Synology Drive vulnerabilities

• synology beedrive, beedrive for desktop +1 more Files or directories accessible to external parties vulnerability in redis-server component in... CVE-2024-11399 6.8 MediumMay 27, 2026
• synology beedrive, beedrive for desktop +1 more Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for... CVE-2023-52945 7.8 HighMay 27, 2026
• synology beedrive, beedrive for desktop +1 more Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3... CVE-2025-8074 5.6 MediumDecember 4, 2025
• synology beedrive, beedrive for desktop +1 more Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... CVE-2025-54160 7.8 HighDecember 4, 2025
• synology beedrive, beedrive for desktop +1 more Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2... CVE-2025-54159 7.5 HighDecember 4, 2025
• synology beedrive, beedrive for desktop +1 more Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for... CVE-2025-54158 7.8 HighDecember 4, 2025
• synology drive server Improper neutralization of special elements used in an SQL command ('SQL Injection')... CVE-2024-50631 EPSS 26.8% 7.5 HighMarch 19, 2025
• synology drive server Missing authentication for critical function vulnerability in the webapi component in Synology... CVE-2024-50630 EPSS 24.6% 7.5 HighMarch 19, 2025
• synology drive client Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup... CVE-2022-49041 4.4 MediumSeptember 26, 2024
• synology drive client Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in... CVE-2022-49040 4.4 MediumSeptember 26, 2024
• synology drive, drive client +1 more Out-of-bounds write vulnerability in backup task management functionality in Synology Drive... CVE-2022-49039 6.7 MediumSeptember 26, 2024
• synology drive, drive client +1 more Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component... CVE-2022-49038 7.8 HighSeptember 26, 2024
• synology drive client Insertion of sensitive information into log file vulnerability in proxy settings component in... CVE-2022-49037 6.5 MediumSeptember 26, 2024
• synology drive, drive client +1 more Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss... CVE-2023-52946 8.2 HighSeptember 26, 2024
• synology drive, drive server +1 more Information exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2... CVE-2018-13297 5.3 MediumApril 1, 2019
• synology drive, drive server +1 more Improper access control vulnerability in Synology Drive before 1.0.2-10275 allows remote... CVE-2018-8922 6.5 MediumJune 1, 2018
• synology drive, drive server +1 more Cross-site scripting (XSS) vulnerability in File Sharing Notify Toast in Synology Drive before 1... CVE-2018-8921 6.5 MediumJune 1, 2018
• synology drive, drive server +1 more Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Drive before 1.0.1... CVE-2018-8910 6.5 MediumMay 10, 2018
• synology cloud station drive Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive... CVE-2017-11158 7.8 HighAugust 31, 2017