Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,831

Export CSV
CVE-2020-36977

Wondershare Driver Install Service help 10.7.1.321 - 'ElevationService' Unquote Service Path

Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious code. Attackers can exploit the unquoted path to replace the service binary with a malicious executable, enabling privilege escalation to LocalSystem account.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Wondershare
Products
Driver Install Service Help
CVE-2020-36979

Atheros Coex Service Application 8.0.0.255 -'ZAtheros Bt&Wlan Coex Agent' Unquoted Service Path

Atheros Coex Service Application 8.0.0.255 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path by placing malicious executables in the service path to gain elevated system privileges during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Atheros
Products
Coex Service Application
CVE-2020-36980

SAntivirus IC 10.0.21.61 - 'SAntivirusIC' Unquoted Service Path

SAntivirus IC 10.0.21.61 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted executable path to inject malicious files in the service binary path, enabling privilege escalation to system-level permissions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Segurazo
Products
Santivirus Ic
CVE-2020-36981

Motorola Device Manager 2.4.5 - 'ForwardDaemon.exe ' Unquoted Service Path

Motorola Device Manager 2.4.5 contains an unquoted service path vulnerability in the PST Service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in ForwardDaemon.exe to inject malicious code that will execute with elevated system privileges during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Motorola-device-manager
Products
Motorola Device Manager
CVE-2020-36982

Motorola Device Manager 2.5.4 - 'MotoHelperService.exe' Unquoted Service Path

Motorola Device Manager 2.5.4 contains an unquoted service path vulnerability in the MotoHelperService.exe service that allows local users to potentially inject malicious code. Attackers can exploit the unquoted path in the service configuration to execute arbitrary code with elevated system privileges during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Motorola-device-manager
Products
Motorola Device Manager
CVE-2020-36983

Quick 'n Easy FTP Service 3.2 - Unquoted Service Path

Quick 'n Easy FTP Service 3.2 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code during service startup. Attackers can exploit the misconfigured service binary path to inject malicious executables with elevated LocalSystem privileges during system boot or service restart.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Pablo Software Solutions Pablosoftwaresolutions
Products
Quick N Easy Ftp Server Quick \'n Easy Web Server
CVE-2020-36984

EPSON 1.124 - 'seksmdb.exe' Unquoted Service Path

EPSON 1.124 contains an unquoted service path vulnerability in the SENADB service that allows local attackers to execute code with elevated system privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\ to inject malicious executables that will run with LocalSystem permissions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Epson
Products
Senadb
CVE-2020-36985

IP Watcher v3.0.0.30 - 'PACService.exe' Unquoted Service Path

IP Watcher 3.0.0.30 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be launched with elevated LocalSystem privileges during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Gearboxcomputers Panasonic
Products
Ip Watcher Kw Watcher
CVE-2020-36986

Prey 1.9.6 - "CronService" Unquoted Service Path

Prey 1.9.6 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the CronService to insert malicious code that would execute during application startup or system reboot.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Preyproject
Products
Prey
CVE-2020-36989

ForensiTAppxService 2.2.0.4 - 'ForensiTAppxService.exe' Unquoted Service Path

ForensiT AppX Management Service 2.2.0.4 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute with LocalSystem account permissions during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Forensit
Products
Appx Management Service
CVE-2020-36990

Input Director 1.4.3 - 'Input Director' Unquoted Service Path

Input Director 1.4.3 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem permissions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Inputdirector
Products
Input Director
CVE-2020-36991

ShareMouse 5.0.43 - 'ShareMouse Service' Unquoted Service Path

ShareMouse 5.0.43 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the insecure service path configuration by placing malicious executables in specific system directories to gain elevated access during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Sharemouse
Products
Sharemouse
CVE-2020-36992

Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path

Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path during system startup or reboot to potentially run malicious code with LocalSystem permissions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Nordvpn
Products
Nordvpn
CVE-2020-37016

BarcodeOCR 19.3.6 - 'BarcodeOCR' Unquoted Service Path

BarcodeOCR 19.3.6 contains an unquoted service path vulnerability that allows local attackers to execute code with elevated privileges during system startup. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that will run with LocalSystem privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Barcode-ocr
Products
Barcodeocr
CVE-2020-37017

CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path

CodeMeter 6.60 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CodeMeter Runtime Server service to inject malicious code that would execute with LocalSystem permissions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Wibu
Products
Codemeter
CVE-2020-37020

SonarQube 8.3.1 - Unquoted Service Path

SonarQube 8.3.1 contains an unquoted service path vulnerability that allows local attackers to gain SYSTEM privileges by exploiting the service executable path. Attackers can replace the wrapper.exe in the service path with a malicious executable to execute code with highest system privileges during service restart.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Sonarsource
Products
Sonarqube
CVE-2020-37021

Bandwidth Monitor 3.9 - 'Svc10StrikeBandMontitor' Unquoted Service Path

10-Strike Bandwidth Monitor 3.9 contains an unquoted service path vulnerability in multiple services that allows local attackers to escalate privileges. Attackers can place a malicious executable in specific file path locations to achieve privilege escalation to SYSTEM during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
10-strike Nsasoft
Products
Bandwidth Monitor Network Bandwidth Monitor
CVE-2020-37030

Outline Service 1.3.3 - 'Outline Service ' Unquoted Service Path

Outline Service 1.3.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in C:\Program Files (x86)\Outline to inject malicious code that would execute with LocalSystem permissions during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Getoutline
Products
Outline
CVE-2020-37037

AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path

Avast SecureLine 5.5.522.0 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute with LocalSystem account permissions during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Avast
Products
Secureline Secureline Vpn
CVE-2020-37045

NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path

Veritas NetBackup 7.0 contains an unquoted service path vulnerability in the NetBackup INET Daemon service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files\Veritas\NetBackup\bin\bpinetd.exe to inject malicious code that would execute with elevated LocalSystem privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Veritas
Products
Netbackup Netbackup Firmware