53 results · Clear filters · Feed
-
Medium 4.3
An external control of system or configuration setting vulnerability in the synomount in Synology DiskStation Manager (…
-
Medium 4.3
A missing authorization vulnerability in the TaskScheduler API in Synology DiskStation Manager (DSM) before 7.3.2-86009…
-
Medium 4.3
A missing authorization vulnerability in the SocketIo API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 an…
-
Medium 4.3
A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager (DSM) before 7.3.2-86…
-
Medium 4.3
An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology DiskStat…
-
Medium 4.3
A missing authorization vulnerability in the Promotion API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 a…
-
Medium 5.3
A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.…
-
Medium 5.3
An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager (DSM) before 7.3.2-860…
-
Medium 5.4
An improper neutralization of input during web page generation vulnerability in the Notification API in Synology DiskSt…
-
Medium 5.4
An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation M…
-
Medium 5.4
A missing authorization vulnerability in the ACL API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4…
-
Medium 5.4
An improper neutralization of input during web page generation vulnerability in the Audio Player in Synology DiskStatio…
-
Medium 5.9
An improper certificate validation vulnerability in the Support Form in Synology DiskStation Manager (DSM) before 7.3.2…
-
Medium 6.5
An insertion of sensitive information into sent data vulnerability in the API framework in Synology DiskStation Manager…
-
Medium 6.5
An external control of file name or path vulnerability in the Media Parser in Synology DiskStation Manager (DSM) before…
-
Medium 6.5
A missing authentication for critical functionality vulnerability in the Webdav API in Synology DiskStation Manager (DS…
-
Medium 6.8
An improper neutralization of CRLF sequences vulnerability in the SNMP API in Synology DiskStation Manager (DSM) before…
-
Medium 6.5
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Desktop API in Synol…
-
Medium 5.3
An exposure of sensitive information through data queries vulnerability in Desktop API in Synology DiskStation Manager …
-
Medium 4.3
A server-side request forgery (SSRF) vulnerability in PersonMail API in Synology DiskStation Manager (DSM) before 7.2.1…
-
Medium 4.3
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Audio API in Synolog…
-
Medium 5.4
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Video API in S…
-
Medium 6.5
A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation Manager (DSM) before 7.2.1…
-
Medium 4.3
An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager (DSM) before 7.2.1-69…
-
Medium 6.5
An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in…
-
Medium 4.8
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Theme API in S…
-
Medium 5.3
An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation Manager (DSM) before 7.2.1…
-
Medium 4.3
Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manage…
-
Medium 5.3
Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.…
-
Medium 4.3
Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65…
-
Medium 5.4
URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Mana…
-
Medium 5.9
Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM…
-
Medium 6.5
Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM)…
-
Medium 4.1
Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) …
-
Medium 5.3
A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Mana…
-
Medium 6.5
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…
-
Medium 6.5
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service managem…
-
Medium 6.5
Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in wor…
-
Medium 4.7
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Security Manageme…
-
Medium 4.7
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…