|
246351
|
4.8 |
MEDIUM
Network
|
pixelite
|
events_manager
|
The Events Manager plugin 5.9.4 for WordPress has XSS via the dbem_event_reapproved_email_body parameter to the wp-admin/edit.php?post_type=event&page=events-manager-options URI.
|
CWE-79
Cross-site Scripting
|
CVE-2018-13137
|
2024-11-21 12:46 |
2019-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246352
|
5.3 |
MEDIUM
Network
|
fortinet
|
fortios
|
An information disclosure vulnerability in Fortinet FortiOS 6.0.1, 5.6.7 and below allows attacker to reveals serial number of FortiGate via hostname field defined in connection control setup packets…
|
CWE-200
Information Exposure
|
CVE-2018-13366
|
2024-11-21 12:46 |
2019-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246353
|
6.5 |
MEDIUM
Network
|
synology
|
calendar
|
Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to upload arbitrary files via the filename parameter.
|
CWE-22
Path Traversal
|
CVE-2018-13299
|
2024-11-21 12:46 |
2019-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246354
|
8.1 |
HIGH
Network
|
synology
|
moments
|
Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2018-13298
|
2024-11-21 12:46 |
2019-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246355
|
5.3 |
MEDIUM
Network
|
synology
|
drive_server
|
Information exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2-10562 allows remote attackers to obtain sensitive system information via the dsm_path parameter.
|
CWE-200
Information Exposure
|
CVE-2018-13297
|
2024-11-21 12:46 |
2019-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246356
|
7.5 |
HIGH
Network
|
synology
|
mailplus_server
|
Uncontrolled resource consumption vulnerability in TLS configuration in Synology MailPlus Server before 2.0.5-0606 allows remote attackers to conduct denial-of-service attacks via client-initiated re…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2018-13296
|
2024-11-21 12:46 |
2019-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246357
|
6.5 |
MEDIUM
Network
|
synology
|
application_service
|
Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the…
|
CWE-200
Information Exposure
|
CVE-2018-13295
|
2024-11-21 12:46 |
2019-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246358
|
6.5 |
MEDIUM
Network
|
synology
|
application_service
|
Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid para…
|
CWE-200
Information Exposure
|
CVE-2018-13294
|
2024-11-21 12:46 |
2019-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246359
|
5.4 |
MEDIUM
Network
|
synology
|
diskstation_manager
|
Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to inject arbitrary web script or HTM…
|
CWE-79
Cross-site Scripting
|
CVE-2018-13293
|
2024-11-21 12:46 |
2019-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246360
|
4.3 |
MEDIUM
Network
|
synology
|
router_manager
|
Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authenticated users to obtain sensitive information via the world rea…
|
CWE-200
Information Exposure
|
CVE-2018-13292
|
2024-11-21 12:46 |
2019-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|