Wise Care 365 code-related vulnerabilities

Wise Care 365 is a software developed by the Chinese company Wise Care, designed for use with Windows systems to clean registry entries and junk files. Version 5.6.7.568 of Wise Care 365 contains a code vulnerability. This vulnerability stems from the WiseBootAssistant service having a service pa...

Flexense Sync Breeze security vulnerability

Flexense Sync Breeze is a file synchronization tool developed by Flexense Corporation. The version 13.6.18 of Flexense Sync Breeze contains a security vulnerability. This vulnerability stems from the Windows service configuration, where a service path without quotes was used, potentially allowing...

WibuKey Runtime security vulnerabilities

WibuKey Runtime is a component provided by the German company WibuKey, which offers software encryption protection solutions. Version 6.51 of WibuKey Runtime contains a security vulnerability. This vulnerability stems from the WkSvW32.exe service having a service path that lacks quotes, which may...

Acer Updater Service code-related vulnerabilities

The Acer Updater Service is a software update tool provided by Acer, a company based in Taiwan, China. Version 1.2.3500.0 of the Acer Updater Service contains a code vulnerability. This vulnerability stems from an issue with the service path, where a service path without quotes was used, which ma...

Flexense Disk Sorter Server code-related vulnerabilities

Flexense Disk Sorter Server is a file management and disk space analysis server provided by Flexense Corporation. Version 13.6.12 of Flexense Disk Sorter Server contains a code vulnerability caused by an unquoted service path in the binary path configuration, which may allow arbitrary code to be...

Brother BRPrint Auditor security vulnerability

Brother BRPrint Auditor is a printer status monitoring software developed by the American company Brother. Version 3.0.7 of Brother BRPrint Auditor contains a security vulnerability. This vulnerability stems from the service path in the Windows service configuration, which lacks quotation marks,...

CVE-2021-47780: Unquoted Search Path or Element

Macro Expert 4.7 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the improperly configured service path to inject malicious executables that will be run with LocalSystem permission...

PT-2026-3299

Spy Emergency 25.0.650 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted file paths in SpyEmergencyHealth.exe and SpyEmergencySrv.exe to inject malicious co...

PT-2026-3287

Sandboxie Plus 0.7.4 contains an unquoted service path vulnerability in the SbieSvc service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem...

CVE-2021-47810 WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path

WibuKey Runtime 6.51 contains an unquoted service path vulnerability in the WkSvW32.exe service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\PROGRAM FILES X86\WIBUKEY\SERVER\WkSvW32.exe' to inject malicious executables and...

CVE-2021-47810

WibuKey Runtime 6.51 contains an unquoted service path vulnerability in the WkSvW32.exe service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\PROGRAM FILES X86\WIBUKEY\SERVER\WkSvW32.exe' to inject malicious executables and...

CVE-2021-47810

CVE-2021-47810 concerns WibuKey Runtime 6.51, where the unquoted service path in the WkSvW32.exe Windows service (C:\PROGRAM FILES (X86)\WIBUKEY\SERVER\WkSvW32.exe) can be abused by local attackers to inject a malicious executable and escalate privileges. The NVD entry reports a local, low-privil...

CVE-2021-47809 Disk Sorter Enterprise 13.6.12 - 'Disk Sorter Enterprise' Unquoted Service Path

Disk Sorter Enterprise 13.6.12 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Sorter Enterprise\bin\disksrs.exe' to inject...

CVE-2021-47809

Disk Sorter Enterprise 13.6.12 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Sorter Enterprise\bin\disksrs.exe' to inject...

CVE-2021-47809 Disk Sorter Enterprise 13.6.12 - 'Disk Sorter Enterprise' Unquoted Service Path

Disk Sorter Enterprise 13.6.12 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Sorter Enterprise\bin\disksrs.exe' to inject...

CVE-2021-47809

Disk Sorter Enterprise 13.6.12 is affected by an unquoted service path vulnerability in its Windows service configuration. The issue arises from the unquoted path 'C:\Program Files\Disk Sorter Enterprise\bin\disksrs.exe', which could allow a local attacker to inject a malicious executable and esc...

CVE-2021-47807

CVE-2021-47807 affects Sync Breeze 13.6.18, where an unquoted Windows service path in the program files directory allows a local attacker to inject a malicious executable and escalate privileges. The vulnerability stems from the unquoted service path in the service configuration, enabling local e...

CVE-2021-47807 Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path

Sync Breeze 13.6.18 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in service binaries located in 'Program Files' directories to inject malicious...

CVE-2021-47807

Sync Breeze 13.6.18 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in service binaries located in 'Program Files' directories to inject malicious...

CVE-2021-47807 Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path

Sync Breeze 13.6.18 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in service binaries located in 'Program Files' directories to inject malicious...