CVE-2022-49037
Published Sep 26, 2024Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain…
Vendor archive
synology CVEs
Beta · best-effort349 CVEs tagged to vendor synology — 39 Critical, 120 High, 183 Medium, 7 Low, 0 Unrated.
CVE-2024-39350
Published Jun 28, 2024A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges without consent via un…
CVE-2024-39348
Published Jun 28, 2024Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle at…
CVE-2024-39347
Published Jun 28, 2024Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to…
CVE-2024-39352
Published Jun 28, 2024A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality. This allows remote authenticated users with administrator privileges to bypass fi…
CVE-2024-39351
Published Jun 28, 2024A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the NTP configuration. This allows remote authenti…
CVE-2024-39349
Published Jun 28, 2024A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjansson component and it does not affect the upstream library.…
CVE-2023-47803
Published Jun 28, 2024A vulnerability regarding improper limitation of a pathname to a restricted directory ('Path Traversal') is found in the Language Settings functionality. This allows remote attack…
CVE-2023-47802
Published Jun 28, 2024A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the IP block functionality. This allows remote aut…
CVE-2024-5463
Published Jun 4, 2024A vulnerability regarding buffer copy without checking the size of input ('Classic Buffer Overflow') has been found in the login component. This allows remote attackers to write s…
CVE-2024-29241
Published Mar 28, 2024Missing authorization vulnerability in System webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain non-s…
CVE-2024-29240
Published Mar 28, 2024Missing authorization vulnerability in LayoutSave webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to conduct…
CVE-2024-29239
Published Mar 28, 2024Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Recording.CountByCategory webapi component in Synology Surveillance Station b…
CVE-2024-29238
Published Mar 28, 2024Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log.CountByCategory webapi component in Synology Surveillance Station before…
CVE-2024-29237
Published Mar 28, 2024Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in ActionRule.Delete webapi component in Synology Surveillance Station before 9.…
CVE-2024-29236
Published Mar 28, 2024Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in AudioPattern.Delete webapi component in Synology Surveillance Station before…
CVE-2024-29235
Published Mar 28, 2024Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in IOModule.EnumLog webapi component in Synology Surveillance Station before 9.2…
CVE-2024-29234
Published Mar 28, 2024Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Group.Save webapi component in Synology Surveillance Station before 9.2.0-112…
CVE-2024-29233
Published Mar 28, 2024Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Emap.Delete webapi component in Synology Surveillance Station before 9.2.0-92…
CVE-2024-29232
Published Mar 28, 2024Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Alert.Enum webapi component in Synology Surveillance Station before 9.2.0-112…
CVE-2024-29231
Published Mar 28, 2024Improper validation of array index vulnerability in UserPrivilege.Enum webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authentica…
CVE-2024-29230
Published Mar 28, 2024Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in SnapShot.CountByCategory webapi component in Synology Surveillance Station be…
CVE-2024-29229
Published Mar 28, 2024Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obt…
CVE-2024-29228
Published Mar 28, 2024Missing authorization vulnerability in GetStmUrlPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtai…
CVE-2024-29227
Published Mar 28, 2024Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Layout.LayoutSave webapi component in Synology Surveillance Station before 9.…
Showing 76-100 of 349 CVEsPage 4 of 14