Vendor
Synology
344 known vulnerabilities.
Products
DiskStation Manager (DSM) 99
Synology Router Manager (SRM) 43
Surveillance Station 25
Synology Photo Station 18
Synology DiskStation Manager (DSM) 13
Photo Station 12
Camera Firmware 9
Calendar 6
Unified Controller (DSMUC) 6
BeeDrive for desktop 6
Synology Drive Client 6
Media Server 5
Synology Calendar 5
Synology Active Backup for Business Agent 5
Note Station 4
Drive 4
Active Backup for Business 4
Synology SSL VPN Client 3
Download Station 3
Audio Station 3
Synology Chat Server 3
BeeStation OS (BSM) 3
Safe Access 3
Synology Download Station 3
Synology Video Station 2
Office 2
Application Service 2
Presto File Server 2
Synology Drive Server 2
File Station 2
SSL VPN Client 2
Chat 2
CardDAV Server 2
Hyper Backup 2
Synology Note Station Client 2
MailPlus Server 2
SSO Server 2
Synology Assistant 2
Synology Docker 1
VPN Plus Server 1
93 results · Clear filters · Feed
-
High 8.6
An authentication bypass using an alternate path or channel vulnerability in the rsync in Synology DiskStation Manager …
-
High 7.2
An improper neutralization of special elements used in an OS command vulnerability in the VPN API in Synology DiskStati…
-
High 7.5
An access of uninitialized pointer vulnerability in the nfsd in Synology DiskStation Manager (DSM) before 7.3.2-86009-5…
-
High 8.1
An improper neutralization of special elements used in an SQL command vulnerability in the User API in Synology DiskSta…
-
High 8.1
An improper link resolution before file access vulnerability in the thumb in Synology DiskStation Manager (DSM) before …
-
High 8.1
An authentication bypass using an alternate path or channel vulnerability in the OTP in Synology DiskStation Manager (D…
-
High 8.8
A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager (DSM) before 7.…
-
High 8.8
An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation…
-
High 8.8
An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology DiskStation Manager (DSM) …
-
High 7.1
An improper certificate validation vulnerability in Email API in Synology DiskStation Manager (DSM) before 7.2.1-69057-…
-
High 8.0
An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in Synology DiskStation Manag…
-
High 8.1
An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1…
-
High 8.8
An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology DiskStation Manager (DSM…
-
High 7.3
An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or w…
-
High 7.8
An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active B…
-
High 7.8
An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Back…
-
High 8.6
A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files.
-
High 7.5
An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-…
-
High 8.1
Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before …
-
High 7.8
Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-1…
-
High 8.1
A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to…
-
High 7.8
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology Be…
-
High 7.5
Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attac…
-
High 7.8
Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13…
-
High 7.2
A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.
-
High 7.5
Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.…
-
High 7.2
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DDNS Record…
-
High 7.5
Missing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057…
-
High 7.5CVE-2024-50631 EPSS 27%
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in the system syncin…
-
High 7.5CVE-2024-50630 EPSS 25%
Missing authentication for critical function vulnerability in the webapi component in Synology Drive Server before 3.0.…
-
High 7.5
Improper certificate validation vulnerability in the LDAP utilities in Synology DiskStation Manager (DSM) before 7.1.1-…
-
High 7.5
Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4…
-
High 8.1
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in OTP reset functionality…
-
High 7.8
Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Clien…
-
High 8.2
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synolo…
-
High 7.5
A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-…
-
High 7.5
Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) befor…
-
High 7.2
A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is…
-
High 7.2
A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is…
-
High 7.7
Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-9…