Lucene search
+L

1302 matches found

OSV
OSV
added 2020/12/25 7:15 p.m.7 views

CVE-2020-35710

Parallels Remote Application Server RAS 18 allows remote attackers to discover an intranet IP address because submission of the login form even with blank credentials provides this address to the attacker's client for use as a "host" value. In other words, after an attacker's web browser sent a...

5.3CVSS5.9AI score0.01661EPSS
SaveExploits1References2
Prion
Prion
added 2020/12/25 7:15 p.m.27 views

Design/Logic Flaw

Parallels Remote Application Server RAS 18 allows remote attackers to discover an intranet IP address because submission of the login form even with blank credentials provides this address to the attacker's client for use as a "host" value. In other words, after an attacker's web browser sent a...

5CVSS5.5AI score0.01661EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2020/12/25 6:58 p.m.80 views

CVE-2020-35710

Parallels Remote Application Server (RAS) 18 is affected. The issue allows remote attackers to discover an intranet IP address because, after submitting the login form (even with blank credentials), the attacker's client receives the host IP via a second request to RASHTML5Gateway/socket.io conta...

5.3CVSS5.4AI score0.01661EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2020/12/25 12:00 a.m.13 views

Parallels Remote Application Server Information Disclosure Vulnerability

Parallels Remote Application Server RAS is an application delivery and VDI Virtual Desktop Infrastructure solution from Parallels, Inc. in the United States. A security vulnerability exists in Parallels Remote Application Server that allows a remote attacker to discover an intranet IP address...

5.3CVSS6.1AI score0.01661EPSS
SaveExploits1References3
OSV
OSV
added 2020/08/25 9:15 p.m.8 views

CVE-2020-17402

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4 47270. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

6.5CVSS6.4AI score0.00475EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/25 9:15 p.m.20 views

CVE-2020-17401

This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...

6CVSS5.8AI score0.00553EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/25 9:15 p.m.9 views

CVE-2020-17401

This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...

6CVSS6AI score0.00553EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/25 9:15 p.m.35 views

CVE-2020-17402

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4 47270. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

6.5CVSS6.3AI score0.00475EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/25 9:15 p.m.10 views

CVE-2020-17391

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS6.3AI score0.0053EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/25 9:15 p.m.9 views

CVE-2020-17399

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS7.5AI score0.00533EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/25 9:15 p.m.30 views

CVE-2020-17393

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS6.2AI score0.0053EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/25 9:15 p.m.37 views

CVE-2020-17399

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS8.7AI score0.00533EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/25 9:15 p.m.28 views

CVE-2020-17398

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS6.1AI score0.0053EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/25 9:15 p.m.38 views

CVE-2020-17400

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS8.6AI score0.00533EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/25 9:15 p.m.13 views

CVE-2020-17394

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...

6CVSS6AI score0.00553EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/25 9:15 p.m.9 views

CVE-2020-17397

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

8.2CVSS6AI score0.0046EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/25 9:15 p.m.9 views

CVE-2020-17393

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS5.5AI score0.0053EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/25 9:15 p.m.8 views

CVE-2020-17392

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS7.5AI score0.00533EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/25 9:15 p.m.38 views

CVE-2020-17396

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS8.8AI score0.00533EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/25 9:15 p.m.35 views

CVE-2020-17391

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS6.3AI score0.0053EPSS
SaveExploits0References2
Rows per page
Query Builder