Lucene search
+L

420 matches found

OSV
OSV
added 2026/01/15 4:16 p.m.12 views

CVE-2021-47773

Dynojet Power Core 2.3.0 contains an unquoted service path vulnerability in the DJ.UpdateService that allows local authenticated users to potentially execute code with elevated privileges. Attackers can exploit the unquoted binary path by placing malicious executables in the service's file path t...

8.5CVSS5.9AI score0.00306EPSS
SaveExploits1References2
attackerkb
attackerkb
added 2026/01/15 3:52 p.m.5 views

CVE-2021-47773

Dynojet Power Core 2.3.0 contains an unquoted service path vulnerability in the DJ.UpdateService that allows local authenticated users to potentially execute code with elevated privileges. Attackers can exploit the unquoted binary path by placing malicious executables in the service's file path t...

8.5CVSS5.7AI score0.00306EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/01/15 3:52 p.m.34 views

CVE-2021-47773 Dynojet Power Core 2.3.0 - Unquoted Service Path

Dynojet Power Core 2.3.0 contains an unquoted service path vulnerability in the DJ.UpdateService that allows local authenticated users to potentially execute code with elevated privileges. Attackers can exploit the unquoted binary path by placing malicious executables in the service's file path t...

8.5CVSS0.00306EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/01/15 3:52 p.m.7 views

CVE-2021-47773 Dynojet Power Core 2.3.0 - Unquoted Service Path

Dynojet Power Core 2.3.0 contains an unquoted service path vulnerability in the DJ.UpdateService that allows local authenticated users to potentially execute code with elevated privileges. Attackers can exploit the unquoted binary path by placing malicious executables in the service's file path t...

8.5CVSS6.8AI score0.00306EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/01/15 3:52 p.m.11 views

EUVD-2026-2756

Dynojet Power Core 2.3.0 contains an unquoted service path vulnerability in the DJ.UpdateService that allows local authenticated users to potentially execute code with elevated privileges. Attackers can exploit the unquoted binary path by placing malicious executables in the service's file path t...

8.5CVSS6.7AI score0.00306EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/01/15 12:00 a.m.13 views

PT-2026-3048

Dynojet Power Core 2.3.0 contains an unquoted service path vulnerability in the DJ.UpdateService that allows local authenticated users to potentially execute code with elevated privileges. Attackers can exploit the unquoted binary path by placing malicious executables in the service's file path t...

8.5CVSS7.2AI score0.00306EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/01/14 11:19 p.m.15 views

CVE-2022-50914

EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges...

8.5CVSS7.3AI score0.00208EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 6:22 p.m.11 views

CVE-2026-20856

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

8.1CVSS7.3AI score0.01133EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/13 11:15 p.m.14 views

CVE-2022-50914

EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges...

8.5CVSS0.00208EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/01/13 10:51 p.m.74 views

CVE-2022-50914 EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path

EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges...

8.5CVSS0.00208EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/13 10:51 p.m.9 views

CVE-2022-50914 EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path

EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges...

8.5CVSS7AI score0.00208EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/13 10:51 p.m.22 views

CVE-2022-50914

CVE-2022-50914 affects EaseUS Data Recovery 15.1.0.0 with an unquoted path in the EaseUS UPDATE SERVICE executable, enabling local privilege escalation to LocalSystem. The connected documents confirm the issue and impact, but do not provide a patch/version fix or explicit exploitation details.

8.5CVSS7AI score0.00208EPSS
SaveExploits0References3
OSV
OSV
added 2026/01/13 6:16 p.m.6 views

CVE-2026-20856

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

8.1CVSS5.9AI score0.01133EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/13 6:16 p.m.9 views

CVE-2026-20856

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

8.1CVSS0.01133EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/13 5:56 p.m.41 views

CVE-2026-20856 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

...

8.1CVSS0.01133EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/01/13 5:56 p.m.5 views

CVE-2026-20856

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

8.1CVSS5.7AI score0.01133EPSS
SaveExploits0References2Affected Software19
Microsoft CVE
Microsoft CVE
added 2026/01/13 4:00 p.m.20 views

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

8.1CVSS7.4AI score0.01133EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.11 views

PT-2026-2390

Name of the Vulnerable Software and Affected Versions EaseUS Data Recovery version 15.1.0.0 Description EaseUS Data Recovery 15.1.0.0 has an issue with an unquoted service path in the EaseUS UPDATE SERVICE executable. This allows attackers to inject and execute malicious code with elevated...

8.5CVSS7.1AI score0.00208EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/01/13 12:00 a.m.11 views

EaseUS Data Recovery 代码问题漏洞

EaseUS Data Recovery is a data recovery software from EaseUS. A code issue vulnerability exists in EaseUS Data Recovery version 15.1.0.0, which stems from the unquoted path to the EaseUS UPDATE SERVICE executable service, which could lead to an attacker injecting and executing malicious code and...

8.5CVSS5.9AI score0.00208EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2026/01/13 12:00 a.m.14 views

The vulnerability of the Firmware Update Service software in D-Link DCS-850L video surveillance cameras allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Firmware Update Service in D-Link DCS-850L video surveillance cameras is related to an incorrect limit on the path to the restricted directory during the processing of the DownloadFile parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized...

3.5CVSS5.8AI score0.00615EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder