CVE-2018-6634

The CVE-2018-6634 entry concerns Parsec on Windows (142-0) and Parsec for Linux Ubuntu 16.04 LTS Desktop (Build 142-1). The vulnerability allows unauthorized users to maintain access to an account. Per NVD, CVSS scores indicate high to critical impact (CVSSv2 base score 7.5; CVSSv3 base score 9.8...

CVE-2018-6651

CVE-2018-6651 affects uncurl (uncurl.c) in uncurl before 0.07, as used in Parsec before 140-3. The issue is insufficient Origin header validation for WebSocket API requests (accepting an arbitrary substring match), which enables remote attackers to bypass access restrictions and, in Parsec, could...