The Email Viewer in RainLoop through 1.6.0 allows XSS via a crafted email message.Read More ...
Continue ReadingJuly 28, 2022
In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possibleRead More ...
Continue ReadingJuly 28, 2022
In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missedRead More ...
Continue ReadingJuly 28, 2022
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Audio Station before 6.5.4-3367 allows remote authenticated users to delete ...
Continue ReadingJuly 28, 2022
Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before 1.8.1-2876 allows remote attackers to obtain sensitive information via unspecifie ...
Continue ReadingJuly 28, 2022
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in webapi component in Synology CardDAV Server before 6.0.10-0153 allows remote authenticated users t ...
Continue ReadingJuly 28, 2022
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology WebDAV Server before 2.4.0-0062 allows remote authenticated users to delete ...
Continue ReadingJuly 28, 2022
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in task management component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows re ...
Continue ReadingJuly 28, 2022
Back to Main