Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.5VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges.CVE-2021-47974 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%May 16, 2026
High8.5Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to escalate privileges by exploiting the…CVE-2020-37247 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%May 16, 2026
High8.5Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows local attack…CVE-2020-37232 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%May 16, 2026
High8.5Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local attackers to escalate privileges by exploiting t…CVE-2020-37231 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%May 16, 2026
High8.5Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exp…CVE-2020-37230 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%May 16, 2026
High8.5OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by insertin…CVE-2020-37229 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%May 16, 2026
High8.5IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYSTEM level.CVE-2020-37223 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%May 13, 2026
High8.5Argus Surveillance DVR 4.0 contains an unquoted service path vulnerability in the DVRWatchdog service that allows local attackers to escalate privileges by exploiting…CVE-2021-47945 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%May 10, 2026
High8.4AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to place a malicious executable file in a specific…CVE-2026-7280 · CVE.org · NIST NVDApr 28, 2026
High8.5Vulnerability related to an unquoted search path in CivetWeb v1.16.CVE-2026-5789 · civetweb project · civetweb · CVE.org · NIST NVDApr 21, 2026
High8.5sheed AntiVirus 2.3 contains an unquoted service path vulnerability in the ShavProt service that allows local attackers to escalate privileges by exploiting the servic…CVE-2016-20061 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%Apr 4, 2026
High8.5Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malici…CVE-2016-20060 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Apr 4, 2026
High8.5IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges.CVE-2016-20059 · iobit · malware fighter · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Apr 4, 2026
High8.5Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attackers…CVE-2016-20058 · netgate · amiti antivirus · CVE.org · FIRST EPSS · NIST NVDEPSS 0.7%Apr 4, 2026
High8.5NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges b…CVE-2016-20057 · netgate · registry cleaner · CVE.org · FIRST EPSS · NIST NVDEPSS 0.6%Apr 4, 2026
High8.5Spy Emergency build 23.0.205 contains an unquoted service path vulnerability in the SpyEmrgHealth and SpyEmrgSrv services that allows local attackers to escalate privi…CVE-2016-20056 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Apr 4, 2026
High8.5IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges.CVE-2016-20055 · iobit · advanced system care · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Apr 4, 2026
High7.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.CVE-2026-34768 · electronjs · electron · CVE.org · NIST NVDApr 4, 2026
High8.5Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files (x86)\shttps_mg\http…CVE-2025-41359 · smallsrv · small http server · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Mar 26, 2026
High8.4SANUPS SOFTWARE provided by SANYO DENKI CO., LTD.CVE-2026-33253 · CVE.org · NIST NVDMar 25, 2026
High8.5Serviio PRO 1.8 contains an unquoted search path vulnerability in the Windows service that allows local users to execute arbitrary code with elevated privileges by pla…CVE-2017-20218 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%Mar 16, 2026
High8.5MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability.CVE-2026-25866 · mobatek · mobaxterm · CVE.org · NIST NVDMar 9, 2026
High8.5UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute a…CVE-2026-26034 · dell · ups multi-ups management console · CVE.org · NIST NVDMar 5, 2026
High8.4UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which allows a user with write ac…CVE-2026-26033 · dell · ups multi-ups management console · CVE.org · NIST NVDMar 5, 2026
High8.4An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a malicious…CVE-2026-1585 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%Feb 27, 2026