Vendor

Synology

344 known vulnerabilities.

Products

DiskStation Manager (DSM) 99 Synology Router Manager (SRM) 43 Surveillance Station 25 Synology Photo Station 18 Synology DiskStation Manager (DSM) 13 Photo Station 12 Camera Firmware 9 Calendar 6 Unified Controller (DSMUC) 6 BeeDrive for desktop 6 Synology Drive Client 6 Media Server 5 Synology Calendar 5 Synology Active Backup for Business Agent 5 Note Station 4 Drive 4 Active Backup for Business 4 Synology SSL VPN Client 3 Download Station 3 Audio Station 3 Synology Chat Server 3 BeeStation OS (BSM) 3 Safe Access 3 Synology Download Station 3 Synology Video Station 2 Office 2 Application Service 2 Presto File Server 2 Synology Drive Server 2 File Station 2 SSL VPN Client 2 Chat 2 CardDAV Server 2 Hyper Backup 2 Synology Note Station Client 2 MailPlus Server 2 SSO Server 2 Synology Assistant 2 Synology Docker 1 VPN Plus Server 1

All Critical High Medium Low Exploited only Public exploit

165 results · Clear filters · Feed

Medium 5.0

CVE-2021-34811

Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.1…

Synology Download Station

Jun 18, 2021
Medium 5.8

CVE-2021-34812

Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attac…

Synology Synology Calendar

Jun 18, 2021
Medium 6.6

CVE-2021-33181

Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allow…

Synology Synology Video Station

Jun 1, 2021
Medium 5.0

CVE-2021-33182

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in PDF Viewer component in…

Synology Synology DiskStation Manager (DSM)

Jun 1, 2021
Medium 6.5

CVE-2020-27656

Cleartext transmission of sensitive information vulnerability in DDNS in Synology DiskStation Manager (DSM) before 6.2.…

Synology DiskStation Manager (DSM)

Oct 29, 2020
Medium 5.8

CVE-2020-27650

Synology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the session cookie in an HTTPS…

Synology DiskStation Manager (DSM)

Oct 29, 2020
Medium 6.5

CVE-2020-27657

Cleartext transmission of sensitive information vulnerability in DDNS in Synology Router Manager (SRM) before 1.2.4-808…

Synology Synology Router Manager (SRM)

Oct 29, 2020
Medium 6.5

CVE-2020-27655

Improper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to acc…

Synology Synology Router Manager (SRM)

Oct 29, 2020
Medium 5.8

CVE-2020-27651

Synology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the session cookie in an HTTPS session…

Synology Synology Router Manager (SRM)

Oct 29, 2020
Medium 6.5

CVE-2019-11827

Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Shard in Synology Note Station before 2.5.3-0863 allows re…

Synology Note Station

Jun 30, 2019
Medium 5.5

CVE-2019-11828

Cross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows remote authenticated user…

Synology Office

Jun 30, 2019
Medium 4.3

CVE-2019-11822

Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before…

Synology Photo Station

Jun 30, 2019
Medium 6.5

CVE-2019-11825

Cross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers…

Synology Calendar

Jun 30, 2019
Medium 5.5

CVE-2019-11820

Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local user…

Synology Calendar

May 9, 2019
Medium 4.3

CVE-2018-13299

Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authe…

Synology Calendar

Apr 1, 2019
Medium 4.2

CVE-2018-13298

Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows ma…

Synology Android Moments Android

Apr 1, 2019
Medium 5.3

CVE-2018-13297

Information exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2-10562 allows remote attac…

Synology Drive

Apr 1, 2019
Medium 4.3

CVE-2018-13294

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows re…

Synology Application Service

Apr 1, 2019
Medium 4.3

CVE-2018-13295

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 …

Synology Application Service

Apr 1, 2019
Medium 4.3

CVE-2018-13291

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager (DSM) before 6.2.1-23824…

Synology DiskStation Manager (DSM)

Apr 1, 2019
Medium 5.9

CVE-2018-13293

Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2…

Synology DiskStation Manager (DSM)

Apr 1, 2019
Medium 4.3

CVE-2018-13292

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM) before 1.1.7-6941-2 all…

Synology Synology Router Manager (SRM)

Apr 1, 2019
Medium 4.3

CVE-2018-13290

Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote …

Synology Synology Router Manager (SRM)

Apr 1, 2019
Medium 5.3

CVE-2018-13289

Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM) before 1.1.7-6941-2 allo…

