Vulnerabilities (CVE)

Filtered by CWE-428
Total 187 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-3757 1 Emc 1 Elan Touchpad Driver 2017-09-12 7.2 HIGH 7.8 HIGH
An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks (not ThinkPads). This could allow an attacker with local privileges to execute code with administrative privileges.
CVE-2017-9247 1 Sierrawireless 3 Sierra Wireless Em7345 Software, Sierra Wireless Em7455 Software, Sierra Wireless Location Sensor Driver 2017-08-25 4.6 MEDIUM 7.8 HIGH
Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) with build ID < 4657 allows local users to launch processes with elevated privileges.
CVE-2017-3751 1 Lenovo 1 Thinkpad Compact Usb Keyboard Driver 2017-08-24 7.2 HIGH 7.8 HIGH
An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges.
CVE-2017-5873 1 Unisys 1 Secure Partitioning 2017-04-17 4.6 MEDIUM 6.7 MEDIUM
Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.
CVE-2016-8225 1 Lenovo 2 Edge Keyboard Driver, Slim Usb Keyboard Driver 2017-02-01 4.6 MEDIUM 7.8 HIGH
Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges.
CVE-2016-6935 1 Adobe 1 Creative Cloud 2016-11-28 7.2 HIGH 7.8 HIGH
Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.8.0.310 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
CVE-2016-5793 1 Moxa 1 Active Opc Server 2016-11-28 7.2 HIGH 8.8 HIGH
Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.