7325 matches found
CVE-2019-25286
GCafé 3.0 contains an unquoted service path vulnerability in the gbClientService that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that will be run with...
CVE-2019-25286
GCafé 3.0 is affected by an unquoted service path vulnerability in the gbClientService. The unquoted path in the service configuration enables local attackers to inject a malicious executable and have it run with LocalSystem permissions, effectively allowing local privilege escalation. Affected c...
CVE-2019-25286 _GCafé 3.0 - 'gbClienService' Unquoted Service Path
GCafé 3.0 contains an unquoted service path vulnerability in the gbClientService that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that will be run with...
CVE-2019-25275
BartVPN 1.2.2 contains an unquoted service path vulnerability in the BartVPNService that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path by placing malicious executables in specific file system locations ...
CVE-2019-25275 BartVPN 1.2.2 - 'BartVPNService' Unquoted Service Path
BartVPN 1.2.2 contains an unquoted service path vulnerability in the BartVPNService that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path by placing malicious executables in specific file system locations ...
CVE-2019-25275
CVE-2019-25275 affects BartVPN 1.2.2, with an unquoted service path in BartVPNService that allows local attackers to potentially execute arbitrary code with elevated privileges by hijacking the service’s execution context. The issue is documented across multiple feeds (NVD/NVD-derived and vulnera...
CVE-2019-25273
Easy-Hide-IP 5.0.0.3 contains an unquoted service path vulnerability in the EasyRedirect service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Easy-Hide-IP\rdr\EasyRedirect.exe' to inject malicious executables and...
CVE-2019-25272
CVE-2019-25272 affects TexasSoft CyberPlanet 6.4.131. The unquoted service path in the CCSrvProxy service (C:\Program Files (x86)\TenaxSoft\CyberPlanet\SrvProxy.exe) allows a local attacker to inject and execute arbitrary code, gaining elevated privileges. Public references indicate exploitation ...
CVE-2019-25267
Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables that will be launche...
CVE-2019-25267
Wing FTP Server 6.0.7 is affected by an unquoted service path vulnerability that lets local attackers insert and execute malicious executables with LocalSystem privileges. The issue stems from unquoted binary paths in the service configuration, enabling privilege escalation. Impact is described a...
CVE-2019-25267 Wing FTP Server 6.0.7 - Unquoted Service Path
Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables that will be launche...
CVE-2026-20987
Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute privileged commands...
CVE-2026-20977
Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning...
CVE-2026-20979
Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege...
CVE-2026-20977
Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning...
CVE-2026-20978
Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application...
CVE-2026-20978
Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application...
CVE-2026-20987
CVE-2026-20987: Affects GalaxyDiagnostics prior to 3.5.050. root cause is improper input validation, enabling local privileged attackers to execute privileged commands. Impact is local confidentiality, integrity, and availability concerns as described; official remediation is to update GalaxyDiag...
