CVE-2017-14030: Unquoted Search Path or Element

An issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation vulnerability could allow an authorized user with file access to escalate privileges by inserting arbitrary code into the unquoted service path...

PT-2018-5615

Name of the Vulnerable Software and Affected Versions: Moxa MXview versions 2.8 and prior Description: An issue was discovered that could allow an authorized user with file access to escalate privileges by inserting arbitrary code into the unquoted service path. Recommendations: For versions 2.8...

Dell Active Roles 7.x Unquoted Service Path Privilege Escalation Vulnerability

Dell Active Roles versions 7.1, 7.0.4, 7.0.3, 7.0.2, and 7.0 suffer from an unquoted service path privilege escalation vulnerability. Exploit Title: Dell Active Roles Unquoted Service Path Privilege Escalation Date: 16/06/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage:...

Dell Active Roles 7.x Unquoted Service Path Privilege Escalation

Exploit Title: Dell Active Roles Unquoted Service Path Privilege Escalation Date: 16/06/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage: https://www.oneidentity.com/products/active-roles/ Version: Dell Active Roles versions 7.1, 7.0.4, 7.0.3, 7.0.2, and 7.0 Tested on: Del...

CVE-2017-14019

An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has been identified, which may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate his or her...

Progea Movicon SCADA/HMI Elevation of Privilege Vulnerability

Movicon is Scada/HMI industrial monitoring software developed by the Italian automation software provider PROGEA. An elevation of privilege vulnerability exists in Progea Movicon SCADA/HMI that allows an authorized local user to insert arbitrary code into an unreferenced service path and escalate...

TeraCopyService 3.1 Unquoted Service Path Privilege Escalation Vulnerability

TeraCopyService version 3.1 suffers from an unquoted service path privilege escalation vulnerability. Exploit Title: TeraCopyService 3.1 - Unquoted Service Path Privilege Escalation Date of Discovery: August 31 2017 Exploit Author: Rithwik Jayasimha Author Homepage/Contact: https://thel3l.me Vend...

CVE-2017-3757

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks not ThinkPads. This could allow an attacker with local privileges to execute code with administrative privileges...

Design/Logic Flaw

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks not ThinkPads. This could allow an attacker with local privileges to execute code with administrative privileges...

CVE-2017-3757

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks not ThinkPads. This could allow an attacker with local privileges to execute code with administrative privileges...

CVE-2017-3757

CVE-2017-3757 affects Lenovo notebooks (excluding ThinkPads) with the ElanTech Touchpad driver. The vulnerability is an unquoted service path that could allow a local attacker to execute code with administrative privileges. The issue is documented across multiple sources (NVD entry, CNVD, Lenov o...

PT-2017-16088

Name of the Vulnerable Software and Affected Versions ElanTech Touchpad driver affected versions not specified Description An unquoted service path issue was found in the ElanTech Touchpad driver. This could allow an attacker with local privileges to execute code with administrative privileges...

Unquoted Service Path Privilege Escalation in ElanTech Touchpad Driver - Lenovo Support US

No description provided...

CVE-2017-3756

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path...

Privilege escalation

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path...

CVE-2017-3756

CVE-2017-3756 affects Lenovo Active Protection System for ThinkPad on affected ThinkPad models, with vulnerable versions earlier than 1.82.0.17. The root cause is an unquoted service path that an attacker with local privileges can exploit to execute code with administrative privileges. Lenovo adv...

CVE-2017-3756

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path...

PT-2017-16087

Name of the Vulnerable Software and Affected Versions Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17 Description A privilege escalation issue was identified, allowing an attacker with local privileges to execute code with administrative privileges via an...

CVE-2017-3756: Undefined Security Weakness

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path...

Design/Logic Flaw

An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges...