parallels Vulnerability Advisory Catalog

Total 153 security vulnerabilities recorded for parallels software and firmware.

← Back to All Vendors
Component: parallels_desktop

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first ...

📅 2020-08-25
CVSS 6.5 Dossier →
Component: parallels_desktop

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first o...

📅 2020-08-25
CVSS 8.8 Dossier →
Component: parallels_desktop

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first ...

📅 2020-08-25
CVSS 6.5 Dossier →
Component: parallels_desktop

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first o...

📅 2020-08-25
CVSS 8.8 Dossier →
CVE-2020-15860 CRITICAL
Component: remote_application_server

Parallels Remote Application Server (RAS) 17.1.1 has a Business Logic Error causing remote code execution. It allows an authenticated user to execute ...

📅 2020-07-24
CVSS 9.9 Dossier →
CVE-2020-8876 MEDIUM
Component: parallels_desktop

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first ...

📅 2020-03-23
CVSS 5.5 Dossier →
Component: parallels_desktop

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first o...

📅 2020-03-23
CVSS 8.8 Dossier →
CVE-2020-8874 MEDIUM
Component: parallels_desktop

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first o...

📅 2020-03-23
CVSS 6.7 Dossier →
CVE-2020-8873 MEDIUM
Component: parallels_desktop

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first o...

📅 2020-03-23
CVSS 6.7 Dossier →
CVE-2020-8872 MEDIUM
Component: parallels_desktop

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.1-47117. An attacker m...

📅 2020-03-23
CVSS 4.4 Dossier →
CVE-2020-8871 MEDIUM
Component: parallels_desktop

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.0-47107 . An attacker must first ...

📅 2020-03-23
CVSS 6.7 Dossier →
Component: parallels

Parallels 13 uses cleartext HTTP as part of the update process, allowing man-in-the-middle attacks. Users of out-of-date versions are presented with a...

📅 2020-01-21
CVSS 7.5 Dossier →
Component: parallels_desktop

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop version 14.1.3 (4548...

📅 2020-01-07
CVSS 7.8 Dossier →
Component: parallels_plesk_panel

Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter....

📅 2019-11-13
CVSS 6.1 Dossier →
Component: remote_application_server

In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the file path...

📅 2018-02-28
CVSS 7.5 Dossier →
CVE-2013-4878 UNKNOWN
Component: parallels_plesk_panel

The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directi...

📅 2013-07-18
CVSS 7.5 Dossier →
CVE-2013-0133 UNKNOWN
Component: parallels_plesk_panel

Untrusted search path vulnerability in /usr/local/psa/admin/sbin/wrapper in Parallels Plesk Panel 11.0.9 allows local users to gain privileges via a c...

📅 2013-04-18
CVSS 7.2 Dossier →
CVE-2013-0132 UNKNOWN
Component: parallels_plesk_panel

The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execu...

📅 2013-04-18
CVSS 6.8 Dossier →
CVE-2012-5004 UNKNOWN
Component: h-sphere

Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3 Patch 1 allow remote attackers to hijack the authentication of ad...

📅 2012-09-19
CVSS 6.8 Dossier →
CVE-2012-1557 UNKNOWN
Component: parallels_plesk_panel

SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU#2, 9.x before 9.5 MU#11, 10.0.x before ...

📅 2012-03-12
CVSS 7.5 Dossier →
CVE-2011-4856 UNKNOWN
Component: parallels_plesk_panel

The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 sends incorrect Content-Type headers for certain resources, which might allow remot...

📅 2011-12-16
CVSS 9.3 Dossier →
CVE-2011-4855 UNKNOWN
Component: parallels_plesk_panel

The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 omits the Content-Type header's charset parameter for certain resources, which migh...

📅 2011-12-16
CVSS 9.3 Dossier →
CVE-2011-4854 UNKNOWN
Component: parallels_plesk_panel

The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Type...

📅 2011-12-16
CVSS 9.3 Dossier →
CVE-2011-4853 UNKNOWN
Component: parallels_plesk_panel

The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 includes an RFC 1918 IP address within a web page, which allows remote attackers to...

📅 2011-12-16
CVSS 4.3 Dossier →
Page 4 of 7 (153 Total Records)