Show filters
300 Total Results
Displaying 181-190 of 300
Sort by:
Attacker Value
Unknown
CVE-2017-16774
Disclosure Date: April 01, 2019 (last updated January 15, 2025)
Cross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager (DSM) before 6.1.4-15217-3 allows remote authenticated users to inject arbitrary web script or HTML via the package parameter.
0
Attacker Value
Unknown
CVE-2018-8913
Disclosure Date: April 01, 2019 (last updated November 27, 2024)
Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL.
0
Attacker Value
Unknown
CVE-2018-13289
Disclosure Date: April 01, 2019 (last updated November 27, 2024)
Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter.
0
Attacker Value
Unknown
CVE-2018-13295
Disclosure Date: April 01, 2019 (last updated November 27, 2024)
Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter.
0
Attacker Value
Unknown
CVE-2018-13286
Disclosure Date: April 01, 2019 (last updated January 15, 2025)
Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to obtain sensitive information via the world readable configuration.
0
Attacker Value
Unknown
CVE-2018-13298
Disclosure Date: April 01, 2019 (last updated November 27, 2024)
Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors.
0
Attacker Value
Unknown
CVE-2018-13287
Disclosure Date: April 01, 2019 (last updated November 27, 2024)
Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to obtain sensitive information via the world readable configuration.
0
Attacker Value
Unknown
CVE-2018-13285
Disclosure Date: April 01, 2019 (last updated November 27, 2024)
Command injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to execute arbitrary OS commands via the (1) MKD or (2) RMD command.
0
Attacker Value
Unknown
CVE-2018-13293
Disclosure Date: April 01, 2019 (last updated January 15, 2025)
Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to inject arbitrary web script or HTML via the URL parameter.
0
Attacker Value
Unknown
CVE-2018-13284
Disclosure Date: April 01, 2019 (last updated January 15, 2025)
Command injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to execute arbitrary OS commands via the (1) MKD or (2) RMD command.
0
