Lucene search
+L

3551 matches found

CNNVD
CNNVD
•added 2026/04/04 12:00 a.m.•21 views

NETGATE Registry Cleaner 代码问题漏洞

NETGATE Registry Cleaner is a system optimization and registry cleaning tool developed by the Slovak company NETGATE. NETGATE Registry Cleaner Build 16.0.205 contains a code vulnerability. This vulnerability stems from the NGRegClnSrv service having a service path that lacks quotes, which may all...

8.5CVSS7.4AI score0.00606EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/04 12:00 a.m.•2 views

CVE-2016-20058: Unquoted Search Path or Element

Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted service path and trigger service restart or...

8.5CVSS8AI score0.00718EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2026/03/27 5:09 p.m.•15 views

CVE-2025-41359

Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files x86\shttpsmg\http.exe service'. This misconfiguration allows a local attacker to place a malicious executable with the same name in a higher priority...

8.5CVSS6.1AI score0.00155EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/26 3:30 p.m.•15 views

EUVD-2025-209051

Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files x86\shttpsmg\http.exe service'. This misconfiguration allows a local attacker to place a malicious executable with the same name in a higher priority...

8.5CVSS6.1AI score0.00155EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/26 1:16 p.m.•11 views

CVE-2025-41359

Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files x86\shttpsmg\http.exe service'. This misconfiguration allows a local attacker to place a malicious executable with the same name in a higher priority...

8.5CVSS0.00155EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/26 12:30 p.m.•11 views

EUVD-2025-209046

Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files x86\shttpsmg\http.exe service'. This misconfiguration allows a local attacker to place a malicious executable with the same name in a higher priority...

8.7CVSS6.1AI score0.00613EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/26 12:20 p.m.•7 views

CVE-2025-41359 Multiple vulnerabilities in Small HTTP server by Smallsrv

Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files x86\shttpsmg\http.exe service'. This misconfiguration allows a local attacker to place a malicious executable with the same name in a higher priority...

8.5CVSS6.1AI score0.00155EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/26 12:20 p.m.•37 views

CVE-2025-41359 Multiple vulnerabilities in Small HTTP server by Smallsrv

Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files x86\shttpsmg\http.exe service'. This misconfiguration allows a local attacker to place a malicious executable with the same name in a higher priority...

8.5CVSS0.00155EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/26 12:20 p.m.•22 views

CVE-2025-41359

The CVE-2025-41359 vulnerability affects Small HTTP Server 3.06.36, due to an unquoted service path for the executable at C:\Program Files (x86)\shttps_mg\http.exe. This misconfiguration enables a local attacker to place a higher-priority malicious executable with the same name, causing the servi...

8.5CVSS6.1AI score0.00155EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/03/26 12:16 p.m.•16 views

CVE-2025-41368

Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in '/' allows remote users to bypass the intended restrictions of SecurityManager and display any file if they have the appropriate permissions outside the document root configured on the server...

8.7CVSS0.00613EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/26 11:37 a.m.•26 views

CVE-2025-41368

CVE-2025-41368 affects Small HTTP Server v3.06.36 due to an unquoted service path in the executable at C:\Program Files (x86)\shttps_mg\http.exe. This misconfiguration enables a local attacker to place a malicious binary with the same name in a higher-priority directory, causing the service to ru...

8.7CVSS5.9AI score0.00613EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/03/26 11:37 a.m.•36 views

CVE-2025-41368 Multiple vulnerabilities in Small HTTP server by Smallsrv

Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in '/' allows remote users to bypass the intended restrictions of SecurityManager and display any file if they have the appropriate permissions outside the document root configured on the server...

8.7CVSS0.00613EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/26 12:00 a.m.•20 views

PT-2026-28284

Name of the Vulnerable Software and Affected Versions Small HTTP Server version 3.06.36 Description The issue involves an unquoted service path in Small HTTP Server. Specifically, the vulnerability affects the executable located at 'C:Program Files x86shttps mghttp.exe service'. This...

8.5CVSS6.1AI score0.00155EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•19 views

SANYO DENKI SANUPS SOFTWARE 代码问题漏洞

SANYO DENKI SANUPS SOFTWARE is a software developed by SANYO DENKI Corporation in Japan. It is used for monitoring UPS devices, managing their operation, and analyzing power supply status. SANYO DENKI SANUPS SOFTWARE has code vulnerabilities; these vulnerabilities stem from the Windows service fi...

8.4CVSS6.9AI score0.00198EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/03/10 9:35 a.m.•45 views

CVE-2026-3315 Local Privilege Escalation Due to Writable Executable in Privileged Visionline Service Path

Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for Critical Resource vulnerability in ASSA ABLOY Visionline on Windows allows Configuration/Environment Manipulation.This issue affects Visionline: from 1.0 before 1.33...

5.8CVSS0.00157EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/10 9:35 a.m.•7 views

CVE-2026-3315 Local Privilege Escalation Due to Writable Executable in Privileged Visionline Service Path

Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for Critical Resource vulnerability in ASSA ABLOY Visionline on Windows allows Configuration/Environment Manipulation.This issue affects Visionline: from 1.0 before 1.33...

5.8CVSS5.8AI score0.00157EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/10 9:35 a.m.•53 views

CVE-2026-3315

CVE-2026-3315 concerns ASSA ABLOY Visionline on Windows, where incorrect default permissions enable configuration/environment manipulation and lead to execution with unnecessary privileges and improper assignment of permissions to a critical resource. Affected versions are Visionline prior to 1.3...

7.8CVSS5.8AI score0.00157EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/03/08 12:31 a.m.•13 views

EUVD-2026-10197

A security vulnerability has been detected in welovemedia FFmate up to 2.0.15. This vulnerability affects the function Execute of the file /internal/service/ffmpeg/ffmpeg.go. The manipulation leads to argument injection. The attack may be initiated remotely. The exploit has been disclosed publicl...

6.5CVSS5.5AI score0.00393EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/02/28 1:55 a.m.•19 views

CVE-2026-1585

An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a malicious file with the privileges of the affected service...

8.4CVSS7.3AI score0.00124EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/27 12:31 a.m.•16 views

EUVD-2026-8927

An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a malicious file with the privileges of the affected service...

8.4CVSS5.6AI score0.00124EPSS
SaveExploits0References5
Rows per page
Query Builder