Vendor
Synology
344 known vulnerabilities.
Products
DiskStation Manager (DSM) 99
Synology Router Manager (SRM) 43
Surveillance Station 25
Synology Photo Station 18
Synology DiskStation Manager (DSM) 13
Photo Station 12
Camera Firmware 9
Calendar 6
Unified Controller (DSMUC) 6
BeeDrive for desktop 6
Synology Drive Client 6
Media Server 5
Synology Calendar 5
Synology Active Backup for Business Agent 5
Note Station 4
Drive 4
Active Backup for Business 4
Synology SSL VPN Client 3
Download Station 3
Audio Station 3
Synology Chat Server 3
BeeStation OS (BSM) 3
Safe Access 3
Synology Download Station 3
Synology Video Station 2
Office 2
Application Service 2
Presto File Server 2
Synology Drive Server 2
File Station 2
SSL VPN Client 2
Chat 2
CardDAV Server 2
Hyper Backup 2
Synology Note Station Client 2
MailPlus Server 2
SSO Server 2
Synology Assistant 2
Synology Docker 1
VPN Plus Server 1
165 results · Clear filters · Feed
-
Medium 4.3
An external control of system or configuration setting vulnerability in the synomount in Synology DiskStation Manager (…
-
Medium 4.3
A missing authorization vulnerability in the TaskScheduler API in Synology DiskStation Manager (DSM) before 7.3.2-86009…
-
Medium 4.3
A missing authorization vulnerability in the SocketIo API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 an…
-
Medium 4.3
A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager (DSM) before 7.3.2-86…
-
Medium 4.3
An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology DiskStat…
-
Medium 4.3
A missing authorization vulnerability in the Promotion API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 a…
-
Medium 5.3
A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.…
-
Medium 5.3
An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager (DSM) before 7.3.2-860…
-
Medium 5.4
An improper neutralization of input during web page generation vulnerability in the Notification API in Synology DiskSt…
-
Medium 5.4
An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation M…
-
Medium 5.4
A missing authorization vulnerability in the ACL API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4…
-
Medium 5.4
An improper neutralization of input during web page generation vulnerability in the Audio Player in Synology DiskStatio…
-
Medium 5.9
An improper certificate validation vulnerability in the Support Form in Synology DiskStation Manager (DSM) before 7.3.2…
-
Medium 6.5
An insertion of sensitive information into sent data vulnerability in the API framework in Synology DiskStation Manager…
-
Medium 6.5
An external control of file name or path vulnerability in the Media Parser in Synology DiskStation Manager (DSM) before…
-
Medium 6.5
A missing authentication for critical functionality vulnerability in the Webdav API in Synology DiskStation Manager (DS…
-
Medium 6.8
An improper neutralization of CRLF sequences vulnerability in the SNMP API in Synology DiskStation Manager (DSM) before…
-
Medium 6.5
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Desktop API in Synol…
-
Medium 5.3
An exposure of sensitive information through data queries vulnerability in Desktop API in Synology DiskStation Manager …
-
Medium 4.3
A server-side request forgery (SSRF) vulnerability in PersonMail API in Synology DiskStation Manager (DSM) before 7.2.1…
-
Medium 4.3
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Audio API in Synolog…
-
Medium 5.4
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Video API in S…
-
Medium 6.5
A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation Manager (DSM) before 7.2.1…
-
Medium 4.3
An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager (DSM) before 7.2.1-69…
-
Medium 6.5
An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in…
-
Medium 4.8
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Theme API in S…
-
Medium 5.3
An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation Manager (DSM) before 7.2.1…
-
Medium 6.5
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain…
-
Medium 4.3
A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote a…
-
Medium 4.1
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository we…
-
Medium 4.3
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup Task function…
-
Medium 5.9
A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows…
-
Medium 6.2
A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager…
-
Medium 6.1
An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary…
-
Medium 6.1
An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local us…
-
Medium 6.1
Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arb…
-
Medium 5.4
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functiona…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Safe Access in Sy…
-
Medium 4.9
Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2…
-
Medium 4.9
Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Stat…