CVE-2020-36929

Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted file paths in BrAuSvc and BRPAAgent services to inject malicious executables an...

CVE-2020-36929

Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted file paths in BrAuSvc and BRPAAgent services to inject malicious executables an...

CVE-2025-65118

The vulnerability, if exploited, could allow an authenticated miscreant OS Standard User to trick Process Optimization services into loading arbitrary code and escalate privileges to OS System, potentially resulting in complete compromise of the Model Application Server...

CVE-2025-65118 AVEVA Process Optimization Uncontrolled Search Path Element

The vulnerability, if exploited, could allow an authenticated miscreant OS Standard User to trick Process Optimization services into loading arbitrary code and escalate privileges to OS System, potentially resulting in complete compromise of the Model Application Server...

RemoteMouse security vulnerability

Remote Mouse is a remote mouse application developed by the Remote Mouse company. Version 4.002 of Remote Mouse contains a security vulnerability. This vulnerability stems from the RemoteMouseService having a service path that is not enclosed in quotes, which may allow for the execution of...

Macro Expert code issue vulnerabilities

Macro Expert is a robotics process automation software developed by Macro Expert Corporation. Version 4.7 of Macro Expert contains a code vulnerability; this vulnerability stems from service paths that are not enclosed in quotes, which may allow for the execution of arbitrary code...

Brother BRPrint Auditor security vulnerability

Brother BRPrint Auditor is a printer status monitoring software developed by the American company Brother. Version 3.0.7 of Brother BRPrint Auditor contains a security vulnerability. This vulnerability stems from the service path in the Windows service configuration, which lacks quotation marks,...

WibuKey Runtime security vulnerabilities

WibuKey Runtime is a component provided by the German company WibuKey, which offers software encryption protection solutions. Version 6.51 of WibuKey Runtime contains a security vulnerability. This vulnerability stems from the WkSvW32.exe service having a service path that lacks quotes, which may...

MiracleLinux 4 : glibc-2.12-1.209.AXS4.2 (AXSA:2017-1703:03)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1703:03 advisory. Security issues fixed with this release: CVE-2017-1000366 glibc contains a vulnerability that allows specially crafted LDLIBRARYPATH values to manipulate the...

MiracleLinux 4 : vim-7.4.629-5.AXS4.1 (AXSA:2016-1206:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-1206:01 advisory. VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular...

MiracleLinux 3 : firefox-24.8.0-2.0.1.AXS3 (AXSA:2014-523:05)

The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2014-523:05 advisory. Description: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed wit...

MiracleLinux 7 : gcab-0.7-4.el7 (AXSA:2018-2581:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-2581:01 advisory. gcab: Extracting malformed .cab files causes stack smashing potentially leading to arbitrary code execution CVE-2018-5345 Tenable has extracted the preceding...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003624)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003624 advisory. There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a...

Acer Backup Manager code-related vulnerabilities

Acer Backup Manager is a backup management software developed by Acer, a company based in Taiwan, China. Version 3.0.0.99 of Acer Backup Manager has a code vulnerability. This vulnerability stems from an issue with the NTI IScheduleSvc service, where a service path without quotes was used,...

Canon’s various products have security vulnerabilities

Canon ImageRunner is a product of the Japanese company Canon. Canon ImageRunner is a series of all-in-one black-and-white printers. Canon imagePROGRAF is a large-format printer. Canon imageCLASS MF644Cdw is a smart and efficient 3-in-1 color multifunctional printer. Several Canon products have...

MiracleLinux 7 : glibc-2.17-157.el7.4 (AXSA:2017-1702:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1702:02 advisory. The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make...

Flexense Sync Breeze security vulnerability

Flexense Sync Breeze is a file synchronization tool developed by Flexense Corporation. The version 13.6.18 of Flexense Sync Breeze contains a security vulnerability. This vulnerability stems from the Windows service configuration, where a service path without quotes was used, potentially allowing...

Flexense SysGauge Server security vulnerability

Flexense SysGauge Server is a system and performance monitoring software developed by Flexense Corporation. Version 7.9.18 of Flexense SysGauge Server contains a security vulnerability. This vulnerability stems from the binary path configuration, where a service path without quotes was used,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001078)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001078 advisory. Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through...

PT-2026-3296

SnipCommand 0.1.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into command snippets. Attackers can execute arbitrary code by embedding malicious JavaScript that triggers remote command execution through file or title inputs...