Vendor/product archive

synology / office CVEs

Beta · best-effort

3 CVEs tagged to synology / office — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to synology vendor archive

CVE-2019-11828

Published Jun 30, 2019

Cross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vec…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-8924

Published Jun 5, 2018

Cross-site scripting (XSS) vulnerability in Title Tootip in Synology Office before 3.0.3-2143 allows remote authenticated users to inject arbitrary web script or HTML via the mali…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2017-11150

Published Aug 14, 2017

Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands via shell metacharacte…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1