CVE-2025-60320

memoQ versions 10.1.13.ef1b2b52aae and earlier are vulnerable to an unquoted service path vulnerability in the memoQ Auto Update Service (memoQauhlp101). The service is installed with a path containing spaces but lacks surrounding quotes, a misconfiguration that allows local users to escalate pri...

CVE-2025-60320: Unquoted Search Path or Element

memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service memoQauhlp101. The affected service is installed with a path containing spaces and without surrounding quotes. This misconfiguration allows local users to escalate privileges to...

PT-2025-44347

Name of the Vulnerable Software and Affected Versions memoQ versions 10.1.13.ef1b2b52aae and earlier Description memoQ versions 10.1.13.ef1b2b52aae and earlier contain an unquoted service path vulnerability in the memoQ Auto Update Service memoQauhlp101. The service is installed with a path...

CVE-2024-0980

The Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in combination could be used to execute arbitrary code...

CVE-2024-0980

The Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in combination could be used to execute arbitrary code...

CVE-2024-0980

The Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in combination could be used to execute arbitrary code...

CVE-2024-0980: Improper Limitation of a Pathname to a Restricted Directory

The Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in combination could be used to execute arbitrary code...

PT-2024-2475 · Okta · Okta Verify For Windows

Name of the Vulnerable Software and Affected Versions: Okta Verify for Windows affected versions not specified Description: The issue is related to the auto-update service of Okta Verify for Windows, which is vulnerable to two flaws that can be combined to execute arbitrary code. This could allow...

Access of uninitialized pointer vulnerability in OMRON CX-Motion-MCH

Overview CX-Motion-MCH provided by OMRON Corporation contains an access of uninitialized pointer vulnerability CWE-824, CVE-2023-22366. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact Having a user to open a specially crafted project file...

OMRON CX-Programmer

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Omron Equipment : CX-Programmer Vulnerabilities : Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device or may allow arbitrary code execution. 3. TECHNICAL DETAILS...

Cross site scripting

A Cross-site Scripting XSS vulnerability exists in FortiManager 5.2.1 and earlier and 5.0.10 and earlier via an unspecified parameter in the FortiWeb auto update service page...

CVE-2015-3612

A Cross-site Scripting XSS vulnerability exists in FortiManager 5.2.1 and earlier and 5.0.10 and earlier via an unspecified parameter in the FortiWeb auto update service page...

PT-2020-7838

Name of the Vulnerable Software and Affected Versions: FortiManager versions 5.2.1 and earlier FortiManager versions 5.0.10 and earlier Description: A Cross-site Scripting XSS issue exists via an unspecified parameter in the FortiWeb auto update service page. Recommendations: For FortiManager...

CVE-2015-3612: Improper Neutralization of Input During Web Page Generation

A Cross-site Scripting XSS vulnerability exists in FortiManager 5.2.1 and earlier and 5.0.10 and earlier via an unspecified parameter in the FortiWeb auto update service page...