CVE-2021-47880

Realtek Wireless LAN Utility 700.1631 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted service path by inserting malicious code in the system root path that would execute during...

CVE-2021-47863 MacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service Path

MacPaw Encrypto 1.0.1 contains an unquoted service path vulnerability in its Encrypto Service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files\Encrypto\ to inject malicious executables and escalate...

CVE-2021-47863 MacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service Path

MacPaw Encrypto 1.0.1 contains an unquoted service path vulnerability in its Encrypto Service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files\Encrypto\ to inject malicious executables and escalate...

CVE-2021-47861 Event Log Explorer 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path

Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...

CVE-2021-47861

Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...

EUVD-2026-3633

ActivIdentity 8.2 contains an unquoted service path vulnerability in the ac.sharedstore service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in C:\Program Files\Common Files\ActivIdentity\ to inject malicious executables and...

CVE-2021-47859

ActivIdentity 8.2 contains an unquoted service path vulnerability in the ac.sharedstore service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in C:\Program Files\Common Files\ActivIdentity\ to inject malicious executables and...

PT-2026-3814

Hi-Rez Studios 5.1.6.3 contains an unquoted service path vulnerability in the HiPatchService that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem...

PT-2026-3815

MacPaw Encrypto 1.0.1 contains an unquoted service path vulnerability in its Encrypto Service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:Program FilesEncrypto to inject malicious executables and escalate privileges...

Microsoft VFS for Git code issue vulnerability

Microsoft VFS for Git is a Git optimization system developed by Microsoft Corporation in the United States. Version 1.0.21014.1 of Microsoft VFS for Git contains a code vulnerability. This vulnerability stems from the Windows service GVFS.Service having a service path that lacks quotes, which may...

OKI Configuration Tool code-related vulnerabilities

OKI Configuration Tool is a configuration management tool developed by OKI Corporation. Version 1.6.53 of the OKI Configuration Tool contains a code vulnerability. This vulnerability stems from an unquoted service path within the OKI Local Port Manager service, which may allow local attackers to...

Realtek Wireless LAN Utility code-related vulnerabilities

The Realtek Wireless LAN Utility is a wireless network card configuration and management tool developed by Realtek Semiconductor. Version 700.1631 of the Realtek Wireless LAN Utility contains a code vulnerability caused by an unquoted service path. This vulnerability may allow local users to...

Honeywell WIN-PACK PRO code issue vulnerability

Honeywell WIN-PACK PRO is a security management platform software developed by the American company Honeywell. Version 4.8 of Honeywell WIN-PACK PRO contains a code vulnerability. This vulnerability stems from the ScheduleService component, which uses service paths without quotes, potentially...

Fyrolabs Pingzapper code issue vulnerability

Fyrolabs Pingzapper is a web accelerator developed by Fyrolabs Corporation in the United States. The version 2.3.1 of Fyrolabs Pingzapper contains a code vulnerability. This vulnerability stems from an unquoted service path within the PingzapperSvc service, which may allow local attackers to...

Brother BRAdmin Professional code-related vulnerabilities

Brother BRAdmin Professional is a device management software developed by the American company Brother. Version 3.75 of Brother BRAdmin Professional contains a code vulnerability. This vulnerability stems from the BRAScheduler service having a service path that is not properly quoted, which may...

PT-2026-3835

OKI Configuration Tool 1.6.53 contains an unquoted service path vulnerability in the OKI Local Port Manager service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:Program FilesOkidataCommonextend3portmgrsrv.exe' to inject malicious...

Hi-Rez Studios HiPatchService code-related vulnerabilities

Hi-Rez Studios HiPatchService is a software update service provided by Hi-Rez Studios in the United States. Version 5.1.6.3 of Hi-Rez Studios HiPatchService contains a code vulnerability. This vulnerability stems from the use of service paths without quotes in HiPatchService, which may allow loca...

MacPaw Encrypto code-related vulnerabilities

MacPaw Encrypto is a cross-platform file encryption tool developed by the Ukrainian company MacPaw. Version 1.0.1 of MacPaw Encrypto contains a code vulnerability. This vulnerability stems from the Encrypto Service’s configuration, where a service path without quotes was used, potentially allowin...

MiracleLinux 7 : jasper-1.900.1-33.0.1.el7.AXS7 (AXSA:2024-8730:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-8730:01 advisory. CVE-2023-51257: fix an integer-overflow bug in the ICC profile parsing code CVEs: CVE-2023-51257 An invalid memory write issue in Jasper-Software Jasper...

MiracleLinux 3 : sysstat-7.0.2-11.0.1.AXS3 (AXSA:2011-321:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2011-321:01 advisory. This package provides the sar and iostat commands for Linux. Sar and iostat enable system monitoring of disk, network, and other IO activity. Security issues...