3625 matches found
CVE-2022-33035
XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...
CVE-2022-33035
XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...
Design/Logic Flaw
XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...
CVE-2022-33035
XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...
CVE-2022-33035: Uncontrolled Search Path Element
XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...
PT-2022-21660
Name of the Vulnerable Software and Affected Versions XLPD versions 7.0.0094 and below Description The issue allows local users to launch processes with elevated privileges due to an unquoted service path vulnerability. Recommendations For XLPD versions 7.0.0094 and below, at the moment, there is...
NetSarang XLPD 代码问题漏洞
NetSarang XLPD is a remote printing tool from NetSarang, Inc. It is used to manage an organization's print jobs. An elevation of privilege vulnerability exists in NetSarang XLPD v7.0.0094 and prior versions, which stems from an application containing an un-referenced service path. An attacker can...
CVE-2022-2147
Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0...
CVE-2022-2147
Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0...
CVE-2022-2147
Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0...
Design/Logic Flaw
Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0...
CVE-2022-2147 Unquoted Service Path in Cloudflare WARP for Windows
Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0...
CVE-2022-32128
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /company/service/increment/add/im...
PT-2022-14963
Name of the Vulnerable Software and Affected Versions Cloudflare Warp for Windows versions 2022.2.95.0 through 2022.3.185.0 Description The issue is related to an unquoted service path in Cloudflare Warp for Windows, which enables arbitrary code execution leading to privilege escalation...
HP LaserJet Professional M1210 MFP Series Receive Fax Service Unquoted Service Path
Exploit Title: HP LaserJet Professional M1210 MFP Series Receive Fax Service - Unquoted Service Path Date: 2022-06-06 Exploit Author: Ali Alipour Vendor Homepage: https://support.hp.com/us-en/document/c01998934 Software Link:...
HP LaserJet Professional M1210 MFP Series Receive Fax Service - Unquoted Service Path
Exploit Title: HP LaserJet Professional M1210 MFP Series Receive Fax Service - Unquoted Service Path Exploit Author: Ali Alipour Vendor Homepage: https://support.hp.com/us-en/document/c01998934 Software Link:...
HP LaserJet Professional M1210 MFP Series Receive Fax Service - Unquoted Service Path
Exploit Title: HP LaserJet Professional M1210 MFP Series Receive Fax Service - Unquoted Service Path Date: 2022-06-06 Exploit Author: Ali Alipour Vendor Homepage: https://support.hp.com/us-en/document/c01998934 Software Link:...
CVE-2022-31993
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=deleteservice...