Lucene search
+L

865 matches found

ATTACKERKB
ATTACKERKB
added 2021/04/29 5:15 p.m.4 views

CVE-2021-31431

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

6CVSS6AI score0.00448EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2021/04/29 4:31 p.m.72 views

CVE-2021-31432

The CVE-2021-31432 issue affects Parallels Desktop 15.1.5-47309 and is tied to the IDE virtual device. The root cause is improper validation of user-supplied data that leads to an out-of-bounds read (read past the end of an allocated buffer). This information disclosure vulnerability requires a l...

6CVSS5.8AI score0.00448EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/04/29 4:31 p.m.33 views

CVE-2021-31432

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

6CVSS6AI score0.00448EPSS
SaveExploits0References2
CVE
CVE
added 2021/04/29 4:31 p.m.56 views

CVE-2021-31431

The CVE-2021-31431 entry affects Parallels Desktop 15.1.5-47309, specifically the IDE virtual device. The vulnerability stems from improper validation of user-supplied data in the IDE virtual device, causing an information disclosure via a read past the end of an allocated buffer. An attacker mus...

6CVSS5.8AI score0.00448EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/04/29 4:31 p.m.36 views

CVE-2021-31431

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

6CVSS6AI score0.00448EPSS
SaveExploits0References2
CVE
CVE
added 2021/04/29 4:31 p.m.52 views

CVE-2021-31430

CVE-2021-31430 affects Parallels Desktop 15.1.5-47309, with the IDE virtual device vulnerable to an out-of-bounds read that can disclose sensitive information. The flaw arises from improper validation of user-supplied data, enabling a local attacker with high privileges on the target guest to rea...

6CVSS5.8AI score0.00448EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/04/29 4:31 p.m.51 views

CVE-2021-31429

Parallels Desktop 15.1.5-47309 is affected. The flaw is in the IDE virtual device where the length of user-supplied data is not properly validated before being copied to a fixed-length heap-based buffer, causing a heap-based buffer overflow. This enables local attackers who already have high-priv...

8.2CVSS8.3AI score0.00442EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/04/29 4:31 p.m.58 views

CVE-2021-31428

CVE-2021-31428 affects Parallels Desktop 15.1.5-47309, with the vulnerability located in the IDE virtual device. The issue is a heap-based buffer overflow caused by improper validation of the length of user-supplied data before copying to a fixed-length heap buffer, enabling local privilege escal...

8.2CVSS8.3AI score0.00442EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/04/29 4:31 p.m.49 views

CVE-2021-31428

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

8.2CVSS8.5AI score0.00442EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/04/21 12:0 a.m.8 views

Corel Parallels Desktop 缓冲区错误漏洞

Parallels Desktop is a virtual machine software that runs on Mac computers. An information disclosure vulnerability exists in the IDE virtual appliance in Parallels Desktop version 15.1.5-47309. The vulnerability stems from a lack of proper validation of user-supplied data. A local attacker could...

6CVSS5.6AI score0.00448EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.58 views

Parallels Desktop IDE Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the IDE...

8.2CVSS4.9AI score0.00442EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.43 views

Parallels Desktop IDE Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS2.9AI score0.00448EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.41 views

Parallels Desktop IDE Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the IDE...

8.2CVSS4.9AI score0.00442EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.37 views

Parallels Desktop IDE Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS2.9AI score0.00448EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/21 12:0 a.m.8 views

Corel Parallels Desktop 安全漏洞

Parallels Desktop is a virtual machine software that runs on Mac computers. A security vulnerability exists in the IDE virtual appliance in Parallels Desktop version 15.1.5-47309. The vulnerability stems from not properly validating the length of user-supplied data before copying it to a...

8.2CVSS6.1AI score0.00442EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.41 views

Parallels Desktop IDE Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS2.9AI score0.00448EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/21 12:0 a.m.7 views

Corel Parallels Desktop 缓冲区错误漏洞

Parallels Desktop is a virtual machine software that runs on Mac computers. An information disclosure vulnerability exists in the IDE virtual appliance in Parallels Desktop version 15.1.5-47309. The vulnerability stems from a lack of proper validation of user-supplied data. A local attacker could...

6CVSS5.6AI score0.00448EPSS
SaveExploits0References5
Huntr
Huntr
added 2021/02/19 12:0 a.m.8 views

Cross-site Scripting (XSS) - Generic in prasathmani/tinyfilemanager

:book: Description TinyFileManager is web based file manager and it is a simple, fast and small file manager with a single file, multi-language ready web application for storing, uploading, editing and managing files and folders online via web browser. The Application runs on PHP 5.5+, It allows...

7.2AI score
SaveExploits0
Veracode
Veracode
added 2021/02/10 12:57 a.m.49 views

Denial Of Service (DoS)

QEMU is vulnerable to denial of service. An out-of-bounds read in ideatapicmdreplyend in hw/ide/atapi.c allows an attacker to crash the application...

3.9CVSS3.6AI score0.00369EPSS
SaveExploits0References6Affected Software9
Prion
Prion
added 2021/01/26 6:16 p.m.18 views

Design/Logic Flaw

jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS...

4.3CVSS6.4AI score0.0114EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder