Microsoft Windows Unquoted Path Vulnerability (SMB Login)

The script tries to detect Windows SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

CVE-2018-6321

Unquoted Windows search path vulnerability in the pandaurlfiltering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact...

CVE-2018-6321

CVE-2018-6321 : Connected sources confirm a local privilege escalation in Panda Global Protection 17.0.1, via an unquoted Windows search path in the panda_url_filtering service. The vulnerability is triggered by placing a malicious artefact, allowing a local user to gain higher privileges. Root c...

Path traversal

FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges...

CVE-2017-1000475

FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges...

CVE-2017-1000475

FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges...

CVE-2017-1000475

CVE-2017-1000475 affects FreeSSHd 1.3.1 and is caused by an unquoted path in a service, enabling local users to launch processes with elevated privileges. The vulnerability is described as a Local Privilege Escalation via an unquoted service path, with affected component being the service executa...

CVE-2017-1000475

FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges...

Cimetrics BACstac Routing Service 6.2f Local Privilege Escalation

Summary BACstac belongs to product BACstacTM Networking Software and was developed by company Cimetrics Inc. Cimetrics is excited to announce a new version of our industry-leading BACnet protocol stack: BACstac 6.8. The Cimetrics BACstac saves man-years of development when your company needs to...

CVE-2017-14019

An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has been identified, which may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate his or her...

Directory traversal

Nero 7.10.1.0 has an unquoted BINARYPATHNAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILESx86%\Nero directory...

unisys secure partitioning (s-Par) unquoted Windows search path vulnerability

unisys secure partitioning s-Par is an innovative new virtualization technology designed to provide a predictable, secure, mission-critical, scalable, distributed operating environment on the Intel Xeon x64 multi-core platform. An unquoted Windows search path vulnerability exists in the guest...

CVE-2017-3005

Adobe Photoshop versions CC 2017 18.0.1 and earlier, CC 2015.5.1 17.0.1 and earlier have an unquoted search path vulnerability...

Design/Logic Flaw

Adobe Photoshop versions CC 2017 18.0.1 and earlier, CC 2015.5.1 17.0.1 and earlier have an unquoted search path vulnerability...

CVE-2017-3005

Adobe Photoshop versions CC 2017 18.0.1 and earlier, CC 2015.5.1 17.0.1 and earlier have an unquoted search path vulnerability...

PT-2017-9798 · Huawei · Utps

Name of the Vulnerable Software and Affected Versions: Huawei UTPS versions earlier than UTPS-V200R003B015D16SPC00C983 Description: The issue is related to an unquoted service path, which can lead to the truncation of service query paths. An attacker may exploit this by placing an executable file...

DeepService SSL VPN suffers from a local power lifting vulnerability

EasyConnect enables you to use all the systems and applications on your company's intranet outside the office. The EasyConnect PC Client version 7.1.0.4 has an exe hijacking vulnerability due to a space in the binary path Program Files and the entire path is not enclosed in double quotes, which...

CVE-2015-8988

Unquoted executable path vulnerability in Client Management and Gateway components in McAfee now Intel Security ePO Deep Command eDC 2.2 and 2.1 allows authenticated users to execute a command of their choice via dropping a malicious file for the path...

CVE-2015-8988

Unquoted executable path vulnerability in Client Management and Gateway components in McAfee now Intel Security ePO Deep Command eDC 2.2 and 2.1 allows authenticated users to execute a command of their choice via dropping a malicious file for the path...

Cimetrics BACstac 6.2f - Local Privilege Escalation

Cimetrics BACstac Routing Service 6.2f Local Privilege Escalation Vendor: Cimetrics, Inc. Product web page: https://www.cimetrics.com Affected version: 6.2f Summary: BACstac belongs to product BACstacTM Networking Software and was developed by company Cimetrics Inc. Cimetrics is excited to announ...