Vendor
Synology
344 known vulnerabilities.
Products
DiskStation Manager (DSM) 99
Synology Router Manager (SRM) 43
Surveillance Station 25
Synology Photo Station 18
Synology DiskStation Manager (DSM) 13
Photo Station 12
Camera Firmware 9
Calendar 6
Unified Controller (DSMUC) 6
BeeDrive for desktop 6
Synology Drive Client 6
Media Server 5
Synology Calendar 5
Synology Active Backup for Business Agent 5
Note Station 4
Drive 4
Active Backup for Business 4
Synology SSL VPN Client 3
Download Station 3
Audio Station 3
Synology Chat Server 3
BeeStation OS (BSM) 3
Safe Access 3
Synology Download Station 3
Synology Video Station 2
Office 2
Application Service 2
Presto File Server 2
Synology Drive Server 2
File Station 2
SSL VPN Client 2
Chat 2
CardDAV Server 2
Hyper Backup 2
Synology Note Station Client 2
MailPlus Server 2
SSO Server 2
Synology Assistant 2
Synology Docker 1
VPN Plus Server 1
165 results · Clear filters · Feed
-
Medium 4.9
Missing authorization vulnerability in AddOns functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2…
-
Medium 6.8
Files or directories accessible to external parties vulnerability in redis-server component in Synology BeeDrive for de…
-
Medium 6.5
A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows…
-
Medium 6.7
An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to rea…
-
Medium 5.6
Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local user…
-
Medium 6.3
A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings,…
-
Medium 4.3
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.
-
Medium 4.3
A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information.
-
Medium 5.4
A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files.
-
Medium 4.3
Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manage…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Synology RADIUS S…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in NTP Region functi…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in VPN Setting funct…
-
Medium 6.5CVE-2025-4679 Public exploit
A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive i…
-
Medium 5.3
Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.…
-
Medium 4.3
Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65…
-
Medium 6.5
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in encrypted share umount …
-
Medium 4.9
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in agent-related functiona…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in DDNS Record funct…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect Sett…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Router Port Forwa…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect MAC …
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Network WOL funct…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in file station func…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in network center po…
-
Medium 4.3
Incorrect authorization vulnerability in ActionRule webapi component in Synology Surveillance Station before 9.2.0-1128…
-
Medium 4.3
Incorrect authorization vulnerability in Alert.Setting webapi component in Synology Surveillance Station before 9.2.0-1…
-
Medium 5.5
Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup fo…
-
Medium 5.0
Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Age…
-
Medium 4.0
Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Busine…
-
Medium 5.3
Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent befo…
-
Medium 4.4
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup task management function…
-
Medium 4.4
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functiona…
-
Medium 6.7
Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 a…
-
Medium 6.5
Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client bef…
-
Medium 5.9
Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-822…
-
Medium 4.9
A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality. This allows remote au…
-
Medium 5.3
A vulnerability regarding improper limitation of a pathname to a restricted directory ('Path Traversal') is found in th…
-
Medium 6.5
A vulnerability regarding buffer copy without checking the size of input ('Classic Buffer Overflow') has been found in …
-
Medium 4.3
Missing authorization vulnerability in LayoutSave webapi component in Synology Surveillance Station before 9.2.0-11289 …