Vendor

Synology

344 known vulnerabilities.

Products

DiskStation Manager (DSM) 99 Synology Router Manager (SRM) 43 Surveillance Station 25 Synology Photo Station 18 Synology DiskStation Manager (DSM) 13 Photo Station 12 Camera Firmware 9 Calendar 6 Unified Controller (DSMUC) 6 BeeDrive for desktop 6 Synology Drive Client 6 Media Server 5 Synology Calendar 5 Synology Active Backup for Business Agent 5 Note Station 4 Drive 4 Active Backup for Business 4 Synology SSL VPN Client 3 Download Station 3 Audio Station 3 Synology Chat Server 3 BeeStation OS (BSM) 3 Safe Access 3 Synology Download Station 3 Synology Video Station 2 Office 2 Application Service 2 Presto File Server 2 Synology Drive Server 2 File Station 2 SSL VPN Client 2 Chat 2 CardDAV Server 2 Hyper Backup 2 Synology Note Station Client 2 MailPlus Server 2 SSO Server 2 Synology Assistant 2 Synology Docker 1 VPN Plus Server 1

All Critical High Medium Low Exploited only Public exploit

344 results · Feed

Medium 6.5

CVE-2020-27657

Cleartext transmission of sensitive information vulnerability in DDNS in Synology Router Manager (SRM) before 1.2.4-808…

Synology Synology Router Manager (SRM)

Oct 29, 2020
Medium 6.5

CVE-2020-27655

Improper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to acc…

Synology Synology Router Manager (SRM)

Oct 29, 2020
Critical 9.8

CVE-2020-27654

Improper access control vulnerability in lbd in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers…

Synology Synology Router Manager (SRM)

Oct 29, 2020
High 8.3

CVE-2020-27653

Algorithm downgrade vulnerability in QuickConnect in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-…

Synology Synology Router Manager (SRM)

Oct 29, 2020
Medium 5.8

CVE-2020-27651

Synology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the session cookie in an HTTPS session…

Synology Synology Router Manager (SRM)

Oct 29, 2020
High 8.3

CVE-2020-27649

Improper certificate validation vulnerability in OpenVPN client in Synology Router Manager (SRM) before 1.2.4-8081 allo…

Synology Synology Router Manager (SRM)

Oct 29, 2020
High 8.6

CVE-2019-11823

CRLF injection vulnerability in Network Center in Synology Router Manager (SRM) before 1.2.3-8017-2 allows remote attac…

Synology Synology Router Manager (SRM)

May 4, 2020
Medium 6.5

CVE-2019-11827

Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Shard in Synology Note Station before 2.5.3-0863 allows re…

Synology Note Station

Jun 30, 2019
Medium 5.5

CVE-2019-11828

Cross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows remote authenticated user…

Synology Office

Jun 30, 2019
High 7.3

CVE-2019-11829

OS command injection vulnerability in drivers_syno_import_user.php in Synology Calendar before 2.3.1-0617 allows remote…

Synology Calendar

Jun 30, 2019
Medium 4.3

CVE-2019-11822

Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before…

Synology Photo Station

Jun 30, 2019
High 7.3

CVE-2019-11821

SQL injection vulnerability in synophoto_csPhotoDB.php in Synology Photo Station before 6.8.11-3489 and before 6.3-2977…

Synology Photo Station

Jun 30, 2019
Medium 6.5

CVE-2019-11825

Cross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers…

Synology Calendar

Jun 30, 2019
High 8.0

CVE-2019-11826

Relative path traversal vulnerability in SYNO.PhotoTeam.Upload.Item in Synology Moments before 1.3.0-0691 allows remote…

Synology Photo Moments

Jun 30, 2019
Medium 5.5

CVE-2019-11820

Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local user…

Synology Calendar

May 9, 2019
Medium 4.3

CVE-2018-13299

Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authe…

Synology Calendar

Apr 1, 2019
Medium 4.2

CVE-2018-13298

Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows ma…

Synology Android Moments Android

Apr 1, 2019
Medium 5.3

CVE-2018-13297

Information exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2-10562 allows remote attac…

Synology Drive

Apr 1, 2019
High 7.5

CVE-2018-13296

Uncontrolled resource consumption vulnerability in TLS configuration in Synology MailPlus Server before 2.0.5-0606 allo…

Synology MailPlus Server

Apr 1, 2019
Medium 4.3

CVE-2018-13294

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows re…

Synology Application Service

Apr 1, 2019
Medium 4.3

CVE-2018-13295

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 …

Synology Application Service

Apr 1, 2019
Medium 4.3

CVE-2018-13291

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager (DSM) before 6.2.1-23824…

Synology DiskStation Manager (DSM)

Apr 1, 2019
Medium 5.9

CVE-2018-13293

Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2…

Synology DiskStation Manager (DSM)