Synology Synology Router Manager (SRM)

Apr 1, 2019
Medium 5.3

CVE-2018-13288

Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1…

Synology File Station

Apr 1, 2019
Medium 6.5

CVE-2018-13287

Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM) before 1.1.7-6941-1 allow…

Synology Synology Router Manager (SRM)

Apr 1, 2019
Medium 6.5

CVE-2018-13286

Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 a…

Synology DiskStation Manager (DSM)

Apr 1, 2019
Medium 6.5

CVE-2017-16774

Cross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager (DSM) …

Synology DiskStation Manager (DSM)

Apr 1, 2019
Medium 6.5

CVE-2018-8918

Cross-site scripting (XSS) vulnerability in info.cgi in Synology Router Manager (SRM) before 1.1.7-6941 allows remote a…

Synology Synology Router Manager (SRM)

Dec 24, 2018
Medium 6.5

CVE-2018-8917

Cross-site scripting (XSS) vulnerability in info.cgi in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows re…

Synology DiskStation Manager (DSM)

Dec 24, 2018
Medium 5.9

CVE-2018-8920

Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager (DSM) before 6.1.6-1526…

Synology DiskStation Manager (DSM)

Dec 24, 2018
Medium 4.3

CVE-2018-13281

Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows rem…

Synology DiskStation Manager (DSM)

Oct 31, 2018
Medium 5.6

CVE-2018-13282

Session fixation vulnerability in SYNO.PhotoStation.Auth in Synology Photo Station before 6.8.7-3481 allows remote atta…

Synology Photo Station

Oct 31, 2018
Medium 6.5

CVE-2018-8928

Cross-site scripting (XSS) vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows rem…

Synology CardDAV Server

Jul 5, 2018
Medium 6.5

CVE-2017-16773

Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote …

Synology Universal Search

Jul 5, 2018
Medium 5.4

CVE-2018-8927

Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users …

Synology Calendar

Jun 14, 2018
Medium 6.3

CVE-2018-8916

Unverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM) before 6.2-23739 allo…

Synology DiskStation Manager (DSM)

Jun 8, 2018
Medium 6.5

CVE-2018-8924

Cross-site scripting (XSS) vulnerability in Title Tootip in Synology Office before 3.0.3-2143 allows remote authenticat…

Synology Office

Jun 5, 2018
Medium 6.5

CVE-2018-8923

Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote…

Synology File Station

Jun 5, 2018
Medium 6.5

CVE-2018-8921

Cross-site scripting (XSS) vulnerability in File Sharing Notify Toast in Synology Drive before 1.0.2-10275 allows remot…

Synology Drive

Jun 1, 2018

Synology

Products

Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.1…

Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attac…

Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allow…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in PDF Viewer component in…

Cleartext transmission of sensitive information vulnerability in DDNS in Synology DiskStation Manager (DSM) before 6.2.…

Synology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the session cookie in an HTTPS…

Cleartext transmission of sensitive information vulnerability in DDNS in Synology Router Manager (SRM) before 1.2.4-808…

Improper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to acc…

Synology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the session cookie in an HTTPS session…

Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Shard in Synology Note Station before 2.5.3-0863 allows re…

Cross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows remote authenticated user…

Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before…

Cross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers…

Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local user…

Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authe…

Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows ma…

Information exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2-10562 allows remote attac…

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows re…

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 …

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager (DSM) before 6.2.1-23824…

Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2…

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM) before 1.1.7-6941-2 all…

Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote …

Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM) before 1.1.7-6941-2 allo…

Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1…

Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM) before 1.1.7-6941-1 allow…

Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 a…

Cross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager (DSM) …

Cross-site scripting (XSS) vulnerability in info.cgi in Synology Router Manager (SRM) before 1.1.7-6941 allows remote a…

Cross-site scripting (XSS) vulnerability in info.cgi in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows re…

Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager (DSM) before 6.1.6-1526…

Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows rem…

Session fixation vulnerability in SYNO.PhotoStation.Auth in Synology Photo Station before 6.8.7-3481 allows remote atta…

Cross-site scripting (XSS) vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows rem…

Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote …

Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users …

Unverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM) before 6.2-23739 allo…

Cross-site scripting (XSS) vulnerability in Title Tootip in Synology Office before 3.0.3-2143 allows remote authenticat…

Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote…

Cross-site scripting (XSS) vulnerability in File Sharing Notify Toast in Synology Drive before 1.0.2-10275 allows remot…