RATOC RAID Monitoring Manager for Windows 代码问题漏洞

RATOC RAID Monitoring Manager for Windows is a software from RATOC RAID Japan that has the ability to monitor and manage its supported RAID hard disk enclosures. A code issue vulnerability exists in RATOC RAID Monitoring Manager for Windows that stems from an unquoted Windows service path that...

CVE-2025-57140

rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path...

CVE-2025-57140

The business intelligence system rsbi-pom version 4.7 is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. The vulnerability is located in the /bi/service/model/DatasetService path (API endpoint). This flaw could allow an attacker to execute un...

CVE-2025-39246

There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially enable escalation of privilege via local access...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA open source. A security vulnerability exists in O2OA version 10.0-410 and earlier, which originates from cross-site scripting due to incorrect manipulation of parameters in the file /xprogramcenter/jaxrs/agent...

CVE-2025-39246

There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-39246

There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-39246

CVE-2025-39246 describes an unquoted service path vulnerability in HikCentral FocSign. An authenticated user could potentially escalate privileges via local access. Affected: HikCentral FocSign (some versions); root cause: unquoted service path. Impact: local privilege escalation. Public details ...

CVE-2025-39246

There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-35171

Name of the Vulnerable Software and Affected Versions: HikCentral FocSign affected versions not specified Description: An unquoted service path vulnerability exists in HikCentral FocSign. This could allow an authenticated user to potentially escalate privileges via local access. Recommendations: ...

PT-2025-35186

Name of the Vulnerable Software and Affected Versions: E4 Sistemas Mercatus ERP version 2.00.019 Description: A security flaw exists in E4 Sistemas Mercatus ERP 2.00.019, involving improper control of resource identifiers due to manipulation of an unknown function within the...

Hikvision HikCentral FocSign 安全漏洞

Hikvision HikCentral FocSign is a software from China's Hikvision Hikvision that integrates information dissemination, face time and attendance, and passenger flow statistics. A security vulnerability exists in Hikvision HikCentral FocSign that stems from an unreferenced service path and could le...

Mercatus ERP 安全漏洞

Mercatus ERP is an enterprise resource planning system from Mercatus Inc. in the United States. A security vulnerability exists in Mercatus ERP version 2.00.019, which stems from an improperly controlled resource identifier in file /basico/webservice/imprimir-danfe/id...

CVE-2025-39246: Unquoted Search Path or Element

There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially enable escalation of privilege via local access...

Linux Distros Unpatched Vulnerability : CVE-2021-43455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Unquoted Service Path vulnerability exists in FreeLAN 2.2 via a specially crafted file in the FreeLAN Service path. CVE-2021-43455 Note that Nessus relies on...

CVE-2025-57699

Western Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with the SYSTEM privilege...

CVE-2025-57699

Western Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with the SYSTEM privilege...

CVE-2025-57699

The vulnerability CVE-2025-57699 affects Western Digital Kitfox for Windows. The issue is an unquoted file path in a Windows service, enabling a user with write access to the system drive root to execute arbitrary code with SYSTEM privileges. Root cause: unquoted service path. Affected products/v...

CVE-2025-57699

Western Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with the SYSTEM privilege...

Western Digital Kitfox registers a Windows service with an unquoted file path

Overview Western Digital Kitfox for Windows provided by Western Digital Corporation contains the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-57699 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with th...