Skip to content

Synology Skynas vulnerabilities

faad2 project faad2, synology diskstation manager, diskstation manager unified controller +2 more +4 moreUse of unmaintained third party components vulnerability in faad in Synology DiskStation Manager ...CVE-2021-265677.8 HighFebruary 26, 2021
synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreInsertion of sensitive information into sent data vulnerability in synorelayd in Synology...CVE-2021-265668.3 HighFebruary 26, 2021
synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreCleartext transmission of sensitive information vulnerability in synorelayd in Synology...CVE-2021-265658.3 HighFebruary 26, 2021
synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreCleartext transmission of sensitive information vulnerability in synorelayd in Synology...CVE-2021-265648.3 HighFebruary 26, 2021
synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more +4 moreImproper access control vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM)...CVE-2021-265638.2 HighFebruary 26, 2021
synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreOut-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM)...CVE-2021-265629.0 CriticalFebruary 26, 2021
synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreStack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager ...CVE-2021-265619.0 CriticalFebruary 26, 2021
synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreCleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology...CVE-2021-265609.0 CriticalFebruary 26, 2021
sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 moreSudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...CVE-2021-3156In KEVPublic exploitFix availableEPSS 100.0%7.8 HighJanuary 26, 2021
synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreAlgorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6...CVE-2020-276528.3 HighOctober 29, 2020
synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreSynology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the...CVE-2020-276505.8 MediumOctober 29, 2020
synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreImproper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager ...CVE-2020-276488.3 HighOctober 29, 2020
red hat samba, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x...CVE-2019-19344Fix available6.5 MediumJanuary 21, 2020
red hat samba, canonical ubuntu linux, debian linux +7 more +9 moreAll samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an...CVE-2019-14907Fix available6.5 MediumJanuary 21, 2020
apache traffic server, apple swiftnio, canonical ubuntu linux +15 more +17 moreSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of serviceCVE-2019-9518Fix availableEPSS 25.4%7.5 HighAugust 13, 2019
apache http server, traffic server, apple swiftnio +20 more +22 moreSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of serviceCVE-2019-9517Fix availableEPSS 27.0%7.5 HighAugust 13, 2019
apache traffic server, apple swiftnio, canonical ubuntu linux +16 more +18 moreSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of serviceCVE-2019-9516Fix availableEPSS 57.5%7.5 HighAugust 13, 2019
apache traffic server, apple swiftnio, canonical ubuntu linux +19 more +21 moreSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of serviceCVE-2019-9515Fix availableEPSS 87.3%7.5 HighAugust 13, 2019
apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 moreSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of serviceCVE-2019-9514Fix availableEPSS 82.8%7.5 HighAugust 13, 2019
apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of serviceCVE-2019-9513Public exploitFix availableEPSS 81.6%7.5 HighAugust 13, 2019
apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of serviceCVE-2019-9511Public exploitFix availableEPSS 59.5%7.5 HighAugust 13, 2019
samba, fedoraproject fedora, synology directory server +4 more +6 moreA vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10...CVE-2019-3870Fix available6.1 MediumApril 9, 2019
netatalk, debian linux, synology diskstation manager +3 more +5 moreNetatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to...CVE-2018-1160Public exploitFix availableEPSS 86.4%9.8 CriticalDecember 20, 2018
synology diskstation manager (dsm), diskstation manager, skynas +1 more +3 moreInformation exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before...CVE-2018-132814.3 MediumOctober 31, 2018
debian linux, freebsd, xen +8 more +10 moreA statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software...CVE-2018-8897Public exploitFix availableEPSS 18.5%7.8 HighMay 8, 2018
ntp, hpe hpux-ntp, netapp hci +6 more +8 morentpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the...CVE-2018-7170Fix available5.3 MediumMarch 6, 2018
ntp, canonical ubuntu linux, hpe hpux-ntp +13 more +15 moreThe protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of...CVE-2018-7185Fix available7.5 HighMarch 6, 2018
ntp, canonical ubuntu linux, netapp cloud backup +7 more +9 morentpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp,...CVE-2018-7184Fix available7.5 HighMarch 6, 2018
arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 moreCVE-2017-5753 does not affect BellSoft softwareCVE-2017-5753Public exploitFix availableEPSS 93.8%5.6 MediumJanuary 3, 2018