Skip to content
OpenAdvisories

Archive

18 June 2021

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 6.1

    MCU Technologies MCUsystem - Reflected XSS

    The login page in the MCUsystem does not filter with special characters, which allows remote attackers can inject JavaScript without privilege and thus perform reflected XSS attacks.

  • Medium 5.8

    Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows rem…

  • Medium 5.0

    Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.1…

  • Medium 5.8

    Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attac…