Vendor

Synology

344 known vulnerabilities.

Products

DiskStation Manager (DSM) 99 Synology Router Manager (SRM) 43 Surveillance Station 25 Synology Photo Station 18 Synology DiskStation Manager (DSM) 13 Photo Station 12 Camera Firmware 9 Calendar 6 Unified Controller (DSMUC) 6 BeeDrive for desktop 6 Synology Drive Client 6 Media Server 5 Synology Calendar 5 Synology Active Backup for Business Agent 5 Note Station 4 Drive 4 Active Backup for Business 4 Synology SSL VPN Client 3 Download Station 3 Audio Station 3 Synology Chat Server 3 BeeStation OS (BSM) 3 Safe Access 3 Synology Download Station 3 Synology Video Station 2 Office 2 Application Service 2 Presto File Server 2 Synology Drive Server 2 File Station 2 SSL VPN Client 2 Chat 2 CardDAV Server 2 Hyper Backup 2 Synology Note Station Client 2 MailPlus Server 2 SSO Server 2 Synology Assistant 2 Synology Docker 1 VPN Plus Server 1

All Critical High Medium Low Exploited only Public exploit

344 results · Feed

Critical 9.8

CVE-2023-32956

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI compone…

Synology Synology Router Manager (SRM)

May 16, 2023
High 8.1

CVE-2023-32955

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DHCP Client…

Synology Synology Router Manager (SRM)

May 16, 2023
Medium 6.5

CVE-2023-0077

Integer overflow or wraparound vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and …

Synology Synology Router Manager (SRM)

Jan 5, 2023
High 7.5

CVE-2022-43932

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in CGI…

Synology Synology Router Manager (SRM)

Jan 5, 2023
Critical 10.0

CVE-2022-43931 EPSS 17%

Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4…

Synology VPN Plus Server

Jan 3, 2023
Medium 5.8

CVE-2022-43748

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation manageme…

Synology Presto File Server

Oct 26, 2022
Medium 4.3

CVE-2022-43749

Improper privilege management vulnerability in summary report management in Synology Presto File Server before 2.1.2-16…

Synology Presto File Server

Oct 26, 2022
Medium 4.1

CVE-2022-27622

Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) …

Synology DiskStation Manager (DSM)

Oct 25, 2022
High 7.4

CVE-2022-27623

Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Ma…

Synology DiskStation Manager (DSM)

Oct 25, 2022
Medium 5.3

CVE-2022-3576

A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Mana…

Synology DiskStation Manager (DSM)

Oct 20, 2022
Critical 10.0

CVE-2022-27624

A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the packe…

Synology DiskStation Manager (DSM)

Oct 20, 2022
Critical 10.0

CVE-2022-27625

A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the messa…

Synology DiskStation Manager (DSM)

Oct 20, 2022
Critical 10.0

CVE-2022-27626

A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') i…

Synology DiskStation Manager (DSM)

Oct 20, 2022
Medium 5.5

CVE-2022-27621

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology USB Copy

Aug 3, 2022
Medium 6.8

CVE-2022-27620

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology SSO Server

Aug 3, 2022
Medium 6.8

CVE-2022-27619

Cleartext transmission of sensitive information vulnerability in authentication management in Synology Note Station Cli…

Synology Synology Note Station Client

Aug 3, 2022
Medium 6.8

CVE-2022-27618

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology Storage Analyzer

Aug 3, 2022
Medium 5.0

CVE-2022-27617

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology Synology Calendar

Aug 3, 2022
High 7.2

CVE-2022-27616

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in webapi comp…

Synology DiskStation Manager (DSM)

Aug 3, 2022
Medium 5.4

CVE-2022-27611

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology Audio Station

Jul 28, 2022
High 7.3

CVE-2022-27612

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio…

Synology Audio Station

Jul 28, 2022
Critical 10.0

CVE-2022-22683

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media…

Synology Media Server

Jul 28, 2022
Medium 5.3

CVE-2022-27614

Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before …

Synology Media Server

Jul 28, 2022
High 8.7

CVE-2022-22685

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology WebDAV Server

Jul 28, 2022
High 8.3

CVE-2022-27613

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in webapi component …

Synology CardDAV Server

Jul 28, 2022
High 7.2

CVE-2022-22684

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in task manage…

Synology DiskStation Manager (DSM)

Jul 28, 2022
High 7.7

CVE-2022-27615

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synolo…

Synology DNS Server

Jul 28, 2022
Medium 6.5

CVE-2022-27610

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Synology DiskStation Manager (DSM)

Jul 27, 2022
Medium 6.5

CVE-2022-22686

Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remot…

Synology Synology Calendar

Jul 26, 2022
Medium 6.5

CVE-2022-22682

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Event Management …

Synology Synology Calendar

Jul 12, 2022
High 8.1

CVE-2022-22681

Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote …

Synology Photo Station

Jul 6, 2022
Critical 9.8

CVE-2022-22687

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in…

Synology DiskStation Manager (DSM)

Mar 25, 2022
High 8.8

CVE-2022-22688

Improper neutralization of special elements used in a command ('Command Injection') vulnerability in File service funct…

Synology DiskStation Manager (DSM)

Mar 25, 2022
Medium 6.5

CVE-2022-22679

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service managem…

Synology DiskStation Manager (DSM)

Feb 7, 2022
Medium 6.5

CVE-2021-43929

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in wor…

Synology DiskStation Manager (DSM)

Feb 7, 2022
Critical 9.9

CVE-2021-43928

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sendin…

Synology Mail Station

Feb 7, 2022
Medium 4.7

CVE-2021-43927

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Security Manageme…

Synology DiskStation Manager (DSM)

Feb 7, 2022
Medium 4.7

CVE-2021-43926

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…

Synology DiskStation Manager (DSM)

Feb 7, 2022
Medium 4.7

CVE-2021-43925

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…

Synology DiskStation Manager (DSM)

Feb 7, 2022
Medium 5.3

CVE-2022-22680

Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in Synology DiskStation Manager …

Synology DiskStation Manager (DSM)

Feb 7, 2022

Synology

Products

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI compone…

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DHCP Client…

Integer overflow or wraparound vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and …

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in CGI…

Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation manageme…

Improper privilege management vulnerability in summary report management in Synology Presto File Server before 2.1.2-16…

Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) …

Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Ma…

A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Mana…

A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the packe…

A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the messa…

A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') i…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Cleartext transmission of sensitive information vulnerability in authentication management in Synology Note Station Cli…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in webapi comp…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio…

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media…

Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before …

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in webapi component …

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in task manage…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synolo…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remot…

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Event Management …

Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote …

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in…

Improper neutralization of special elements used in a command ('Command Injection') vulnerability in File service funct…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service managem…

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in wor…

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sendin…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Security Manageme…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…

Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in Synology DiskStation Manager …