Vendor
Synology
344 known vulnerabilities.
Products
DiskStation Manager (DSM) 99
Synology Router Manager (SRM) 43
Surveillance Station 25
Synology Photo Station 18
Synology DiskStation Manager (DSM) 13
Photo Station 12
Camera Firmware 9
Calendar 6
Unified Controller (DSMUC) 6
BeeDrive for desktop 6
Synology Drive Client 6
Media Server 5
Synology Calendar 5
Synology Active Backup for Business Agent 5
Note Station 4
Drive 4
Active Backup for Business 4
Synology SSL VPN Client 3
Download Station 3
Audio Station 3
Synology Chat Server 3
BeeStation OS (BSM) 3
Safe Access 3
Synology Download Station 3
Synology Video Station 2
Office 2
Application Service 2
Presto File Server 2
Synology Drive Server 2
File Station 2
SSL VPN Client 2
Chat 2
CardDAV Server 2
Hyper Backup 2
Synology Note Station Client 2
MailPlus Server 2
SSO Server 2
Synology Assistant 2
Synology Docker 1
VPN Plus Server 1
34 results · Clear filters · Feed
-
Critical 9.8CVE-2026-76954 Public exploit
An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskSta…
-
Critical 9.8
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2…
-
Critical 9.8CVE-2026-13684 Public exploit
An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-690…
-
Critical 9.0
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain…
-
Critical 9.8
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStat…
-
Critical 9.6
Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation Manager (DSM) before 7.2.1-…
-
Critical 9.8
A vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute a…
-
Critical 10.0
Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-…
-
Critical 9.8CVE-2024-10441 Public exploit
Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) befor…
-
Critical 9.8CVE-2024-10443 EPSS 29%
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manage…
-
Critical 9.8
A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjan…
-
Critical 9.9
Missing authorization vulnerability in System webapi component in Synology Surveillance Station before 9.2.0-9289 and 9…
-
Critical 9.8
A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote …
-
Critical 9.8
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI compone…
-
Critical 10.0CVE-2022-43931 EPSS 17%
Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4…
-
Critical 10.0
A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the packe…
-
Critical 10.0
A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the messa…
-
Critical 10.0
A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') i…
-
Critical 10.0
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media…
-
Critical 9.8
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in…
-
Critical 9.9
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sendin…
-
Critical 9.8
Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager (DSM) before 6.2.3-254…
-
Critical 9.9
Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management co…
-
Critical 9.9
Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows rem…
-
Critical 9.8
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail compone…
-
Critical 9.0
Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essen…
-
Critical 9.8
Use After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 all…
-
Critical 9.8
Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6…
-
Critical 9.8
Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3…
-
Critical 9.0
Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-2542…
-
Critical 9.0
Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allo…
-
Critical 9.0
Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DS…
-
Critical 9.6
SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute …
-
Critical 9.8
Improper access control vulnerability in lbd in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers…