Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,831

Export CSV
CVE-2021-47804

Wise Care 365 5.6.7.568 - 'WiseBootAssistant' Unquoted Service Path

Wise Care 365 5.6.7.568 contains an unquoted service path vulnerability in the WiseBootAssistant service running with LocalSystem privileges. Attackers can exploit this by inserting a malicious executable in the service path, which will execute with elevated system privileges when the service restarts.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Wisecleaner
Products
Wise Care 365
CVE-2021-47823

ePowerSvc 6.0.3008.0 - 'ePowerSvc.exe' Unquoted Service Path

Acer ePowerSvc 6.0.3008.0 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute with LocalSystem permissions during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Acer
Products
Epowersvc
CVE-2021-47825

Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service Path

Acer Updater Service 1.2.3500.0 contains an unquoted service path vulnerability that allows local users to execute code with elevated system privileges. Attackers can exploit the unquoted path in C:\Program Files\Acer\Acer Updater\ to inject malicious executables that will run with LocalSystem permissions during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Acer
Products
Updater Service
CVE-2021-47826

Acer Backup Manager Module 3.0.0.99 - 'IScheduleSvc.exe' Unquoted Service Path

Acer Backup Manager 3.0.0.99 contains an unquoted service path vulnerability in the NTI IScheduleSvc service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\NTI\Acer Backup Manager\ to inject malicious executables that would run with elevated LocalSystem privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Acer
Products
Backup Manager Module
CVE-2021-47828

BOOTP Turbo 2.0.0.1253 - 'bootpt.exe' Unquoted Service Path

BOOTP Turbo 2.0.0.1253 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path to execute arbitrary code with elevated LocalSystem privileges during system startup or reboot.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Microsoft Weird Solutions
Products
Windows Bootpturbo
CVE-2021-47829

DHCP Broadband 4.1.0.1503 - 'dhcpt.exe' Unquoted Service Path

DHCP Broadband 4.1.0.1503 contains an unquoted service path vulnerability in its service configuration that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path in 'C:\Program Files\DHCP Broadband 4\dhcpt.exe' to inject malicious code that will execute during service startup with LocalSystem permissions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Weird-solutions
Products
Dhcp Broadband
CVE-2021-47833

WifiHotSpot 1.0.0.0 - 'WifiHotSpotService.exe' Unquoted Service Path

WifiHotSpot 1.0.0.0 contains an unquoted service path vulnerability in its WifiHotSpotService.exe that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem permissions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Gearboxcomputers
Products
Wifihotspot
CVE-2021-47845

Spy Emergency 25.0.650 - Unquoted Service Path

Spy Emergency 25.0.650 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted file paths in SpyEmergencyHealth.exe and SpyEmergencySrv.exe to inject malicious code during system startup or service restart.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Spy-emergency
Products
Spy Emergency
CVE-2021-47847

Disk Sorter Server 13.6.12 - 'Disk Sorter Server' Unquoted Service Path

Disk Sorter Server 13.6.12 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Sorter Server\bin\disksrs.exe' to inject malicious executables and escalate privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Disksorter
Products
Disk Sorter
CVE-2021-47859

ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path

ActivIdentity 8.2 contains an unquoted service path vulnerability in the ac.sharedstore service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in C:\Program Files\Common Files\ActivIdentity\ to inject malicious executables and escalate privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Actividentity Hid Global
Products
Activclient Cac Actividentity
CVE-2021-47861

Event Log Explorer 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path

Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be executed with LocalSystem account privileges during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Fspro
Products
Event Log Explorer
CVE-2021-47862

Hi-Rez Studios 5.1.6.3 - 'HiPatchService' Unquoted Service Path

Hi-Rez Studios 5.1.6.3 contains an unquoted service path vulnerability in the HiPatchService that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem permissions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Hirezstudios
Products
Hi-rez Studios
CVE-2021-47863

MacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service Path

MacPaw Encrypto 1.0.1 contains an unquoted service path vulnerability in its Encrypto Service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files\Encrypto\ to inject malicious executables and escalate privileges on Windows systems.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Macpaw
Products
Encrypto
CVE-2021-47864

OSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service Path

OSAS Traverse Extension 11 contains an unquoted service path vulnerability in the TravExtensionHostSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to inject and execute malicious code by placing executable files in the service's path, potentially gaining elevated system access.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Osas
Products
Traverse Extension
CVE-2021-47866

WIN-PACK PRO 4.8 - 'GuardTourService' Unquoted Service Path

WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the GuardTourService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path in C:\Program Files <x86>\WINPAKPRO\WP GuardTour Service.exe to inject malicious code that would execute during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Honeywell
Products
Win-pak
CVE-2021-47867

WIN-PACK PRO 4.8 - 'ScheduleService' Unquoted Service Path

WIN-PACK PRO4.8 contains an unquoted service path vulnerability in the ScheduleService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path in 'C:\Program Files <x86>\WINPAKPRO\ScheduleService Service.exe' to inject malicious code that would execute during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Honeywell
Products
Win-pak
CVE-2021-47868

WIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service Path

WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the WPCommandFileService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files <x86>\WINPAKPRO\WPCommandFileService Service.exe to inject malicious code that would execute with LocalSystem permissions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Honeywell
Products
Win-pak
CVE-2021-47869

BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path

Brother BRAdmin Professional 3.75 contains an unquoted service path vulnerability in the BRA_Scheduler service that allows local users to potentially execute arbitrary code. Attackers can place a malicious executable named 'BRAdmin' in the C:\Program Files (x86)\Brother\ directory to gain local system privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Brother
Products
Bradmin Professional
CVE-2021-47874

VFS for Git 1.0.21014.1 - 'GVFS.Service' Unquoted Service Path

VFS for Git 1.0.21014.1 contains an unquoted service path vulnerability in the GVFS.Service Windows service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path to inject malicious executables that will be launched with LocalSystem privileges during service startup or system reboot.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Vfsforgit
Products
Vfs For Git
CVE-2021-47878

eBeam Education Suite 2.5.0.9 - 'eBeam Device Service' Unquoted Service Path

eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute with LocalSystem privileges during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Luidia
Products
Ebeam Education Suite