3551 matches found
CVE-2021-47890
LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to place malicious executables in intermediate directories, potentially gaining elevated system access during service startup...
CVE-2021-47890 LogonExpert 8.1 - 'LogonExpertSvc' Unquoted Service Path
LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to place malicious executables in intermediate directories, potentially gaining elevated system access during service startup...
CVE-2021-47890
LogonExpert 8.1 is affected by an unquoted service path in the LogonExpertSvc service running with LocalSystem privileges. The underlying issue is an unquoted service path vulnerability that can let an attacker place malicious executables in intermediate directories, potentially gaining elevated ...
CVE-2021-47889 Softros LAN Messenger 9.6.4 - 'SoftrosSpellChecker' Unquoted Service Path
Softros LAN Messenger 9.6.4 contains an unquoted service path vulnerability in the SoftrosSpellChecker service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files x86\Softros Systems\Softros Messenger\Spell Checker' to...
CVE-2021-47889
Softros LAN Messenger 9.6.4 contains an unquoted service path vulnerability in the SoftrosSpellChecker service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files x86\Softros Systems\Softros Messenger\Spell Checker' to...
CVE-2021-47889 Softros LAN Messenger 9.6.4 - 'SoftrosSpellChecker' Unquoted Service Path
Softros LAN Messenger 9.6.4 contains an unquoted service path vulnerability in the SoftrosSpellChecker service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files x86\Softros Systems\Softros Messenger\Spell Checker' to...
Softros LogonExpert code issue vulnerability
Softros LogonExpert is a security automatic login management tool developed by the American company Softros. Version 8.1 of Softros LogonExpert contains a code vulnerability; this vulnerability arises from the service path not being enclosed in quotes, which may allow arbitrary code to be execute...
Epson USB Display security vulnerability
Epson USB Display is a convenient linking function software developed by the Japanese company Epson. Version 1.6.0.0 of Epson USB Display contains a security vulnerability. This vulnerability stems from the EMPUDSA service having a service path that is not enclosed in quotes, which may lead to an...
PT-2026-4512
Name of the Vulnerable Software and Affected Versions PDF Complete Corporate Edition version 4.1.45 Description The software contains an unquoted service path issue in the pdfcDispatcher service. This allows local attackers to potentially execute arbitrary code. Exploitation involves leveraging t...
PT-2026-4505
Name of the Vulnerable Software and Affected Versions Softros LAN Messenger version 9.6.4 Description Softros LAN Messenger 9.6.4 has a flaw due to an unquoted service path in the SoftrosSpellChecker service. This could allow local attackers to execute arbitrary code. The vulnerable path is locat...
PDF Complete Corporate Edition Security Vulnerabilities
PDF Complete Corporate Edition is a PDF editor developed by PDF Complete Corporation. Version 4.1.45 of PDF Complete Corporate Edition contains a security vulnerability; this vulnerability stems from the service path not being enclosed in quotes, which may allow for the execution of arbitrary cod...
PT-2026-4506
Name of the Vulnerable Software and Affected Versions LogonExpert version 8.1 Description LogonExpert 8.1 has an unquoted service path issue within the LogonExpertSvc service, which operates with LocalSystem privileges. This allows attackers to potentially place malicious executables in...
CVE-2021-47896: Unquoted Search Path or Element
PDF Complete Corporate Edition 4.1.45 contains an unquoted service path vulnerability in the pdfcDispatcher service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in the service binary location to inject malicious executables that will b...
CVE-2021-47889: Unquoted Search Path or Element
Softros LAN Messenger 9.6.4 contains an unquoted service path vulnerability in the SoftrosSpellChecker service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files x86\Softros Systems\Softros Messenger\Spell Checker' to...
CVE-2021-47898: Unquoted Search Path or Element
Epson USB Display 1.6.0.0 contains an unquoted service path vulnerability in the EMPUDSA service running with LocalSystem privileges. Attackers can exploit the unquoted path by placing malicious executables in intermediate directories to gain elevated system access...
CVE-2021-47890: Unquoted Search Path or Element
LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to place malicious executables in intermediate directories, potentially gaining elevated system access during service startup...
Softros LAN Messenger code-related vulnerabilities
Softros LAN Messenger is an instant messaging system for local area networks developed by the American company Softros. Version 9.6.4 of Softros LAN Messenger contains a code vulnerability caused by an unquoted service path, which may lead to the execution of arbitrary code...
CVE-2021-47863
MacPaw Encrypto 1.0.1 contains an unquoted service path vulnerability in its Encrypto Service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files\Encrypto\ to inject malicious executables and escalate...
CVE-2021-47864
OSAS Traverse Extension 11 contains an unquoted service path vulnerability in the TravExtensionHostSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to inject and execute malicious code by placing executable files in the service's path, potentially gaining...
CVE-2021-47887
OKI Print Job Accounting 4.4.10 contains an unquoted service path vulnerability in the OkiJaSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Okidata\Print Job Accounting' to inject malicious executables and...