CVE-2022-26251
Published Apr 6, 2022The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges.
Vendor archive
synametrics CVEs
Beta · best-effort8 CVEs tagged to vendor synametrics — 0 Critical, 5 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2022-26250
Published Apr 6, 2022Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges.
CVE-2022-22828
Published Jan 27, 2022An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded fil…
CVE-2015-3140
Published Nov 21, 2019Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 5…
CVE-2018-10814
Published Sep 14, 2018Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.
CVE-2018-10763
Published Sep 14, 2018Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields in the Partial Branding configuration…
CVE-2015-3141
Published May 20, 2015Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies Xeams 4.5 Build 5755 and earlier allow remote attackers to hijack the authentication of admi…
CVE-2012-2569
Published Jun 19, 2014Cross-site scripting (XSS) vulnerability in Synametrics Technologies Xeams 4.4 Build 5720 allows remote attackers to inject arbitrary web script or HTML via the body of an email.
Showing 1-8 of 8 CVEsPage 1 of 1