Vendor

Synology

344 known vulnerabilities.

Products

DiskStation Manager (DSM) 99 Synology Router Manager (SRM) 43 Surveillance Station 25 Synology Photo Station 18 Synology DiskStation Manager (DSM) 13 Photo Station 12 Camera Firmware 9 Calendar 6 Unified Controller (DSMUC) 6 BeeDrive for desktop 6 Synology Drive Client 6 Media Server 5 Synology Calendar 5 Synology Active Backup for Business Agent 5 Note Station 4 Drive 4 Active Backup for Business 4 Synology SSL VPN Client 3 Download Station 3 Audio Station 3 Synology Chat Server 3 BeeStation OS (BSM) 3 Safe Access 3 Synology Download Station 3 Synology Video Station 2 Office 2 Application Service 2 Presto File Server 2 Synology Drive Server 2 File Station 2 SSL VPN Client 2 Chat 2 CardDAV Server 2 Hyper Backup 2 Synology Note Station Client 2 MailPlus Server 2 SSO Server 2 Synology Assistant 2 Synology Docker 1 VPN Plus Server 1

All Critical High Medium Low Exploited only Public exploit

165 results · Clear filters · Feed

Medium 5.4

CVE-2024-29239

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Recording.CountBy…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29238

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log.CountByCatego…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29237

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in ActionRule.Delete…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29236

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in AudioPattern.Dele…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29235

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in IOModule.EnumLog …

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29234

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Group.Save webapi…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29233

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Emap.Delete webap…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29232

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Alert.Enum webapi…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29231

Improper validation of array index vulnerability in UserPrivilege.Enum webapi component in Synology Surveillance Statio…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29230

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in SnapShot.CountByC…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29227

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Layout.LayoutSave…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-0854

URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Mana…

Synology DiskStation Manager (DSM)

Jan 24, 2024
Medium 5.3

CVE-2023-41741

Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager (S…

Synology Synology Router Manager (SRM)

Aug 31, 2023
Medium 5.3

CVE-2023-41740

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synolo…

Synology Synology Router Manager (SRM)

Aug 31, 2023
Medium 4.9

CVE-2023-41739

Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-934…

Synology Synology Router Manager (SRM)

Aug 31, 2023
Medium 5.9

CVE-2023-2729

Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM…

Synology DiskStation Manager (DSM) Synology Router Manager (SRM) Unified Controller (DSMUC)

Jun 13, 2023
Medium 6.5

CVE-2023-0142

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM)…

Synology DiskStation Manager (DSM) Synology Router Manager (SRM) Unified Controller (DSMUC)

Jun 13, 2023
Medium 6.5

CVE-2023-0077

Integer overflow or wraparound vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and …

Synology Synology Router Manager (SRM)

Jan 5, 2023
Medium 5.8

CVE-2022-43748

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation manageme…

Synology Presto File Server

Oct 26, 2022
Medium 4.3

CVE-2022-43749

Improper privilege management vulnerability in summary report management in Synology Presto File Server before 2.1.2-16…

Synology Presto File Server

Oct 26, 2022
Medium 4.1

CVE-2022-27622

Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) …

Synology DiskStation Manager (DSM)

Oct 25, 2022
Medium 5.3

CVE-2022-3576

A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Mana…

Synology DiskStation Manager (DSM)

Oct 20, 2022
Medium 5.5

CVE-2022-27621

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology USB Copy

Aug 3, 2022
Medium 6.8

CVE-2022-27620

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology SSO Server

Aug 3, 2022
Medium 6.8

CVE-2022-27619

Cleartext transmission of sensitive information vulnerability in authentication management in Synology Note Station Cli…

Synology Synology Note Station Client

Aug 3, 2022
Medium 6.8

CVE-2022-27618

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology Storage Analyzer

Aug 3, 2022
Medium 5.0

CVE-2022-27617

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology Synology Calendar

Aug 3, 2022
Medium 5.4

CVE-2022-27611

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology Audio Station

Jul 28, 2022
Medium 5.3

CVE-2022-27614

Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before …

Synology Media Server

Jul 28, 2022
Medium 6.5

CVE-2022-27610

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology DiskStation Manager (DSM)

Jul 27, 2022
Medium 6.5

CVE-2022-22686

Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remot…

Synology Synology Calendar

Jul 26, 2022
Medium 6.5

CVE-2022-22682

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Event Management …

Synology Synology Calendar

Jul 12, 2022
Medium 6.5

CVE-2022-22679

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service managem…

Synology DiskStation Manager (DSM)

Feb 7, 2022
Medium 6.5

CVE-2021-43929

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in wor…

Synology DiskStation Manager (DSM)

Feb 7, 2022
Medium 4.7

CVE-2021-43927

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Security Manageme…

Synology DiskStation Manager (DSM)

Feb 7, 2022
Medium 4.7

CVE-2021-43926

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…

Synology DiskStation Manager (DSM)

Feb 7, 2022
Medium 4.7

CVE-2021-43925

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…

Synology DiskStation Manager (DSM)

Feb 7, 2022
Medium 5.3

CVE-2022-22680

Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in Synology DiskStation Manager …

Synology DiskStation Manager (DSM)

Feb 7, 2022
Medium 5.3

CVE-2021-29086

Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Ma…

Synology DiskStation Manager (DSM)

Jun 23, 2021
Medium 5.8

CVE-2021-34808

Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows rem…

Synology Media Server

Jun 18, 2021

Synology

Products

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Recording.CountBy…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log.CountByCatego…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in ActionRule.Delete…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in AudioPattern.Dele…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in IOModule.EnumLog …

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Group.Save webapi…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Emap.Delete webap…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Alert.Enum webapi…

Improper validation of array index vulnerability in UserPrivilege.Enum webapi component in Synology Surveillance Statio…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in SnapShot.CountByC…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Layout.LayoutSave…

URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Mana…

Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager (S…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synolo…

Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-934…

Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM…

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM)…

Integer overflow or wraparound vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and …

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation manageme…

Improper privilege management vulnerability in summary report management in Synology Presto File Server before 2.1.2-16…

Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) …

A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Mana…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Cleartext transmission of sensitive information vulnerability in authentication management in Synology Note Station Cli…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before …

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remot…

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Event Management …

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service managem…

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in wor…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Security Manageme…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…

Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in Synology DiskStation Manager …

Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Ma…

Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows rem…