CVE-2023-39464 Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability

Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this...

CVE-2023-39464 Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability

Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this...

CVE-2023-27362 3CX Uncontrolled Search Path Local Privilege Escalation Vulnerability

3CX Uncontrolled Search Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of 3CX. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

3CX 安全漏洞

3CX is an IP PBX an IP-based corporate phone system based on software open standards that provides complete unified communications. A security vulnerability exists in 3CX version 18 that stems from the presence of an uncontrolled search path local elevation of privilege vulnerability that allows ...

Ashlar Vellum Cobalt 安全漏洞

Ashlar Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar. A security vulnerability exists in Ashlar Vellum Cobalt that stems from the presence of an uncontrolled search path element remote code execution vulnerability that could allow a remote attacker t...

Ashlar Vellum Argon 安全漏洞

Ashlar Vellum Argon is a CAD and 3D modeling software for Mac and Windows from Ashlar, Inc. A security vulnerability exists in Ashlar Vellum Argon that stems from the presence of an uncontrolled search path element remote code execution vulnerability that could allow a remote attacker to execute...

Ashlar Vellum Lithium 安全漏洞

Ashlar Vellum Lithium is a CAD modeling software from Ashlar, Inc. A security vulnerability exists in Ashlar Vellum Lithium that stems from the presence of an uncontrolled search path element remote code execution vulnerability that could allow a remote attacker to execute arbitrary code on an...

Ashlar Vellum Xenon 安全漏洞

Ashlar Vellum Xenon is a CAD modeling software from Ashlar, Inc. A security vulnerability exists in Ashlar Vellum Xenon that stems from the presence of an uncontrolled search path element remote code execution vulnerability that could allow a remote attacker to execute arbitrary code on an affect...

CVE-2024-23774

An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerability exists in the KSchedulerSvc.exe and AMPTools.exe components. This allows local attackers to execute code of their choice with NT Authority\SYSTEM privileges...

CVE-2024-23774

An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerability exists in the KSchedulerSvc.exe and AMPTools.exe components. This allows local attackers to execute code of their choice with NT Authority\SYSTEM privileges...

Quest KACE Agent 安全漏洞

Quest Software Quest KACE Systems Management Appliance is an IT asset management appliance from Quest Software, USA. A security vulnerability exists in Quest KACE Agent versions 12.0.38 and 13.1.23.0 that stems from the presence of an unquoted search path vulnerability that allows a local attacke...

CVE-2024-23774

An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerability exists in the KSchedulerSvc.exe and AMPTools.exe components. This allows local attackers to execute code of their choice with NT Authority\SYSTEM privileges...

PT-2024-20078 · Quest · Quest Kace Agent For Windows

Name of the Vulnerable Software and Affected Versions: Quest KACE Agent for Windows versions 12.0.38 through 13.1.23.0 Description: An unquoted Windows search path issue exists in the KSchedulerSvc.exe and AMPTools.exe components, allowing local attackers to execute code of their choice with NT...

CVE-2024-34010

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 37758, Acronis Cyber Protect 16 Windows before build 38690, Acronis True Image Windows before build 42386, Acronis True Image OEM Windo...

CVE-2024-34010

CVE-2024-34010 describes a local privilege escalation in Acronis software due to an unquoted search path. Affected Windows products and builds include: Acronis Cyber Protect Cloud Agent before 37758, Acronis Cyber Protect 16 before 38690, and Acronis True Image before 42386. The root cause is an ...

Acronis Cyber Protect Cloud Agent 代码问题漏洞

Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A code issue vulnerability exists in Acronis Cyber Protect Cloud Agent prior to version 37758, which stems from an unquoted search path vulnerability in the application that results in local elevation of privilege...

RHEL 7 : CloudForms 4.6.6 (RHSA-2018:3816)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3816 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual...

CVE-2024-33673

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search path...

PT-2024-25431 · Veritas · Veritas Backup Exec

Name of the Vulnerable Software and Affected Versions: Veritas Backup Exec versions prior to 22.2 HotFix 917391 Description: An issue was discovered that allows for DLL Hijacking in the Windows DLL Search path due to improper access controls. Recommendations: For versions prior to 22.2 HotFix...

Veritas Technologies Backup Exec 安全漏洞

Veritas Technologies Backup Exec is a powerful suite of data backup recovery tools from Veritas Technologies, USA. With a web-based management console and an intuitive graphical user interface with easy-to-use wizards, the software simplifies the installation process and improves manageability...