Skip to contentSynology Diskstation Manager vulnerabilities
- sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 moreSudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...CVE-2021-3156In KEVPublic exploitFix availableEPSS 100.0%7.8 High
- synology diskstation manager (dsm), diskstation manager +1 moreCleartext transmission of sensitive information vulnerability in DDNS in Synology DiskStation...CVE-2020-276566.5 Medium
- synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreAlgorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6...CVE-2020-276528.3 High
- synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreSynology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the...CVE-2020-276505.8 Medium
- synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreImproper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager ...CVE-2020-276488.3 High
- synology router manager, router manager (srm), diskstation manager +2 moreAlgorithm downgrade vulnerability in QuickConnect in Synology Router Manager (SRM) before 1.2.4...CVE-2020-276538.3 High
- red hat samba, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x...CVE-2019-19344Fix available6.5 Medium
- red hat samba, canonical ubuntu linux, debian linux +7 more +9 moreAll samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an...CVE-2019-14907Fix available6.5 Medium
- apache traffic server, apple swiftnio, canonical ubuntu linux +15 more +17 moreSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of serviceCVE-2019-9518Fix availableEPSS 25.4%7.5 High
- apache http server, traffic server, apple swiftnio +20 more +22 moreSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of serviceCVE-2019-9517Fix availableEPSS 27.0%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +16 more +18 moreSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of serviceCVE-2019-9516Fix availableEPSS 57.5%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +19 more +21 moreSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of serviceCVE-2019-9515Fix availableEPSS 87.3%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 moreSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of serviceCVE-2019-9514Fix availableEPSS 82.8%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of serviceCVE-2019-9513Public exploitFix availableEPSS 81.6%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of serviceCVE-2019-9511Public exploitFix availableEPSS 59.5%7.5 High
- samba, fedoraproject fedora, synology directory server +4 more +6 moreA vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10...CVE-2019-3870Fix available6.1 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreCross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation...CVE-2018-132935.9 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreInformation exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager ...CVE-2018-132914.3 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreIncorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM...CVE-2018-132866.5 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreCommand injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1...CVE-2018-132847.5 High
- synology diskstation manager (dsm), diskstation manager +1 moreCross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology...CVE-2017-167746.5 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager ...CVE-2018-89205.9 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreInformation exposure vulnerability in SYNO.Core.Desktop.SessionData in Synology DiskStation...CVE-2018-89198.3 High
- synology diskstation manager (dsm), diskstation manager +1 moreCross-site scripting (XSS) vulnerability in info.cgi in Synology DiskStation Manager (DSM) before...CVE-2018-89176.5 Medium
- netatalk, debian linux, synology diskstation manager +3 more +5 moreNetatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to...CVE-2018-1160Public exploitFix availableEPSS 86.4%9.8 Critical
- synology diskstation manager (dsm), diskstation manager, skynas +1 more +3 moreInformation exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before...CVE-2018-132814.3 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreUse of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology...CVE-2018-132807.4 High
- synology diskstation manager (dsm), diskstation manager +1 moreUnverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM)...CVE-2018-89166.3 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreCommand injection vulnerability in EZ-Internet in Synology DiskStation Manager (DSM) before 6.2...CVE-2017-120757.2 High
- debian linux, freebsd, xen +8 more +10 moreA statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software...CVE-2018-8897Public exploitFix availableEPSS 18.5%7.8 High
- ntp, hpe hpux-ntp, netapp hci +6 more +8 morentpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the...CVE-2018-7170Fix available5.3 Medium
- ntp, canonical ubuntu linux, hpe hpux-ntp +13 more +15 moreThe protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of...CVE-2018-7185Fix available7.5 High
- ntp, canonical ubuntu linux, netapp cloud backup +7 more +9 morentpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp,...CVE-2018-7184Fix available7.5 High
- arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 moreCVE-2017-5753 does not affect BellSoft softwareCVE-2017-5753Public exploitFix availableEPSS 93.8%5.6 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreAn improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM)...CVE-2017-167666.5 Medium
- synology diskstation manager, diskstation manager (dsm) +1 moreDirectory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager...CVE-2017-158946.5 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreCommand injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2...CVE-2017-15889Public exploitEPSS 73.7%8.8 High
- thekelleys dnsmasq, arista eos, arubanetworks arubaos +18 more +20 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14491Public exploitFix availableEPSS 86.5%9.8 Critical
- synology diskstation managerUncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology...CVE-2017-120764.9 Medium
- synology diskstation managerAn information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM)...CVE-2017-9554Public exploitEPSS 76.7%5.3 Medium
- synology diskstation managerA design flaw in SYNO.API.Encryption in Synology DiskStation Manager (DSM) before 6.1.3-15152...CVE-2017-95537.5 High
- synology diskstation managerCross-site scripting (XSS) vulnerability in Synology DiskStation Manager (DSM) before 5.2-5565...CVE-2015-46554.3 Medium
- synology diskstation managerThe Multicast DNS (mDNS) responder in Synology DiskStation Manager (DSM) before 3.1 inadvertently...CVE-2015-28095.0 Medium
- synology diskstation manager, photo station +1 moreCross-site scripting (XSS) vulnerability in Synology Photo Station 5 for DiskStation Manager (DSM...CVE-2012-1556Public exploit4.3 Medium
- synology diskstation managerThe OpenVPN module in Synology DiskStation Manager (DSM) 4.3-3810 update 1 has a hardcoded root...CVE-2014-22647.8 High
- synology diskstation managerwebman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4...CVE-2013-6955Public exploitEPSS 84.6%10.0 High
- synology diskstation managerMultiple directory traversal vulnerabilities in the FileBrowser components in Synology...CVE-2013-6987Public exploitEPSS 14.9%7.5 High