Vendor
Synology
344 known vulnerabilities.
Products
DiskStation Manager (DSM) 99
Synology Router Manager (SRM) 43
Surveillance Station 25
Synology Photo Station 18
Synology DiskStation Manager (DSM) 13
Photo Station 12
Camera Firmware 9
Calendar 6
Unified Controller (DSMUC) 6
BeeDrive for desktop 6
Synology Drive Client 6
Media Server 5
Synology Calendar 5
Synology Active Backup for Business Agent 5
Note Station 4
Drive 4
Active Backup for Business 4
Synology SSL VPN Client 3
Download Station 3
Audio Station 3
Synology Chat Server 3
BeeStation OS (BSM) 3
Safe Access 3
Synology Download Station 3
Synology Video Station 2
Office 2
Application Service 2
Presto File Server 2
Synology Drive Server 2
File Station 2
SSL VPN Client 2
Chat 2
CardDAV Server 2
Hyper Backup 2
Synology Note Station Client 2
MailPlus Server 2
SSO Server 2
Synology Assistant 2
Synology Docker 1
VPN Plus Server 1
344 results · Feed
-
Medium 6.3
A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings,…
-
High 7.2
A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.
-
Medium 4.3
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.
-
Medium 4.3
A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information.
-
Medium 5.4
A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files.
-
Medium 4.3
Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manage…
-
High 7.5
Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.…
-
Critical 9.6
Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation Manager (DSM) before 7.2.1-…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Synology RADIUS S…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in NTP Region functi…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in VPN Setting funct…
-
High 7.2
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DDNS Record…
-
Medium 6.5CVE-2025-4679 Public exploit
A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive i…
-
High 7.5
Missing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057…
-
High 7.5CVE-2024-50631 EPSS 27%
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in the system syncin…
-
High 7.5CVE-2024-50630 EPSS 25%
Missing authentication for critical function vulnerability in the webapi component in Synology Drive Server before 3.0.…
-
Medium 5.3
Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.…
-
Critical 9.8
A vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute a…
-
Critical 10.0
Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-…
-
Medium 4.3
Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65…
-
Critical 9.8CVE-2024-10441 Public exploit
Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) befor…
-
High 7.5
Improper certificate validation vulnerability in the LDAP utilities in Synology DiskStation Manager (DSM) before 7.1.1-…
-
Low 2.7
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in share file list functio…
-
Medium 6.5
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in encrypted share umount …
-
Medium 4.9
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in agent-related functiona…
-
High 7.5
Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in DDNS Record funct…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect Sett…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Router Port Forwa…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect MAC …
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Network WOL funct…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in file station func…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in network center po…
-
Medium 4.3
Incorrect authorization vulnerability in ActionRule webapi component in Synology Surveillance Station before 9.2.0-1128…
-
Medium 4.3
Incorrect authorization vulnerability in Alert.Setting webapi component in Synology Surveillance Station before 9.2.0-1…
-
High 8.1
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in OTP reset functionality…
-
Critical 9.8CVE-2024-10443 EPSS 29%
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manage…
-
Medium 5.5
Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup fo…
-
Medium 5.0
Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Age…
-
Medium 4.0
Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Busine…