Vendor

Synology

344 known vulnerabilities.

Products

DiskStation Manager (DSM) 99 Synology Router Manager (SRM) 43 Surveillance Station 25 Synology Photo Station 18 Synology DiskStation Manager (DSM) 13 Photo Station 12 Camera Firmware 9 Calendar 6 Unified Controller (DSMUC) 6 BeeDrive for desktop 6 Synology Drive Client 6 Media Server 5 Synology Calendar 5 Synology Active Backup for Business Agent 5 Note Station 4 Drive 4 Active Backup for Business 4 Synology SSL VPN Client 3 Download Station 3 Audio Station 3 Synology Chat Server 3 BeeStation OS (BSM) 3 Safe Access 3 Synology Download Station 3 Synology Video Station 2 Office 2 Application Service 2 Presto File Server 2 Synology Drive Server 2 File Station 2 SSL VPN Client 2 Chat 2 CardDAV Server 2 Hyper Backup 2 Synology Note Station Client 2 MailPlus Server 2 SSO Server 2 Synology Assistant 2 Synology Docker 1 VPN Plus Server 1

All Critical High Medium Low Exploited only Public exploit

344 results · Feed

Medium 5.3

CVE-2023-52950

Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent befo…

Synology Synology Active Backup for Business Agent

Sep 26, 2024
Medium 4.4

CVE-2022-49041

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup task management function…

Synology Synology Drive Client

Sep 26, 2024
Medium 4.4

CVE-2022-49040

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functiona…

Synology Synology Drive Client

Sep 26, 2024
Medium 6.7

CVE-2022-49039

Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 a…

Synology Synology Drive Client

Sep 26, 2024
High 7.8

CVE-2022-49038

Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Clien…

Synology Synology Drive Client

Sep 26, 2024
Medium 6.5

CVE-2022-49037

Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client bef…

Synology Synology Drive Client

Sep 26, 2024
High 8.2

CVE-2023-52946

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synolo…

Synology Synology Drive Client

Sep 26, 2024
High 7.5

CVE-2024-39350

A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-…

Synology Camera Firmware

Jun 28, 2024
High 7.5

CVE-2024-39348

Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) befor…

Synology Synology Router Manager (SRM)

Jun 28, 2024
Medium 5.9

CVE-2024-39347

Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-822…

Synology Synology Router Manager (SRM)

Jun 28, 2024
Medium 4.9

CVE-2024-39352

A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality. This allows remote au…

Synology Camera Firmware

Jun 28, 2024
High 7.2

CVE-2024-39351

A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is…

Synology Camera Firmware

Jun 28, 2024
Critical 9.8

CVE-2024-39349

A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjan…

Synology Camera Firmware

Jun 28, 2024
Medium 5.3

CVE-2023-47803

A vulnerability regarding improper limitation of a pathname to a restricted directory ('Path Traversal') is found in th…

Synology Camera Firmware

Jun 28, 2024
High 7.2

CVE-2023-47802

A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is…

Synology Camera Firmware

Jun 28, 2024
Medium 6.5

CVE-2024-5463

A vulnerability regarding buffer copy without checking the size of input ('Classic Buffer Overflow') has been found in …

Synology Camera Firmware

Jun 4, 2024
Critical 9.9

CVE-2024-29241

Missing authorization vulnerability in System webapi component in Synology Surveillance Station before 9.2.0-9289 and 9…

Synology Surveillance Station

Mar 28, 2024
Medium 4.3

CVE-2024-29240

Missing authorization vulnerability in LayoutSave webapi component in Synology Surveillance Station before 9.2.0-11289 …

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29239

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Recording.CountBy…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29238

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log.CountByCatego…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29237

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in ActionRule.Delete…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29236

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in AudioPattern.Dele…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29235

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in IOModule.EnumLog …

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29234

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Group.Save webapi…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29233

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Emap.Delete webap…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29232

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Alert.Enum webapi…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29231

Improper validation of array index vulnerability in UserPrivilege.Enum webapi component in Synology Surveillance Statio…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29230

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in SnapShot.CountByC…

Synology Surveillance Station

Mar 28, 2024
High 7.7

CVE-2024-29229

Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-9…

Synology Surveillance Station

Mar 28, 2024
High 7.7

CVE-2024-29228

Missing authorization vulnerability in GetStmUrlPath webapi component in Synology Surveillance Station before 9.2.0-928…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-29227

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Layout.LayoutSave…

Synology Surveillance Station

Mar 28, 2024
Medium 5.4

CVE-2024-0854

URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Mana…

Synology DiskStation Manager (DSM)

Jan 24, 2024
Low 3.3

CVE-2023-5748

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology SSL V…

Synology Synology SSL VPN Client

Oct 24, 2023
Critical 9.8

CVE-2023-5746

A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote …

Synology Camera Firmware

Oct 24, 2023
Medium 5.3

CVE-2023-41741

Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager (S…

Synology Synology Router Manager (SRM)

Aug 31, 2023
Medium 5.3

CVE-2023-41740

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synolo…

Synology Synology Router Manager (SRM)

Aug 31, 2023
Medium 4.9

CVE-2023-41739

Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-934…

Synology Synology Router Manager (SRM)

Aug 31, 2023
High 7.2

CVE-2023-41738

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Directory D…

Synology Synology Router Manager (SRM)

Aug 31, 2023
Medium 5.9

CVE-2023-2729

Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM…

Synology DiskStation Manager (DSM) Synology Router Manager (SRM) Unified Controller (DSMUC)

Jun 13, 2023
Medium 6.5

CVE-2023-0142

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM)…

Synology DiskStation Manager (DSM) Synology Router Manager (SRM) Unified Controller (DSMUC)

Jun 13, 2023

Synology

Products

Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent befo…

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup task management function…

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functiona…

Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 a…

Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Clien…

Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client bef…

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synolo…

A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-…

Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) befor…

Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-822…

A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality. This allows remote au…

A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is…

A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjan…

A vulnerability regarding improper limitation of a pathname to a restricted directory ('Path Traversal') is found in th…

A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is…

A vulnerability regarding buffer copy without checking the size of input ('Classic Buffer Overflow') has been found in …

Missing authorization vulnerability in System webapi component in Synology Surveillance Station before 9.2.0-9289 and 9…

Missing authorization vulnerability in LayoutSave webapi component in Synology Surveillance Station before 9.2.0-11289 …

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Recording.CountBy…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log.CountByCatego…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in ActionRule.Delete…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in AudioPattern.Dele…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in IOModule.EnumLog …

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Group.Save webapi…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Emap.Delete webap…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Alert.Enum webapi…

Improper validation of array index vulnerability in UserPrivilege.Enum webapi component in Synology Surveillance Statio…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in SnapShot.CountByC…

Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-9…

Missing authorization vulnerability in GetStmUrlPath webapi component in Synology Surveillance Station before 9.2.0-928…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Layout.LayoutSave…

URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Mana…

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology SSL V…

A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote …

Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager (S…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synolo…

Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-934…

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Directory D…

Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM…

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM)…