Synology Diskstation Manager vulnerabilities

• synology diskstation manager (dsm), diskstation manager +1 more Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation... CVE-2025-13392 8.1 HighMay 27, 2026
• synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 more Improper control of dynamically-managed code resources vulnerability in WebAPI component in... CVE-2024-5401 4.3 MediumDecember 4, 2025
• synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 more Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before... CVE-2024-45539 7.5 HighDecember 4, 2025
• synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 more Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation... CVE-2024-45538 9.6 CriticalDecember 4, 2025
• synology diskstation manager (dsm), diskstation manager +1 more Missing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1... CVE-2025-1021 7.5 HighApril 23, 2025
• synology beestation os (bsm), beestation os, diskstation manager (dsm) +3 more +5 more Improper encoding or escaping of output vulnerability in the webapi component in Synology... CVE-2024-50629 Public exploit EPSS 34.8% 5.3 MediumMarch 19, 2025
• synology beestation os (bsm), beestation os, diskstation manager (dsm) +3 more +5 more Improper certificate validation vulnerability in the update functionality in Synology BeeStation... CVE-2024-10445 4.3 MediumMarch 19, 2025
• synology beestation os (bsm), beestation os, diskstation manager (dsm) +3 more +5 more Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology... CVE-2024-10441 Public exploit 9.8 CriticalMarch 19, 2025
• synology diskstation manager (dsm), diskstation manager +1 more Improper certificate validation vulnerability in the LDAP utilities in Synology DiskStation... CVE-2024-10444 7.5 HighMarch 19, 2025
• synology diskstation manager (dsm), diskstation manager +1 more URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in... CVE-2024-0854 5.4 MediumJanuary 24, 2024
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +3 more +5 more Use of insufficiently random values vulnerability in User Management Functionality in Synology... CVE-2023-2729 5.9 MediumJune 13, 2023
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +3 more +5 more Uncontrolled search path element vulnerability in Backup Management Functionality in Synology... CVE-2023-0142 6.5 MediumJune 13, 2023
• synology diskstation manager (dsm), diskstation manager +1 more Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology... CVE-2022-27622 4.1 MediumOctober 25, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Missing authentication for critical function vulnerability in iSCSI management functionality in... CVE-2022-27623 7.4 HighOctober 25, 2022
• synology diskstation manager (dsm), diskstation manager +1 more A vulnerability regarding out-of-bounds read is found in the session processing functionality of... CVE-2022-3576 5.3 MediumOctober 20, 2022
• synology diskstation manager (dsm), diskstation manager +1 more A vulnerability regarding improper restriction of operations within the bounds of a memory buffer... CVE-2022-27624 10.0 CriticalOctober 20, 2022
• synology diskstation manager (dsm), diskstation manager +1 more A vulnerability regarding improper restriction of operations within the bounds of a memory buffer... CVE-2022-27625 10.0 CriticalOctober 20, 2022
• synology diskstation manager (dsm), diskstation manager +1 more A vulnerability regarding concurrent execution using shared resource with improper... CVE-2022-27626 10.0 CriticalOctober 20, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper neutralization of special elements used in an OS command ('OS Command Injection')... CVE-2022-27616 7.2 HighAugust 3, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper neutralization of special elements used in an OS command ('OS Command Injection')... CVE-2022-22684 7.2 HighJuly 28, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... CVE-2022-27610 6.5 MediumJuly 27, 2022
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in... CVE-2022-22687 9.8 CriticalMarch 25, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper neutralization of special elements used in a command ('Command Injection') vulnerability... CVE-2022-22688 8.8 HighMarch 25, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... CVE-2022-22679 6.5 MediumFebruary 7, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper neutralization of special elements in output used by a downstream component ('Injection'... CVE-2021-43929 6.5 MediumFebruary 7, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper neutralization of special elements used in an SQL command ('SQL Injection')... CVE-2021-43927 4.7 MediumFebruary 7, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper neutralization of special elements used in an SQL command ('SQL Injection')... CVE-2021-43926 4.7 MediumFebruary 7, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper neutralization of special elements used in an SQL command ('SQL Injection')... CVE-2021-43925 4.7 MediumFebruary 7, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in... CVE-2022-22680 5.3 MediumFebruary 7, 2022
• samba, canonical ubuntu linux, debian linux +20 more +22 more The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced... CVE-2021-44142 Public exploitFix available EPSS 73.6% 8.8 HighJanuary 31, 2022
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more Improper neutralization of special elements in output used by a downstream component ('Injection'... CVE-2021-29084 7.5 HighJune 23, 2021
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more Improper neutralization of special elements in output used by a downstream component ('Injection'... CVE-2021-29085 8.6 HighJune 23, 2021
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... CVE-2021-29087 7.5 HighJune 23, 2021
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager ... CVE-2021-27649 9.8 CriticalJune 23, 2021
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in... CVE-2021-29086 5.3 MediumJune 23, 2021
• synology diskstation manager, diskstation manager (dsm) +1 more Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... CVE-2021-33182 5.0 MediumJune 1, 2021
• synology diskstation manager, diskstation manager (dsm) +1 more Improper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component... CVE-2021-29088 7.8 HighJune 1, 2021
• netatalk, synology diskstation manager, debian linux +2 more This vulnerability allows network-adjacent attackers to execute arbitrary code on affected... CVE-2021-31439 Fix available 8.8 HighMay 21, 2021
• synology diskstation manager, diskstation manager (dsm) +1 more Improper neutralization of special elements used in an OS command in SYNO.Core.Network.PPPoE in... CVE-2021-29083 7.2 HighApril 1, 2021
• synology diskstation manager, diskstation manager (dsm) +1 more Use After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM)... CVE-2021-27646 9.8 CriticalMarch 12, 2021
• synology diskstation manager, diskstation manager (dsm) +1 more Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation... CVE-2021-26569 9.8 CriticalMarch 12, 2021
• synology diskstation manager, diskstation manager (dsm) +1 more Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM... CVE-2021-27647 9.8 CriticalMarch 12, 2021
• faad2 project faad2, synology diskstation manager, diskstation manager unified controller +2 more +4 more Use of unmaintained third party components vulnerability in faad in Synology DiskStation Manager ... CVE-2021-26567 7.8 HighFebruary 26, 2021
• synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Insertion of sensitive information into sent data vulnerability in synorelayd in Synology... CVE-2021-26566 8.3 HighFebruary 26, 2021
• synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Cleartext transmission of sensitive information vulnerability in synorelayd in Synology... CVE-2021-26565 8.3 HighFebruary 26, 2021
• synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Cleartext transmission of sensitive information vulnerability in synorelayd in Synology... CVE-2021-26564 8.3 HighFebruary 26, 2021
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more +4 more Improper access control vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM)... CVE-2021-26563 8.2 HighFebruary 26, 2021
• synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM)... CVE-2021-26562 9.0 CriticalFebruary 26, 2021
• synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager ... CVE-2021-26561 9.0 CriticalFebruary 26, 2021
• synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology... CVE-2021-26560 9.0 CriticalFebruary 26, 2021
• Show olderLoading…