Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4
CVE-2019-11828
- EPSS 0.13%
- Published 30.06.2019 15:15:09
- Last modified 21.11.2024 04:21:50
Cross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
5.4
CVE-2018-8924
- EPSS 0.13%
- Published 05.06.2018 14:29:00
- Last modified 21.11.2024 04:14:36
Cross-site scripting (XSS) vulnerability in Title Tootip in Synology Office before 3.0.3-2143 allows remote authenticated users to inject arbitrary web script or HTML via the malicious file name.
7.8
CVE-2017-11150
- EPSS 2.5%
- Published 14.08.2017 19:29:01
- Last modified 20.04.2025 01:37:25
Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the crafted file name of RTF documents.
1