Apr 1, 2019
Medium 4.3

CVE-2018-13292

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM) before 1.1.7-6941-2 all…

Synology Synology Router Manager (SRM)

Apr 1, 2019
Medium 4.3

CVE-2018-13290

Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote …

Synology Synology Router Manager (SRM)

Apr 1, 2019
Medium 5.3

CVE-2018-13289

Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM) before 1.1.7-6941-2 allo…

Synology Synology Router Manager (SRM)

Apr 1, 2019
Medium 5.3

CVE-2018-13288

Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1…

Synology File Station

Apr 1, 2019
Medium 6.5

CVE-2018-13287

Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM) before 1.1.7-6941-1 allow…

Synology Synology Router Manager (SRM)

Apr 1, 2019
High 7.5

CVE-2018-13285

Command injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticate…

Synology Synology Router Manager (SRM)

Apr 1, 2019
Medium 6.5

CVE-2018-13286

Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 a…

Synology DiskStation Manager (DSM)

Apr 1, 2019
High 7.5

CVE-2018-13284

Command injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenti…

Synology DiskStation Manager (DSM)

Apr 1, 2019
High 8.8

CVE-2018-13283

Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 al…

Synology SSL VPN Client

Apr 1, 2019
High 7.1

CVE-2017-16775

Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-…

Synology SSO Server

Apr 1, 2019
Medium 6.5

CVE-2017-16774

Cross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager (DSM) …

Synology DiskStation Manager (DSM)

Apr 1, 2019
High 7.1

CVE-2018-8913

Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct ph…

Synology Web Station

Apr 1, 2019
Medium 6.5

CVE-2018-8918

Cross-site scripting (XSS) vulnerability in info.cgi in Synology Router Manager (SRM) before 1.1.7-6941 allows remote a…

Synology Synology Router Manager (SRM)

Dec 24, 2018
Medium 6.5

CVE-2018-8917

Cross-site scripting (XSS) vulnerability in info.cgi in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows re…

Synology DiskStation Manager (DSM)

Dec 24, 2018
Medium 5.9

CVE-2018-8920

Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager (DSM) before 6.1.6-1526…

Synology DiskStation Manager (DSM)

Dec 24, 2018
High 8.3

CVE-2018-8919

Information exposure vulnerability in SYNO.Core.Desktop.SessionData in Synology DiskStation Manager (DSM) before 6.1.6-…

Synology DiskStation Manager (DSM)

Dec 24, 2018
Medium 4.3

CVE-2018-13281

Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows rem…

Synology DiskStation Manager (DSM)

Oct 31, 2018

Synology

Products

Cleartext transmission of sensitive information vulnerability in DDNS in Synology Router Manager (SRM) before 1.2.4-808…

Improper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to acc…

Improper access control vulnerability in lbd in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers…

Algorithm downgrade vulnerability in QuickConnect in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-…

Synology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the session cookie in an HTTPS session…

Improper certificate validation vulnerability in OpenVPN client in Synology Router Manager (SRM) before 1.2.4-8081 allo…

CRLF injection vulnerability in Network Center in Synology Router Manager (SRM) before 1.2.3-8017-2 allows remote attac…

Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Shard in Synology Note Station before 2.5.3-0863 allows re…

Cross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows remote authenticated user…

OS command injection vulnerability in drivers_syno_import_user.php in Synology Calendar before 2.3.1-0617 allows remote…

Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before…

SQL injection vulnerability in synophoto_csPhotoDB.php in Synology Photo Station before 6.8.11-3489 and before 6.3-2977…

Cross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers…

Relative path traversal vulnerability in SYNO.PhotoTeam.Upload.Item in Synology Moments before 1.3.0-0691 allows remote…

Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local user…

Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authe…

Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows ma…

Information exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2-10562 allows remote attac…

Uncontrolled resource consumption vulnerability in TLS configuration in Synology MailPlus Server before 2.0.5-0606 allo…

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows re…

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 …

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager (DSM) before 6.2.1-23824…

Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2…

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM) before 1.1.7-6941-2 all…

Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote …

Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM) before 1.1.7-6941-2 allo…

Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1…

Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM) before 1.1.7-6941-1 allow…

Command injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticate…

Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 a…

Command injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenti…

Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 al…

Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-…

Cross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager (DSM) …

Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct ph…

Cross-site scripting (XSS) vulnerability in info.cgi in Synology Router Manager (SRM) before 1.1.7-6941 allows remote a…

Cross-site scripting (XSS) vulnerability in info.cgi in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows re…

Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager (DSM) before 6.1.6-1526…

Information exposure vulnerability in SYNO.Core.Desktop.SessionData in Synology DiskStation Manager (DSM) before 6.1.6-…

Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows rem…