23 4:47 p.m.28 views

CVE-2021-47896 PDFCOMPLETE Corporate Edition 4.1.45 - 'pdfcDispatcher' Unquoted Service Path

PDF Complete Corporate Edition 4.1.45 contains an unquoted service path vulnerability in the pdfcDispatcher service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in the service binary location to inject malicious executables that will b...

8.5CVSS0.00123EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/23 4:47 p.m.2 views

CVE-2021-47896

PDF Complete Corporate Edition 4.1.45 contains an unquoted service path vulnerability in the pdfcDispatcher service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in the service binary location to inject malicious executables that will b...

8.5CVSS6.1AI score0.00123EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/01/23 4:47 p.m.26 views

CVE-2021-47890 LogonExpert 8.1 - 'LogonExpertSvc' Unquoted Service Path

LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to place malicious executables in intermediate directories, potentially gaining elevated system access during service startup...

8.5CVSS0.0012EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/23 4:47 p.m.3 views

CVE-2021-47890

LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to place malicious executables in intermediate directories, potentially gaining elevated system access during service startup...

8.5CVSS5.9AI score0.0012EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/23 12:0 a.m.5 views

PT-2026-4512

Name of the Vulnerable Software and Affected Versions PDF Complete Corporate Edition version 4.1.45 Description The software contains an unquoted service path issue in the pdfcDispatcher service. This allows local attackers to potentially execute arbitrary code. Exploitation involves leveraging t...

8.5CVSS5.8AI score0.00123EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/01/23 12:0 a.m.3 views

PT-2026-4514

Name of the Vulnerable Software and Affected Versions Epson USB Display version 1.6.0.0 Description The software contains an unquoted service path vulnerability within the EMP UDSA service, which operates with LocalSystem privileges. This allows attackers to potentially gain elevated system acces...

8.5CVSS5.3AI score0.00121EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/01/23 12:0 a.m.4 views

PT-2026-4506

Name of the Vulnerable Software and Affected Versions LogonExpert version 8.1 Description LogonExpert 8.1 has an unquoted service path issue within the LogonExpertSvc service, which operates with LocalSystem privileges. This allows attackers to potentially place malicious executables in...

8.5CVSS5.3AI score0.0012EPSS
Exploits0References6
Rows per page
Query Builder