CVE-2018-13294

The CVE-2018-13294 vulnerability affects Synology Application Service’s SYNO.Personal.Profile component, prior to version 1.5.4-0320. It allows remote authenticated users to disclose sensitive system information via the uid parameter, indicating an information disclosure flaw likely tied to impro...

CVE-2018-13295

Summary: CVE-2018-13295 is an information disclosure vulnerability affecting the Synology Application Service’s SYNO.Personal.Application.Info component. Affected version(s): Synology Application Service prior to 1.5.4-0320. Impact: remote authenticated users can obtain sensitive system informati...