All packages
Syncovery vulnerabilities
3 known CVE vulnerabilities in Syncovery, translated and rated.
- CVE-2022-36536Critical
A vulnerability in the post_applogin.php component of Syncovery 9 for Linux version 9.47x and below allows attackers to escalate privileges by crafting malicious session tokens.
- CVE-2022-36534High
Multiple remote code execution (RCE) vulnerabilities were discovered in Syncovery 9 for Linux version 9.47x and below via the Job_ExecuteBefore and Job_ExecuteAfter parameters in post_profilesettings.php.
- CVE-2022-36533Medium
Syncovery 9 for Linux version 9.47x and below contains a cross-site scripting (XSS) vulnerability. This flaw could allow an attacker to inject malicious scripts into the user interface.