3 matches found
CVE-2023-52948
Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors...
CVE-2018-12941
This vulnerability allows remote attackers to execute arbitrary code in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 by adding a system command at the end of the "cacheDir" path and following usage of the "Clear Cache" functionality. This allows an authenticated attacker, with permission to th...
PT-2018-11497
Name of the Vulnerable Software and Affected Versions SeedDMS versions prior to 5.1.8 Description This issue allows remote attackers to execute arbitrary code by manipulating the cacheDir path and using the "Clear Cache" functionality. An authenticated attacker with permission to the Settings...