parseplatform Vulnerability Advisory Catalog

Total 108 security vulnerabilities recorded for parseplatform software and firmware.

← Back to All Vendors
Component: parse-server

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 4.10.11 and 5.2.2, the certi...

📅 2022-06-17
CVSS 8.6 Dossier →
Component: parse-server

Improper validation of the Apple certificate URL in the Apple Game Center authentication adapter allows attackers to bypass authentication, making the...

📅 2022-05-04
CVSS 7.5 Dossier →
CVE-2022-24760 CRITICAL
Component: parse-server

Parse Server is an open source http web server backend. In versions prior to 4.10.7 there is a Remote Code Execution (RCE) vulnerability in Parse Serv...

📅 2022-03-12
CVSS 10.0 Dossier →
Component: parse-server

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version 4.10.4, for regular (non-Live...

📅 2021-09-30
CVSS 7.5 Dossier →
Component: parse-server

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version 4.10.3, Parse Server crashes ...

📅 2021-09-02
CVSS 7.5 Dossier →
Component: parse-server

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Developers can use the REST API to signup user...

📅 2021-08-19
CVSS 4.8 Dossier →
Component: parse-server

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. It is an npm package "parse-server". In Parse ...

📅 2020-12-30
CVSS 7.7 Dossier →
Component: parse-server

Parse Server (npm package parse-server) broadcasts events to all clients without checking if the session token is valid. This allows clients with expi...

📅 2020-10-22
CVSS 4.3 Dossier →
Component: parse_server

In parser-server from version 3.5.0 and before 4.3.0, an authenticated user using the viewer GraphQL query can by pass all read security on his User o...

📅 2020-07-22
CVSS 6.5 Dossier →
Component: parse-server

In parser-server before version 4.1.0, you can fetch all the users objects, by using regex in the NoSQL query. Using the NoSQL, you can use a regex on...

📅 2020-03-04
CVSS 7.7 Dossier →
Component: parse-server

parse-server before 3.6.0 allows account enumeration....

📅 2019-07-29
CVSS 5.3 Dossier →
Component: parse-server

parse-server before 3.4.1 allows DoS after any POST to a volatile class....

📅 2019-07-29
CVSS 7.5 Dossier →
Page 5 of 5 (108 Total Records)