Lucene search
+L

571 matches found

CNNVD
CNNVD
•added 2021/06/21 12:00 a.m.•41 views

White Shark System information leakage vulnerability

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A website physical path disclosure vulnerability exis...

5.3CVSS5.4AI score0.00895EPSS
SaveExploits0References3
NVD
NVD
•added 2021/06/18 3:15 a.m.•34 views

CVE-2021-34809

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

9.9CVSS0.01935EPSS
SaveExploits0References1
NVD
NVD
•added 2021/06/18 3:15 a.m.•33 views

CVE-2021-34811

Server-Side Request Forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors...

5CVSS0.00764EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/06/18 3:15 a.m.•26 views

CVE-2021-34811

Server-Side Request Forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors...

4.3CVSS5.8AI score0.00764EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/06/18 3:15 a.m.•22 views

CVE-2021-34809

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

8.8CVSS6.1AI score0.01935EPSS
SaveExploits0References1
Prion
Prion
•added 2021/06/18 3:15 a.m.•30 views

Command injection

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

6.5CVSS8.6AI score0.01935EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/06/18 3:15 a.m.•31 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors...

4CVSS4.4AI score0.00764EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/06/18 3:00 a.m.•46 views

CVE-2021-34809

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

9.9CVSS9.5AI score0.01935EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/18 12:00 a.m.•3 views

PT-2021-20666

Name of the Vulnerable Software and Affected Versions: Synology Download Station versions prior to 3.8.16-3566 Description: A Server-Side Request Forgery SSRF issue in the task management component allows remote authenticated users to access intranet resources via unspecified vectors. This could...

5CVSS0.00764EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/18 12:00 a.m.•5 views

CVE-2021-34809: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

9.9CVSS6.5AI score0.01935EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/18 12:00 a.m.•5 views

CVE-2021-34811: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors...

5CVSS5.8AI score0.00764EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/17 12:00 a.m.•22 views

Synology Download Station code issues and vulnerabilities

Synology Download Station is a download management tool for Synology. A server-side request forgery vulnerability exists in the Synology Download Station task management component, which can be exploited by remote attackers to submit a special request to obtain sensitive information...

5CVSS5.7AI score0.00764EPSS
SaveExploits0References2
Prion
Prion
•added 2021/06/01 2:15 p.m.•25 views

Server side request forgery (ssrf)

Server-Side request forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors...

4CVSS7AI score0.01EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/06/01 9:50 a.m.•73 views

CVE-2021-33184

Synology Download Station (task management component) is affected by CVE-2021-33184. The vulnerability is a Server-Side Request Forgery (SSRF) that can be exploited by remote authenticated users to read arbitrary files via unspecified vectors. Affected versions are before 3.8.15-3563. The connect...

7.7CVSS7AI score0.01EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/06/01 9:50 a.m.•40 views

CVE-2021-33184

Server-Side request forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors...

7.7CVSS7.3AI score0.01EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/01 12:00 a.m.•12 views

CVE-2021-33184: Server-Side Request Forgery (SSRF)

Server-Side request forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors...

7.7CVSS6AI score0.01EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/06/01 12:00 a.m.•6 views

PT-2021-20068

Name of the Vulnerable Software and Affected Versions Synology Download Station versions prior to 3.8.15-3563 Description A Server-Side request forgery SSRF issue exists in the task management component, allowing remote authenticated users to read arbitrary files. Recommendations For versions pri...

7.7CVSS0.01EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/05/26 9:23 a.m.•15 views

CVE-2021-33184

Server-Side request forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors...

7.7CVSS7.1AI score0.01EPSS
SaveExploits0References2
Exploit DB
Exploit DB
•added 2020/12/11 12:00 a.m.•739 views

Courier Management System 1.0 - 'ref_no' SQL Injection

Exploit Title: Courier Management System 1.0 - 'refno' SQL Injection Exploit Author: Zhaiyi Zeo Date: 2020-12-11 Vendor Homepage: https://www.sourcecodester.com/php/14615/task-management-system-using-phpmysqli-source-code.html Software Link:...

5.3AI score
SaveExploits0
Oracle linux
Oracle linux
•added 2020/12/02 12:00 a.m.•131 views

Unbreakable Enterprise kernel security update

4.1.12-124.45.6 - qla2xxx: disable target reset during link reset and update version Quinn Tran Orabug: 32095664 - scsi: qla2xxx: Fix early srb free on abort Quinn Tran Orabug: 32095664 - scsi: qla2xxx: Fix comment in MODULEPARMDESC in qla2xxx Masanari Iida Orabug: 32095664 - scsi: qla2xxx: Enabl...

5.5CVSS6.5AI score0.05228EPSS
SaveExploits0
Rows per page
Query Builder