Parallels Access Agent Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access Agent. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2022-22428

Name of the Vulnerable Software and Affected Versions Parallels Access Agent version 6.5.4 39316 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target host system in...

PT-2022-22427

Name of the Vulnerable Software and Affected Versions Parallels Access Agent version 6.5.3 39313 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order t...

PT-2022-22425

Name of the Vulnerable Software and Affected Versions Parallels Access Agent version 6.5.4 39316 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target host system in...

PT-2022-22429

Name of the Vulnerable Software and Affected Versions Parallels Access version 6.5.4 39316 Agent Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order t...

Parallels Desktop Updater Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the update...

Parallels Desktop ACPI Out-Of-Bounds Read Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the ACPI...

Parallels Desktop Updater Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the update...

Parallels Desktop Tools Untrusted Pointer Dereference Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within t...

PT-2022-22422

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 17.1.1 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

PT-2022-22421

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 17.1.1 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

PT-2022-22420

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 17.1.1 Description This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target guest system in...

PT-2022-22418

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 17.1.1 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to...

Parallels H-Sphere Cross-Site Scripting Vulnerability

Parallels H-Sphere is a web-hosting automation control panel from Parallels, Inc. It is used for shared web hosting services. Parallels H-Sphere version 3.6.2 contains a cross-site scripting vulnerability that can be exploited by attackers to perform XSS via indexen.php in the parameters...

CVE-2022-30777

Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...

CVE-2022-30777

Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...

CVE-2022-30777

Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...

Design/Logic Flaw

Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...

CVE-2022-30777

Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...

CVE-2022-30777

The CVE-2022-30777 issue affects Parallels H-Sphere 3.6.1713, where a Cross-Site Scripting (XSS) flaw exists in the index_en.php via the 'from' parameter. Exploitation could allow arbitrary script execution in the victim’s browser, potentially leading to session hijacking, defacement, or theft of...