Lucene search
+L

78 matches found

NVD
NVD
•added 2026/02/05 12:15 a.m.•14 views

CVE-2019-25287

Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\Lavasoft\Web Companion\Application\ t...

8.5CVSS0.00159EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/05 12:00 a.m.•17 views

Adaware Web Companion 代码问题漏洞

Adaware Web Companion is a security tool developed by Adaware Corporation. Version 4.8.2078.3950 of Adaware Web Companion contains a code vulnerability. This vulnerability stems from the service path in WCAssistantService that is not enclosed in quotes, allowing local users to execute code and ga...

8.5CVSS7.5AI score0.00159EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/05 12:00 a.m.•1 views

CVE-2019-25287: Unquoted Search Path or Element

Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\Lavasoft\Web Companion\Application\ t...

8.5CVSS8AI score0.00159EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/04 11:15 p.m.•15 views

EUVD-2019-19386

Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\Lavasoft\Web Companion\Application\ t...

8.5CVSS5.6AI score0.00159EPSS
SaveExploits0References3
CVE
CVE
•added 2026/02/04 11:15 p.m.•23 views

CVE-2019-25287

CVE-2019-25287 affects Adaware Web Companion (v4.8.2078.3950) via an unquoted path in the WCAssistantService located at C:\Program Files (x86)\Lavasoft\Web Companion\Application, enabling local users to potentially execute code with LocalSystem privileges during service startup. The CVSS v3.1 bas...

8.5CVSS5.6AI score0.00159EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/04 11:15 p.m.•45 views

CVE-2019-25287 Adaware Web Companion version 4.8.2078.3950 - 'WCAssistantService' Unquoted Service Path

Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\Lavasoft\Web Companion\Application\ t...

8.5CVSS0.00159EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/02/04 11:15 p.m.•7 views

CVE-2019-25287 Adaware Web Companion version 4.8.2078.3950 - 'WCAssistantService' Unquoted Service Path

Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\Lavasoft\Web Companion\Application\ t...

8.5CVSS5.5AI score0.00159EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/02/04 12:00 a.m.•18 views

PT-2026-5814

Name of the Vulnerable Software and Affected Versions Adaware Web Companion version 4.8.2078.3950 Description Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService. This allows local users to potentially execute code with elevated...

8.5CVSS5.6AI score0.00159EPSS
SaveExploits0References5
NVD
NVD
•added 2026/02/03 3:16 p.m.•18 views

CVE-2020-37102

Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges...

8.5CVSS0.00127EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/02/03 2:49 p.m.•9 views

CVE-2020-37102

Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges...

8.5CVSS5.7AI score0.00127EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/03 2:49 p.m.•5 views

CVE-2020-37102 Adaware Web Companion 4.9.2159 - 'WCAssistantService' Unquoted Service Path

Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges...

8.5CVSS5.7AI score0.00127EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/02/03 2:49 p.m.•13 views

EUVD-2020-30974

Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges...

8.5CVSS5.7AI score0.00127EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/02/03 2:49 p.m.•42 views

CVE-2020-37102 Adaware Web Companion 4.9.2159 - 'WCAssistantService' Unquoted Service Path

Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges...

8.5CVSS0.00127EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/02/03 12:00 a.m.•19 views

Adaware Web Companion 代码问题漏洞

Adaware Web Companion is a security tool developed by Adaware Corporation. Version 4.9.2159 of Adaware Web Companion contains a code vulnerability. This vulnerability stems from the lack of quotation marks around the WCAssistantService service path, which may allow local attackers to execute...

8.5CVSS6.1AI score0.00127EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/03 12:00 a.m.•1 views

CVE-2020-37102: Unquoted Search Path or Element

Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges...

8.5CVSS6.5AI score0.00127EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/19 8:31 a.m.•13 views

CVE-2025-14318

Improper access checks in M-Files Server before 25.12.15491.7 allows users to download files through M-Files Web using Web Companion despite Print and Download Prevention module being enabled...

5.3CVSS6.8AI score0.00308EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/18 8:15 a.m.•13 views

CVE-2025-14318

Improper access checks in M-Files Server before 25.12.15491.7 allows users to download files through M-Files Web using Web Companion despite Print and Download Prevention module being enabled...

5.3CVSS0.00308EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/18 7:32 a.m.•7 views

CVE-2025-14318 Improper access validation in M-Files Server

Improper access checks in M-Files Server before 25.12.15491.7 allows users to download files through M-Files Web using Web Companion despite Print and Download Prevention module being enabled...

5.3CVSS6.4AI score0.00308EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/18 7:32 a.m.•36 views

CVE-2025-14318 Improper access validation in M-Files Server

Improper access checks in M-Files Server before 25.12.15491.7 allows users to download files through M-Files Web using Web Companion despite Print and Download Prevention module being enabled...

5.3CVSS0.00308EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/18 7:32 a.m.•17 views

EUVD-2025-204039

Improper access checks in M-Files Server before 25.12 allows users to download files through M-Files Web using Web Companion despite Print and Download Prevention module being enabled...

5.3CVSS6.3AI score0.00308EPSS
SaveExploits0References2
Rows per page
Query Builder