#cwe-428

共收录 47 条相关情报。

← 返回所有主题
漏洞预警2026-06-19 发布INFO

Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater service due to an unquoted service path running with SYSTEM p...

CVE-2016-20090

Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater serv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-19 发布INFO

Iperius Remote 1.7.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the service installat...

CVE-2016-20089

Iperius Remote 1.7.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-19 发布INFO

Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. A local attacker can insert...

CVE-2016-20088

Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-19 发布INFO

Fortitude HTTP 1.0.4.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated privileges by exploiting the service binar...

CVE-2016-20087

Fortitude HTTP 1.0.4.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-19 发布INFO

Vembu StoreGrid 4.0 contains an unquoted service path vulnerability in the RemoteBackup and RemoteBackup_webServer services that allows local attackers to escalate privileges. A...

CVE-2016-20086

Vembu StoreGrid 4.0 contains an unquoted service path vulnerability in the RemoteBackup and RemoteBackup_webServer servi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-19 发布INFO

Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by placing a malicious executa...

CVE-2016-20085

Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that allows local attack

历史摘要 · 未重新核验 · NVD

安全公告2026-06-18 发布INFO

Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that...

CVE-2026-25865

Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attackers to e

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-18 发布INFO

Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attackers to execute arbitrary code by exploiting the application's cal...

CVE-2026-25865

Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attackers to e

历史摘要 · 未重新核验 · NVD

安全公告2026-05-16 发布INFO

Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows...

CVE-2020-37247

Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local att

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX...

CVE-2021-47974

VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise serv

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the...

CVE-2020-37230

Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service...

CVE-2020-37231

Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the...

CVE-2020-37232

Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv...

CVE-2020-37229

OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows loc

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-16 发布HIGH

VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges. ...

CVE-2021-47974

CVE-2021-47974 是 VX Search 13.5.28 版本中存在的一个未引用的服务路径漏洞。该漏洞同时影响 VX Search Server 和 VX Search Enterprise 两个服务。由于服务执行路径存在空格且

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-16 发布INFO

Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to escalate privileges by exploiting the service b...

CVE-2020-37247

Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-16 发布INFO

Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows local attackers to esc...

CVE-2020-37232

Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-16 发布INFO

Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local attackers to escalate privileges by exploiting the service...

CVE-2020-37231

Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-16 发布INFO

Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting th...

CVE-2020-37230

Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-16 发布INFO

OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executab...

CVE-2020-37229

OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows loc

历史摘要 · 未重新核验 · NVD