Vendor
Synology
344 known vulnerabilities.
Products
DiskStation Manager (DSM) 99
Synology Router Manager (SRM) 43
Surveillance Station 25
Synology Photo Station 18
Synology DiskStation Manager (DSM) 13
Photo Station 12
Camera Firmware 9
Calendar 6
Unified Controller (DSMUC) 6
BeeDrive for desktop 6
Synology Drive Client 6
Media Server 5
Synology Calendar 5
Synology Active Backup for Business Agent 5
Note Station 4
Drive 4
Active Backup for Business 4
Synology SSL VPN Client 3
Download Station 3
Audio Station 3
Synology Chat Server 3
BeeStation OS (BSM) 3
Safe Access 3
Synology Download Station 3
Synology Video Station 2
Office 2
Application Service 2
Presto File Server 2
Synology Drive Server 2
File Station 2
SSL VPN Client 2
Chat 2
CardDAV Server 2
Hyper Backup 2
Synology Note Station Client 2
MailPlus Server 2
SSO Server 2
Synology Assistant 2
Synology Docker 1
VPN Plus Server 1
344 results · Feed
-
High 7.5
Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Sec…
-
High 8.6
Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in fil…
-
High 7.5
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…
-
Critical 9.8
Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager (DSM) before 6.2.3-254…
-
Medium 5.3
Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Ma…
-
Medium 5.8
Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows rem…
-
Critical 9.9
Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management co…
-
Critical 9.9
Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows rem…
-
Medium 5.0
Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.1…
-
Medium 5.8
Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attac…
-
Critical 9.8
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail compone…
-
High 7.2
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in …
-
High 7.7
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management compone…
-
Medium 6.6
Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allow…
-
Medium 5.0
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in PDF Viewer component in…
-
High 7.7
Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.1…
-
High 7.9
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability container volume managemen…
-
High 7.8
Improper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component in Synology DiskStation…
-
High 8.8
Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station be…
-
High 7.3
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in cgi component in …
-
High 8.8
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology Di…
-
Critical 9.0
Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essen…
-
High 7.2
Improper neutralization of special elements used in an OS command in SYNO.Core.Network.PPPoE in Synology DiskStation Ma…
-
Critical 9.8
Use After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 all…
-
Critical 9.8
Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6…
-
Critical 9.8
Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3…
-
High 8.3
Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) bef…
-
High 8.3
Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) befor…
-
High 8.2
Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 al…
-
High 8.3
Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) befor…
-
Critical 9.0
Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-2542…
-
Critical 9.0
Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allo…
-
Critical 9.0
Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DS…
-
Critical 9.6
SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute …
-
High 8.4
Multiple cross-site scripting (XSS) vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to …
-
High 8.3
Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man…
-
Medium 6.5
Cleartext transmission of sensitive information vulnerability in DDNS in Synology DiskStation Manager (DSM) before 6.2.…
-
Medium 5.8
Synology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the session cookie in an HTTPS…
-
High 8.3
Improper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager (DSM) before 6.2.3-2542…
-
High 7.1
Synology Router Manager (SRM) before 1.2.4-8081 does not include the HTTPOnly flag in a Set-Cookie header for the sessi…