Lucene search
+L

30563 matches found

Cvelist
Cvelist
•added 2026/02/01 2:38 p.m.•58 views

CVE-2020-37047 Deep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service Path

Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerability in the DeepMgmtService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepMgmtService.exe to inject malicio...

8.5CVSS0.00169EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/01/31 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-24413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not set...

6.8CVSS5.8AI score0.00076EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/30 5:16 p.m.•19 views

CVE-2020-37059

Popcorn Time 6.2.1.14 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can insert malicious executables in Program Files x86 or system root directories to be executed with SYSTEM-level...

8.5CVSS0.00155EPSS
SaveExploits0References3
NVD
NVD
•added 2026/01/30 5:16 p.m.•16 views

CVE-2020-37060

Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in its service configuration that allows attackers to execute arbitrary code with SYSTEM privileges. Attackers can exploit the unquoted service path by placing a malicious executable named 'Program.exe' to gain persistent...

8.5CVSS0.00188EPSS
SaveExploits0References3
CVE
CVE
•added 2026/01/30 4:16 p.m.•25 views

CVE-2020-37060

Atomic Alarm Clock 6.3 is affected by a local privilege escalation due to an unquoted service path in its service configuration, enabling an attacker to execute arbitrary code with SYSTEM privileges by placing a malicious Program.exe. The issue allows persistent, system‑level access. Public refer...

8.5CVSS6.6AI score0.00188EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/30 4:16 p.m.•6 views

CVE-2020-37060 Atomic Alarm Clock x86 6.3 - 'AtomicAlarmClock' Unquoted Service Path

Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in its service configuration that allows attackers to execute arbitrary code with SYSTEM privileges. Attackers can exploit the unquoted service path by placing a malicious executable named 'Program.exe' to gain persistent...

8.5CVSS6.6AI score0.00188EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/01/30 4:16 p.m.•17 views

EUVD-2020-30954

Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in its service configuration that allows attackers to execute arbitrary code with SYSTEM privileges. Attackers can exploit the unquoted service path by placing a malicious executable named 'Program.exe' to gain persistent...

8.5CVSS6.2AI score0.00188EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/01/30 4:16 p.m.•20 views

EUVD-2020-30955

Popcorn Time 6.2.1.14 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can insert malicious executables in Program Files x86 or system root directories to be executed with SYSTEM-level...

8.5CVSS6AI score0.00155EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/01/30 4:16 p.m.•9 views

CVE-2020-37060

Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in its service configuration that allows attackers to execute arbitrary code with SYSTEM privileges. Attackers can exploit the unquoted service path by placing a malicious executable named 'Program.exe' to gain persistent...

8.5CVSS6.6AI score0.00188EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2026/01/30 10:11 a.m.•15 views

RHSA-2026:1586 Red Hat Security Advisory: gimp security update

Bulletin has no description...

7.8CVSS7.2AI score0.00657EPSS
SaveExploits1References15
Positive Technologies
Positive Technologies
•added 2026/01/30 12:00 a.m.•34 views

PT-2026-5420

Popcorn Time 6.2.1.14 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can insert malicious executables in Program Files x86 or system root directories to be executed with SYSTEM-level...

8.5CVSS6AI score0.00155EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/01/29 5:21 p.m.•59 views

CVE-2026-24413 Icinga has insecure permission of %ProgramData%\icinga2\var on Windows

Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not set appropriate permissions for the %ProgramData%\icinga2\var folder on Windows. This resulted in the its contents - including the private key of the...

6.8CVSS0.00076EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/01/29 12:00 a.m.•9 views

RHEL 8 : gimp:2.8 (RHSA-2026:1574)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1574 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including...

7.8CVSS7.1AI score0.00624EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2026/01/28 8:23 p.m.•22 views

Important: Red Hat Security Advisory: gimp security update

An update for gimp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

7.8CVSS7.2AI score0.00657EPSS
SaveExploits1References3
NVD
NVD
•added 2026/01/28 1:15 p.m.•25 views

CVE-2020-36987

Program Access Controller 1.2.0.0 contains an unquoted service path vulnerability in PACService.exe that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSyste...

8.5CVSS0.00176EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/28 12:29 p.m.•13 views

CVE-2020-36987 Program Access Controller v1.2.0.0 - 'PACService.exe' Unquoted Service Path

Program Access Controller 1.2.0.0 contains an unquoted service path vulnerability in PACService.exe that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSyste...

8.5CVSS6.1AI score0.00176EPSS
SaveExploits0References3
CVE
CVE
•added 2026/01/28 12:29 p.m.•25 views

CVE-2020-36987

CVE-2020-36987 affects Program Access Controller 1.2.0.0. The unquoted service path vulnerability is in PACService.exe and can be triggered during system startup or reboot to inject and run malicious executables with LocalSystem privileges. Root cause: unquoted service path allowing privilege esc...

8.5CVSS6.1AI score0.00176EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•21 views

Gear Box Computers Program Access Controller code-related vulnerabilities

Gear Box Computers Program Access Controller is a program access controller developed by Gear Box Computers. Version 1.2.0.0 of the Gear Box Computers Program Access Controller contains a code vulnerability. This vulnerability stems from the PACService.exe file having a service path that is not...

8.5CVSS5.9AI score0.00176EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•3 views

CVE-2020-36987: Unquoted Search Path or Element

Program Access Controller 1.2.0.0 contains an unquoted service path vulnerability in PACService.exe that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSyste...

8.5CVSS6.1AI score0.00176EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/27 9:04 a.m.•17 views

EUVD-2026-4842

Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program crash and potential remote code execution...

7.3CVSS6.5AI score0.00205EPSS
SaveExploits0References1
Rows per page
Query Builder