Lucene search
+L

194 matches found

NVD
NVD
added 2024/06/30 3:15 a.m.21 views

CVE-2024-6414

A vulnerability classified as problematic has been found in Parsec Automation TrakSYS 11.x.x. Affected is an unknown function of the file TS/export/contentpage of the component Export Page. The manipulation of the argument ID leads to direct request. It is possible to launch the attack remotely...

6.9CVSS0.00593EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/06/30 3:0 a.m.11 views

CVE-2024-6414 Parsec Automation TrakSYS Export Page contentpage direct request

A vulnerability classified as problematic has been found in Parsec Automation TrakSYS 11.x.x. Affected is an unknown function of the file TS/export/contentpage of the component Export Page. The manipulation of the argument ID leads to direct request. It is possible to launch the attack remotely...

6.9CVSS6.8AI score0.00593EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/06/30 3:0 a.m.25 views

CVE-2024-6414 Parsec Automation TrakSYS Export Page contentpage direct request

A vulnerability classified as problematic has been found in Parsec Automation TrakSYS 11.x.x. Affected is an unknown function of the file TS/export/contentpage of the component Export Page. The manipulation of the argument ID leads to direct request. It is possible to launch the attack remotely...

6.9CVSS0.00593EPSS
SaveExploits0References4
CVE
CVE
added 2024/06/30 3:0 a.m.49 views

CVE-2024-6414

The CVE-2024-6414 entry concerns Parsec Automation TrakSYS 11.x.x, specifically the Export Page component TS/export/contentpage. The vulnerability stems from manipulation of the ID argument, causing a direct request to the server and enabling remote exploitation. Multiple sources confirm the issu...

6.9CVSS5.3AI score0.00593EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/06/30 12:0 a.m.5 views

Parsec Automation TrakSYS Security Vulnerability

Parsec Automation TrakSYS is an MES solution from Parsec Automation, USA. A security vulnerability exists in Parsec Automation TrakSYS version 11.x.x, which stems from the parameter ID of the file TS/export/contentpage leading to a direct request...

6.9CVSS6.8AI score0.00593EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/06/30 12:0 a.m.3 views

PT-2024-37607 · Parsec Automation · Parsec Automation Traksys

Name of the Vulnerable Software and Affected Versions: Parsec Automation TrakSYS versions 11.x.x Description: A problematic vulnerability has been found in the Export Page component of the affected software, specifically in the file TS/export/contentpage. The issue involves the manipulation of th...

6.9CVSS5.1AI score0.00593EPSS
SaveExploits0References6
AstraLinux
AstraLinux
added 2024/06/26 1:32 p.m.7 views

Astra Linux – Vulnerability in Parsec

The vulnerability of the pdp-ls utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

4CVSS5.5AI score
SaveExploits0References3
NVD
NVD
added 2024/06/20 2:15 p.m.36 views

CVE-2024-6188

A vulnerability was found in Parsec Automation TrackSYS 11.x.x and classified as problematic. This issue affects some unknown processing of the file /TS/export/pagedefinition. The manipulation of the argument ID leads to direct request. The attack may be initiated remotely. The exploit has been...

6.9CVSS0.02053EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/06/20 1:31 p.m.16 views

CVE-2024-6188 Parsec Automation TrackSYS pagedefinition direct request

A vulnerability was found in Parsec Automation TrackSYS 11.x.x and classified as problematic. This issue affects some unknown processing of the file /TS/export/pagedefinition. The manipulation of the argument ID leads to direct request. The attack may be initiated remotely. The exploit has been...

6.9CVSS7AI score0.02053EPSS
SaveExploits0References4
CVE
CVE
added 2024/06/20 1:31 p.m.68 views

CVE-2024-6188

CVE-2024-6188 affects Parsec Automation TrackSYS 11.x.x. The issue involves processing of the file /TS/export/pagedefinition where manipulation of an argument ID leads to a direct request, allowing a remote attack. Public exploit information is present in the sources and a number of feeds referen...

6.9CVSS5.3AI score0.02053EPSS
SaveIn wildExploits0References4
Cvelist
Cvelist
added 2024/06/20 1:31 p.m.46 views

CVE-2024-6188 Parsec Automation TrackSYS pagedefinition direct request

A vulnerability was found in Parsec Automation TrackSYS 11.x.x and classified as problematic. This issue affects some unknown processing of the file /TS/export/pagedefinition. The manipulation of the argument ID leads to direct request. The attack may be initiated remotely. The exploit has been...

6.9CVSS0.02053EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/06/20 12:0 a.m.16 views

Parsec Automation TrackSYS Security Vulnerability

Parsec Automation TrackSYS is a data processing platform from Parsec Automation. A security vulnerability exists in Parsec Automation TrackSYS version 11.x.x, which stems from /TS/export/pagedefinition contains unknown processing that results in a direct request via parameter ID...

6.9CVSS6.9AI score0.02053EPSS
SaveExploits0References5
OSV
OSV
added 2024/06/15 12:0 a.m.11 views

OPENSUSE-SU-2024:11665-1 parsec-0.8.0-3.1 on GA media

These are all security issues fixed in the parsec-0.8.0-3.1 package on the GA media of openSUSE Tumbleweed...

5.9CVSS5.2AI score0.00207EPSS
SaveExploits1References1
OSV
OSV
added 2024/06/15 12:0 a.m.12 views

OPENSUSE-SU-2024:11945-1 parsec-1.0.0~rc3-1.1 on GA media

These are all security issues fixed in the parsec-1.0.0rc3-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS8.5AI score0.1446EPSS
SaveExploits1References1
OSV
OSV
added 2024/06/15 12:0 a.m.14 views

OPENSUSE-SU-2024:11946-1 parsec-tool-0.5.2-1.1 on GA media

These are all security issues fixed in the parsec-tool-0.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS8.5AI score0.1446EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/08/20 8:15 a.m.4 views

CVE-2023-37250

Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The application intentionally launches DLLs from a user-owned directory but intended to always perform integrity verification of those DLLs. This...

7CVSS7.1AI score0.00298EPSS
SaveExploits0References4
OSV
OSV
added 2023/08/20 8:15 a.m.8 views

CVE-2023-37250

Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The application intentionally launches DLLs from a user-owned directory but intended to always perform integrity verification of those DLLs. This...

7CVSS5.8AI score0.00298EPSS
SaveExploits0References3
NVD
NVD
added 2023/08/20 8:15 a.m.18 views

CVE-2023-37250

Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The application intentionally launches DLLs from a user-owned directory but intended to always perform integrity verification of those DLLs. This...

7CVSS6.9AI score0.00298EPSS
SaveExploits0References3
Prion
Prion
added 2023/08/20 8:15 a.m.20 views

Race condition

Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The application intentionally launches DLLs from a user-owned directory but intended to always perform integrity verification of those DLLs. This...

3.5CVSS6.8AI score0.00298EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/08/20 12:0 a.m.6 views

Unity Parsec 安全漏洞

Unity Parsec is a secure, real-time remote desktop software from Unity USA. A security vulnerability exists in versions prior to Unity Parsec 8 that stems from the presence of a race condition that allows a local attacker to escalate privileges...

7CVSS7.1AI score0.00298EPSS
SaveExploits0References4
Rows per page
Query Builder