CVE-2024-0854
Published Jan 24, 2024URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7, 7.1.1-42962-7…
Vendor archive
synology CVEs
Beta · best-effort349 CVEs tagged to vendor synology — 39 Critical, 120 High, 183 Medium, 7 Low, 0 Unrated.
CVE-2023-5748
Published Nov 7, 2023Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology SSL VPN Client before 1.4.7-0687 allows local users to conduct de…
CVE-2023-5746
Published Oct 25, 2023A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote attackers to execute arbitrary code via unspecified vectors.…
CVE-2023-41741
Published Aug 31, 2023Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote attackers to obtain se…
CVE-2023-41740
Published Aug 31, 2023Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote at…
CVE-2023-41739
Published Aug 31, 2023Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated users to conduct denial-of-s…
CVE-2023-41738
Published Aug 31, 2023Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Directory Domain Functionality in Synology Router Manager (SRM) before…
CVE-2023-2729
Published Jun 13, 2023Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user cr…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2023-0142
Published Jun 13, 2023Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows re…
CVE-2023-32956
Published May 16, 2023Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and…
CVE-2023-32955
Published May 16, 2023Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DHCP Client Functionality in Synology Router Manager (SRM) before 1.2.5…
CVE-2023-0077
Published Jan 5, 2023Integer overflow or wraparound vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to overflow buffers via…
CVE-2022-43932
Published Jan 5, 2023Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-822…
CVE-2022-43931
Published Jan 3, 2023Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4.4-0635 allows remote attackers to execute arbitrary command…
- evidence mentions
- 4
- Buzz score
- 29.1
CVE-2022-43749
Published Oct 26, 2022Improper privilege management vulnerability in summary report management in Synology Presto File Server before 2.1.2-1601 allows remote authenticated users to bypass security cons…
CVE-2022-43748
Published Oct 26, 2022Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation management in Synology Presto File Server before 2.1.2-1601 allows r…
CVE-2022-27623
Published Oct 25, 2022Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote attackers to read…
CVE-2022-27622
Published Oct 25, 2022Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to access…
CVE-2022-3576
Published Oct 20, 2022A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to obtain sensitive inf…
CVE-2022-27626
Published Oct 20, 2022A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') is found in the session processing functionality of Out-of-Ba…
CVE-2022-27625
Published Oct 20, 2022A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the message processing functionality of Out-of-Band (OOB) Management.…
CVE-2022-27624
Published Oct 20, 2022A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the packet decryption functionality of Out-of-Band (OOB) Management.…
CVE-2022-27621
Published Aug 3, 2022Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology USB Copy before 2.2.0-1086 allows remote authenticated…
CVE-2022-27620
Published Aug 3, 2022Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology SSO Server before 2.2.3-0331 allows remote authenticat…
CVE-2022-27619
Published Aug 3, 2022Cleartext transmission of sensitive information vulnerability in authentication management in Synology Note Station Client before 2.2.2-609 allows man-in-the-middle attackers to o…
Showing 101-125 of 349 CVEsPage 5 of 14