PT-2019-12223

Name of the Vulnerable Software and Affected Versions Pivotal Application Service versions 2.3.x through 2.3.15 Pivotal Application Service versions 2.4.x through 2.4.11 Pivotal Application Service versions 2.5.x through 2.5.7 Pivotal Application Service versions 2.6.x through 2.6.2 Description T...

CVE-2019-12775

An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044update05032019-482. They allow high-privileged root access by www-data via sudo without requiring appropriate access control. Furthermore, the user account that controls the web...

Synology Application Service Information Disclosure Vulnerability

Synology Application Service is a Synology NAS Network Storage Server feature extension framework from Synology, Inc. An information disclosure vulnerability exists in SYNO.Personal.Application.Info in Synology Application Service versions prior to 1.5.4-0320, which can be exploited by an...

Synology Application Service Information Disclosure Vulnerability (CNVD-2019-08965)

Synology Application Service is a Synology NAS Network Storage Server feature extension framework from Synology, Inc. An information disclosure vulnerability exists in SYNO.Personal.Profile in Synology Application Service versions prior to 1.5.4-0320. The vulnerability, which originates from a...

CVE-2018-13295

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter...

CVE-2018-13294

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter...

CVE-2018-13295

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter...

CVE-2018-13294

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter...

Information disclosure

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter...

Information disclosure

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter...

CVE-2018-13295

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter...

CVE-2018-13294

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter...

CVE-2018-13294

The CVE-2018-13294 vulnerability affects Synology Application Service’s SYNO.Personal.Profile component, prior to version 1.5.4-0320. It allows remote authenticated users to disclose sensitive system information via the uid parameter, indicating an information disclosure flaw likely tied to impro...

CVE-2018-13295

Summary: CVE-2018-13295 is an information disclosure vulnerability affecting the Synology Application Service’s SYNO.Personal.Application.Info component. Affected version(s): Synology Application Service prior to 1.5.4-0320. Impact: remote authenticated users can obtain sensitive system informati...

PT-2019-8959

Name of the Vulnerable Software and Affected Versions Synology Application Service versions prior to 1.5.4-0320 Description The issue allows remote authenticated users to obtain sensitive system information. This is achieved via the uid parameter. Recommendations For versions prior to 1.5.4-0320,...

PT-2019-8960

Name of the Vulnerable Software and Affected Versions Synology Application Service versions prior to 1.5.4-0320 Description The issue allows remote authenticated users to obtain sensitive system information. This is achieved via the version parameter in the SYNO.Personal.Application.Info componen...

CVE-2018-13295: Exposure of Sensitive Information to an Unauthorized Actor

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter...

CVE-2018-13294: Exposure of Sensitive Information to an Unauthorized Actor

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter...

Pivotal Software Pivotal Application Service Information Disclosure Vulnerability

Pivotal Software Pivotal Application Service PAS is a suite of application management software from the American company Pivotal Software. A security vulnerability exists in Pivotal Software PAS versions 2.2.x prior to 2.2.12, 2.3.x prior to 2.3.7, and 2.4.x prior to 2.4.3, which stems from a...

CVE-2019-3777 Apps Manager unverified SSL certs in Cloud Controller proxy

Pivotal Application Service PAS, versions 2.2.x prior to 2.2.12, 2.3.x prior to 2.3.7 and 2.4.x prior to 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the Cloud Controller's DNS record could...