Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Synology Application Service 1.5.4-0320 Clear all filters
TI-2018-09543 CVE-2018-13295 · GHSA-r8m8-266c-22qg

Information disclosure in Synology Application Service

Priority LOW 31

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01287 Published 2019-04-01 Fixed in 1.5.4-0320 CWE-200
TI-2018-09542 CVE-2018-13294 · GHSA-w7p7-785g-qr7h

Information disclosure in Synology Application Service

Priority LOW 31

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01287 Published 2019-04-01 Fixed in 1.5.4-0320 CWE-200