205 matches found
CVE-2021-36781
A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an imposter service. This issue affects: openSUSE Factory parsec versions prior to 0.8.1-1.1...
Design/Logic Flaw
A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an imposter service. This issue affects: openSUSE Factory parsec versions prior to 0.8.1-1.1...
CVE-2021-36781
CVE-2021-36781 affects openSUSE Factory’s parsec package (prior to 0.8.1-1.1). The root cause is mislabeled/incorrect default permissions, enabling a local attacker to imitate the parsec service and cause DoS or clients to talk to an imposter service. Public documents cite instance details such a...
CVE-2021-36781 parsec: dangerous 777 permissions for /run/parsec
A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an imposter service. This issue affects: openSUSE Factory parsec versions prior to 0.8.1-1.1...
openSUSE Tumbleweed 安全漏洞
openSUSE Tumbleweed is an open source system from the openSUSE project. A security vulnerability exists in openSUSE Tumbleweed that stems from the openSUSE Tumbleweed Factory's parsec package setting incorrect default permissions, allowing a local attacker to conduct denial-of-service attacks or...
CVE-2021-36781
A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an imposter service. This issue affects: openSUSE Factory parsec versions prior to 0.8.1-1.1...
The vulnerability of the PARSEC security library function, related to insufficient data processing within the security mechanisms, allows a attacker to trigger a service failure.
The vulnerability of the PARSEC security library function is related to a failure in disabling file system protection. Exploiting this vulnerability allows an attacker to cause a service failure...
parsec-shop.ru Cross Site Scripting vulnerability OBB-1464894
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of the parsec inode permission module in the linux-astra-modules package, related to access control deficiencies for non-functional Unix sockets, allows a intruder to compromise data integrity.
The vulnerability of the parsec inode permission module in the linux-astra-modules package is related to deficiencies in access control for non-functional Unix sockets. Exploiting this vulnerability could allow a malicious actor to compromise data integrity from a remote location...
Parsec - Secure Cloud Framework
Homepage: https://parsec.cloud Documentation: https://parsec-cloud.readthedocs.org. Parsec is a free software AGPL v3 aiming at easily share your work and data in the cloud in total privacy thanks to cryptographic security. Key features: Works as a virtual drive on you computer. You can access an...
CVE-2018-6634
A vulnerability in Parsec Windows 142-0 and Parsec 'Linux Ubuntu 16.04 LTS Desktop' Build 142-1 allows unauthorized users to maintain access to an account...
CVE-2018-6634
A vulnerability in Parsec Windows 142-0 and Parsec 'Linux Ubuntu 16.04 LTS Desktop' Build 142-1 allows unauthorized users to maintain access to an account...
Design/Logic Flaw
A vulnerability in Parsec Windows 142-0 and Parsec 'Linux Ubuntu 16.04 LTS Desktop' Build 142-1 allows unauthorized users to maintain access to an account...
CVE-2018-6634
A vulnerability in Parsec Windows 142-0 and Parsec 'Linux Ubuntu 16.04 LTS Desktop' Build 142-1 allows unauthorized users to maintain access to an account...
CVE-2018-6634
The CVE-2018-6634 entry concerns Parsec on Windows (142-0) and Parsec for Linux Ubuntu 16.04 LTS Desktop (Build 142-1). The vulnerability allows unauthorized users to maintain access to an account. Per NVD, CVSS scores indicate high to critical impact (CVSSv2 base score 7.5; CVSSv3 base score 9.8...
The vulnerability of Samba software on the Astra Linux operating system, which allows a hacker to trigger a service failure.
The vulnerability of Samba software on the Astra Linux operating system is related to the absence of the necessary privilege PARSECCAPSIG for the smbd process. Exploiting this vulnerability can allow a malicious actor to cause service interruptions. source-iocs-preserved const=PARSECCAPSIG...
The vulnerability of the libparsec-common-qt5 package on the Astra Linux operating system allows a hacker to access confidential data and trigger a service failure.
The vulnerability of the libparsec-common-qt5 package in the Astra Linux operating system is related to an error in the interaction with LDAP through parsec calls when retrieving user security attributes. Exploiting this vulnerability allows a remote attacker to gain access to information about a...
CVE-2018-6651
In the uncurlwsaccept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation accepting an arbitrary substring match for WebSocket API requests allows remote attackers to bypass intended access restrictions. In Parsec, this means full...
Design/Logic Flaw
In the uncurlwsaccept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation accepting an arbitrary substring match for WebSocket API requests allows remote attackers to bypass intended access restrictions. In Parsec, this means full...
CVE-2018-6651
In the uncurlwsaccept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation accepting an arbitrary substring match for WebSocket API requests allows remote attackers to bypass intended access restrictions. In Parsec, this means full...