PT-2019-11026

Name of the Vulnerable Software and Affected Versions: Parsec Windows version 142-0 Parsec Linux Ubuntu 16.04 LTS Desktop version 142-1 Description: A vulnerability allows unauthorized users to maintain access to an account. Recommendations: For Parsec Windows version 142-0, update to a version...

Samba DoS

The vulnerability of Samba software on the Astra Linux operating system is related to the absence of the necessary privilege PARSECCAPSIG for the smbd process. Exploiting this vulnerability can allow a malicious actor to cause service interruptions. source-iocs-preserved const=PARSECCAPSIG...

PT-2018-2335

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to multiple security vulnerabilities in the parsec security extension of Astra Linux. These vulnerabilities are caused by incorrect handling of confidentiality level...

PT-2018-2336

Name of the Vulnerable Software and Affected Versions Astra Linux samba affected versions not specified Description The issue is related to the absence of the necessary PARSEC CAP SIG privilege in the smbd process. This could allow a remote attacker to cause a denial of service. Recommendations A...

libparsec-common-qt5 Confidential Data DoS

The vulnerability of the libparsec-common-qt5 package in the Astra Linux operating system is related to an error in the interaction with LDAP through parsec calls when retrieving user security attributes. Exploiting this vulnerability allows a remote attacker to gain access to information about a...

PT-2018-2926

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null pointer dereference in the Linux kernel's parsec implementation, specifically in the pdpl get raw handler. This can lead to a denial of service when the...

PT-2018-1986

Name of the Vulnerable Software and Affected Versions Postgresql versions affected versions not specified Description The issue is related to an error in the interaction with LDAP through parsec-calls when receiving user security attributes. This allows a remote attacker to access information abo...

PT-2018-1988

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in the interaction with LDAP through parsec-calls when receiving user security attributes. This allows a remote attacker to gain access to information abo...

CVE-2018-6651

In the uncurlwsaccept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation accepting an arbitrary substring match for WebSocket API requests allows remote attackers to bypass intended access restrictions. In Parsec, this means full...

CVE-2018-6651

In the uncurlwsaccept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation accepting an arbitrary substring match for WebSocket API requests allows remote attackers to bypass intended access restrictions. In Parsec, this means full...

Design/Logic Flaw

In the uncurlwsaccept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation accepting an arbitrary substring match for WebSocket API requests allows remote attackers to bypass intended access restrictions. In Parsec, this means full...

CVE-2018-6651

In the uncurlwsaccept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation accepting an arbitrary substring match for WebSocket API requests allows remote attackers to bypass intended access restrictions. In Parsec, this means full...

CVE-2018-6651

CVE-2018-6651 affects uncurl (uncurl.c) in uncurl before 0.07, as used in Parsec before 140-3. The issue is insufficient Origin header validation for WebSocket API requests (accepting an arbitrary substring match), which enables remote attackers to bypass access restrictions and, in Parsec, could...

PT-2018-17694

Name of the Vulnerable Software and Affected Versions uncurl versions prior to 0.07 Parsec versions prior to 140-3 Description The issue is related to insufficient Origin header validation in the uncurl ws accept function, allowing remote attackers to bypass access restrictions for WebSocket API...

CVE-2018-6651: Cross-Site Request Forgery (CSRF)

In the uncurlwsaccept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation accepting an arbitrary substring match for WebSocket API requests allows remote attackers to bypass intended access restrictions. In Parsec, this means full...

traksys.parsec-corp.com XSS vulnerability

Vulnerable URL: http://traksys.parsec-corp.com/m/forums/Tags.aspx?Tag=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

hgtvgardens.com Cross Site Scripting vulnerability OBB-112202

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| hgtvgardens.com ---|--- Open Bug Bounty...

Debian Security Advisory DSA 079-2 (uucp)

The remote host is missing an update to uucp announced via advisory DSA 079-2. OpenVAS Vulnerability Test $Id: deb0792.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 079-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...