EUVD-2018-14261

Malware in sbrugna...

CVE-2024-23774

An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerability exists in the KSchedulerSvc.exe and AMPTools.exe components. This allows local attackers to execute code of their choice with NT Authority\SYSTEM privileges...

CVE-2024-23774: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerability exists in the KSchedulerSvc.exe and AMPTools.exe components. This allows local attackers to execute code of their choice with NT Authority\SYSTEM privileges...

CVE-2022-4258

In multiple versions of HIMA PC based Software an unquoted Windows search path vulnerability might allow local users to gain privileges via a malicious .exe file and gain full access to the system...

CVE-2021-21292

Traccar is an open source GPS tracking system. In Traccar before version 4.12 there is an unquoted Windows binary path vulnerability. Only Windows versions are impacted. Attacker needs write access to the filesystem on the host machine. If Java path includes a space, then attacker can lift their...

PT-2021-14394

Name of the Vulnerable Software and Affected Versions: Traccar versions prior to 4.12 Description: Traccar is an open source GPS tracking system. The issue is an unquoted Windows binary path vulnerability, which impacts only Windows versions. An attacker needs write access to the filesystem on th...

Security Bulletin: IBM Cognos TM1 is affected by multiple vulnerabilities (CVE-2018-15494, CVE-2019-4245)

Summary Dojo Toolkit, used by IBM Cognos TM1, is vulnerable to cross-site scripting XSS . This issue has been addressed. A vulnerability exists where TM1 Server could allow a local user with specialized access to exploit an unquoted Windows search path vulnerability which could allow local users ...

Panda Global Protection <= 17.0.1 Multiple Vulnerabilities

Panda Global Protection is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

PT-2018-17299

Name of the Vulnerable Software and Affected Versions 10-Strike Network Monitor version 5.4 Description The issue is related to an unquoted Windows search path vulnerability in the srvInventoryWebServer service, which allows local users to gain privileges via a malicious artefact. Recommendations...

PT-2018-17476

Name of the Vulnerable Software and Affected Versions Panda Global Protection version 17.0.1 Description The issue concerns an unquoted Windows search path vulnerability in the panda url filtering service, which allows local users to gain privileges via a malicious artefact. Recommendations For...

PT-2018-17522

Name of the Vulnerable Software and Affected Versions NSClient++ versions prior to 0.4.1.73 Description The issue allows non-privileged local users to execute arbitrary code with elevated privileges on the system. This can be achieved by placing a malicious program.exe executable in the...

CVE-2016-6803: Untrusted Search Path

An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for Windows. The PC must have previously been infected by a Trojan Horse application or user running with administrative privilege. Any installer with the unquoted...

PT-2017-9018

Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions prior to 4.1.3 Description The issue is related to an "unquoted Windows search path vulnerability" in the installer for Windows. This vulnerability can be exploited if the system has previously been infected with a...

CVE-2016-6935

Adobe Creative Cloud Desktop on Windows is affected by CVE-2016-6935 due to an unquoted Windows search path in versions prior to 3.8.0.310, enabling local privilege escalation via a Trojan horse executable placed in the SYSTEMDRIVE root. The advisory APSB16-34 recommends updating to 3.8.0.310 to ...

PT-2016-7178

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions prior to 3.8.0.310 Description The issue allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory. This is due to an unquoted Windows search path...

PT-2016-6683

Name of the Vulnerable Software and Affected Versions Moxa Active OPC Server versions prior to 2.4.19 Description The issue allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory. This is due to an unquoted Windows search path vulnerability...

PT-2016-5854

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions prior to 3.7.0.272 Description The issue allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory due to an unquoted Windows search path...

CVE-2016-4158: Undefined Security Weakness

Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...

Symantec Endpoint Encryption Unquoted Windows Search Path Vulnerability

Symantec Endpoint Encryption SEE is prone to unquoted windows search path vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE=...

CVE-2015-8156: Undefined Security Weakness

Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption SEE 11.x before 11.1.1 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe...