Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

CVE-2017-15887

An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack.

CVSS 3.0 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Synology
Products
Carddav Server
CVE-2022-27613

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in webapi component in Synology CardDAV Server before 6.0.10-0153 allows remote authenticated users to inject SQL commands via unspecified vectors.

CVSS 3.1 · 8.3 High EPSS 1.1% KEV · Not listed
Vendors
Synology
Products
Carddav Server
CVE-2018-8928

Cross-site scripting (XSS) vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the (1) family_name, (2) given_name, or (3) additional_name parameter.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Synology
Products
Carddav Server