الباحثون
رجوع
Maximilian Tews
#10824
من 60,596
29.4
إجمالي CVSS
الثغرات
·
6
متوسطة
6
PT-2019-8953
2019-04-01
5.3
CVE-2018-13288
Synology
Synology File Station
The issue allows remote attackers to obtain sensitive information. This is achieved via the `folder path` or `real path` parameter in the SYNO.FolderSharing.List endpoint.
PT-2019-8954
2019-04-01
5.3
CVE-2018-13289
Synology
Synology Router Manager
The issue allows remote attackers to obtain sensitive information. This is achieved via the `folder path` or `real path` parameter in the SYNO.FolderSharing.List endpoint.
PT-2019-8955
2019-04-01
4.3
CVE-2018-13290
Synology
Synology Router Manager
The issue allows remote authenticated users to determine the existence of files or obtain sensitive information of files via the `file path` parameter.
PT-2019-8956
2019-04-01
4.3
CVE-2018-13291
Synology
Synology Diskstation Manager
The issue allows remote authenticated users to obtain sensitive information due to an information exposure vulnerability in the /usr/syno/etc/mount.conf configuration file.
PT-2019-8957
2019-04-01
4.3
CVE-2018-13292
Synology
Synology Router Manager
The issue allows remote authenticated users to obtain sensitive information due to an information exposure vulnerability in the /usr/syno/etc/mount.conf configuration file. This is accessible because the configuration file is world-readable.
PT-2019-8958
2019-04-01
5.9
CVE-2018-13293
Synology
Synology Diskstation Manager
A cross-site scripting (XSS) issue exists in the Control Panel SSO Settings of Synology DiskStation Manager (DSM), allowing remote authenticated users to inject arbitrary web script or HTML via the URL parameter.