Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2025-13167

Cross‑Site Scripting in Synology Contacts Contact Functionality

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users to read or write specific files containing non-sensitive information via unspecified vectors.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Synology
Products
Contacts Diskstation Manager Synology Contacts