Skip to content

Synology Dsm vulnerabilities

synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 moreImproper neutralization of special elements in output used by a downstream component ('Injection'...CVE-2021-290858.6 HighJune 23, 2021
synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2021-290877.5 HighJune 23, 2021
synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 moreUse after free vulnerability in file transfer protocol component in Synology DiskStation Manager ...CVE-2021-276499.8 CriticalJune 23, 2021
synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 moreExposure of sensitive information to an unauthorized actor vulnerability in webapi component in...CVE-2021-290865.3 MediumJune 23, 2021
synology diskstation manager, diskstation manager (dsm) +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2021-331825.0 MediumJune 1, 2021
synology diskstation manager, diskstation manager (dsm) +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component...CVE-2021-290887.8 HighJune 1, 2021
synology diskstation manager, diskstation manager (dsm) +1 moreImproper neutralization of special elements used in an OS command in SYNO.Core.Network.PPPoE in...CVE-2021-290837.2 HighApril 1, 2021
synology diskstation manager, diskstation manager (dsm) +1 moreUse After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM)...CVE-2021-276469.8 CriticalMarch 12, 2021
synology diskstation manager, diskstation manager (dsm) +1 moreRace Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation...CVE-2021-265699.8 CriticalMarch 12, 2021
synology diskstation manager, diskstation manager (dsm) +1 moreOut-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM...CVE-2021-276479.8 CriticalMarch 12, 2021
synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreInsertion of sensitive information into sent data vulnerability in synorelayd in Synology...CVE-2021-265668.3 HighFebruary 26, 2021
synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreCleartext transmission of sensitive information vulnerability in synorelayd in Synology...CVE-2021-265658.3 HighFebruary 26, 2021
synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreCleartext transmission of sensitive information vulnerability in synorelayd in Synology...CVE-2021-265648.3 HighFebruary 26, 2021
synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more +4 moreImproper access control vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM)...CVE-2021-265638.2 HighFebruary 26, 2021
synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreOut-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM)...CVE-2021-265629.0 CriticalFebruary 26, 2021
synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreStack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager ...CVE-2021-265619.0 CriticalFebruary 26, 2021
synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreCleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology...CVE-2021-265609.0 CriticalFebruary 26, 2021
synology diskstation manager (dsm), diskstation manager +1 moreCleartext transmission of sensitive information vulnerability in DDNS in Synology DiskStation...CVE-2020-276566.5 MediumOctober 29, 2020
synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreAlgorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6...CVE-2020-276528.3 HighOctober 29, 2020
synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreSynology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the...CVE-2020-276505.8 MediumOctober 29, 2020
synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreImproper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager ...CVE-2020-276488.3 HighOctober 29, 2020
synology diskstation manager (dsm), diskstation manager +1 moreCross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation...CVE-2018-132935.9 MediumApril 1, 2019
synology diskstation manager (dsm), diskstation manager +1 moreInformation exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager ...CVE-2018-132914.3 MediumApril 1, 2019
synology diskstation manager (dsm), diskstation manager +1 moreIncorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM...CVE-2018-132866.5 MediumApril 1, 2019
synology diskstation manager (dsm), diskstation manager +1 moreCommand injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1...CVE-2018-132847.5 HighApril 1, 2019
synology diskstation manager (dsm), diskstation manager +1 moreCross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology...CVE-2017-167746.5 MediumApril 1, 2019
synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager ...CVE-2018-89205.9 MediumDecember 24, 2018
synology diskstation manager (dsm), diskstation manager +1 moreInformation exposure vulnerability in SYNO.Core.Desktop.SessionData in Synology DiskStation...CVE-2018-89198.3 HighDecember 24, 2018
synology diskstation manager (dsm), diskstation manager +1 moreCross-site scripting (XSS) vulnerability in info.cgi in Synology DiskStation Manager (DSM) before...CVE-2018-89176.5 MediumDecember 24, 2018
synology diskstation manager (dsm), diskstation manager, skynas +1 more +3 moreInformation exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before...CVE-2018-132814.3 MediumOctober 31, 2018
synology diskstation manager (dsm), diskstation manager +1 moreUse of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology...CVE-2018-132807.4 HighJuly 30, 2018
synology diskstation manager (dsm), diskstation manager +1 moreUnverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM)...CVE-2018-89166.3 MediumJune 8, 2018
synology diskstation manager (dsm), diskstation manager +1 moreCommand injection vulnerability in EZ-Internet in Synology DiskStation Manager (DSM) before 6.2...CVE-2017-120757.2 HighJune 8, 2018
synology diskstation manager (dsm), diskstation manager +1 moreAn improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM)...CVE-2017-167666.5 MediumDecember 22, 2017
synology diskstation manager, diskstation manager (dsm) +1 moreDirectory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager...CVE-2017-158946.5 MediumDecember 8, 2017
synology diskstation manager (dsm), diskstation manager +1 moreCommand injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2...CVE-2017-15889Public exploitEPSS 73.7%8.8 HighDecember 4, 2017
synology dsmThe FTP authentication module in Synology Disk Station 2.x logs passwords to the web application...CVE-2010-36842.1 LowSeptember 29, 2010
synology dsmMultiple cross-site scripting (XSS) vulnerabilities in Synology Disk Station 2.x before DSM3.0...CVE-2010-24534.3 MediumSeptember 29, 2010