530 matches found
CVE-2024-4461
SugarSync for Windows is affected by CVE-2024-4461: unquoted service path in the installed SugarSync service allows a local attacker to inject arbitrary code, leading to privilege escalation. The issue affects versions before 4.1.3; remediation is to upgrade to 4.1.3 or later.
CVE-2023-39464
Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this...
CVE-2023-39464
Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this...
CVE-2023-39464
The CVE-2023-39464 entry describes a remote code execution vulnerability in Triangle MicroWorks SCADA Data Gateway related to an unquoted path in the GTWWebMonitorService executable. The flaw’s root cause is the service path containing spaces not surrounded by quotation marks, enabling an attacke...
PT-2024-25638 · Acronis · Acronis Cyber Protect 16 +1
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions before build 37758 Acronis Cyber Protect 16 Windows versions before build 38690 Description: The issue is related to a local privilege escalation due to an unquoted search path vulnerability...
CVE-2024-4031
Unquoted Search Path or Element vulnerability in Logitech MEVO WEBCAM APP on Windows allows Local Execution of Code...
PT-2024-24214 · Terratec · Terratec Dmx 6Fire Usb
Name of the Vulnerable Software and Affected Versions: Terratec DMX 6Fire USB version 1.23.0.02 Description: An unquoted service path vulnerability allows a local attacker to escalate privileges via the Program.exe component. Recommendations: For Terratec DMX 6Fire USB version 1.23.0.02, consider...
CVE-2024-1618 Unquoted item or search path vulnerability in Faronics Deep Freeze Server Standard
A search path or unquoted item vulnerability in Faronics Deep Freeze Server Standard, which affects versions 8.30.020.4627 and earlier. This vulnerability affects the DFServ.exe file. An attacker with local user privileges could exploit this vulnerability to replace the legitimate DFServ.exe...
PT-2024-18171 · Faronics · Faronics Deep Freeze Server Standard
Name of the Vulnerable Software and Affected Versions: Faronics Deep Freeze Server Standard versions 8.30.020.4627 and earlier Description: A search path or unquoted item vulnerability affects the DFServ.exe file, allowing an attacker with local user privileges to replace the legitimate DFServ.ex...
PT-2024-3265 · Intel · Intel Thunderbolt Dch Drivers
Name of the Vulnerable Software and Affected Versions: IntelR ThunderboltTM DCH drivers for Windows versions prior to 88 Description: The issue is related to an unquoted search path or element in some IntelR ThunderboltTM DCH drivers for Windows, which may allow an authenticated user to potential...
CVE-2024-1201
Search path or unquoted item vulnerability in HDD Health affecting versions 4.2.0.112 and earlier. This vulnerability could allow a local attacker to store a malicious executable file within the unquoted search path, resulting in privilege escalation...
CVE-2020-24682
Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial Automation NET/PVI allows Target Programs with Elevated Privileges.This issue affects Automation Studio: from 4.0 through 4.6, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from...
PT-2024-10790 · B&R Industrial Automation · Automation Studio +1
Name of the Vulnerable Software and Affected Versions: B&R Industrial Automation Automation Studio versions 4.0 through 4.6, versions 4.7.0 through 4.7.6, versions 4.8.0 through 4.8.5, versions 4.9.0 through 4.9.3 B&R Industrial Automation NET/PVI versions 4.0 through 4.6, versions 4.7.0 through...
B&R Industrial Automation Studio Code Issue Vulnerability
B&R Industrial Automation Studio is a suite of integrated development environments IDEs from B&R Industrial Automation, Austria, for developing and programming its automation solutions. A code issue vulnerability exists in B&R Industrial Automation Studio versions 4.0 through 4.6, 4.7.0 through...
CVE-2023-7043 Unquoted path privilege vulnerability in ESET products for Windows
Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\NetworkService permissions...
CVE-2023-7043 Unquoted path privilege vulnerability in ESET products for Windows
Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\NetworkService permissions...
CVE-2023-29165
Unquoted search path or element in some IntelR ArcTM Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-25075
Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-29165
Unquoted search path or element in some IntelR ArcTM Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escalation of privilege via local access...