Synology Unified Controller vulnerabilities

• synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 more Improper control of dynamically-managed code resources vulnerability in WebAPI component in... CVE-2024-5401 4.3 MediumDecember 4, 2025
• synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 more Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before... CVE-2024-45539 7.5 HighDecember 4, 2025
• synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 more Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation... CVE-2024-45538 9.6 CriticalDecember 4, 2025
• syncology replication service, synology unified controller (dsmuc), unified controller +2 more Off-by-one error vulnerability in the transmission component in Synology Replication Service... CVE-2024-10442 10.0 CriticalMarch 19, 2025
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +3 more +5 more Use of insufficiently random values vulnerability in User Management Functionality in Synology... CVE-2023-2729 5.9 MediumJune 13, 2023
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +3 more +5 more Uncontrolled search path element vulnerability in Backup Management Functionality in Synology... CVE-2023-0142 6.5 MediumJune 13, 2023
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in... CVE-2022-22687 9.8 CriticalMarch 25, 2022
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more Improper neutralization of special elements in output used by a downstream component ('Injection'... CVE-2021-29084 7.5 HighJune 23, 2021
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more Improper neutralization of special elements in output used by a downstream component ('Injection'... CVE-2021-29085 8.6 HighJune 23, 2021
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... CVE-2021-29087 7.5 HighJune 23, 2021
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager ... CVE-2021-27649 9.8 CriticalJune 23, 2021
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in... CVE-2021-29086 5.3 MediumJune 23, 2021
• faad2 project faad2, synology diskstation manager, diskstation manager unified controller +2 more +4 more Use of unmaintained third party components vulnerability in faad in Synology DiskStation Manager ... CVE-2021-26567 7.8 HighFebruary 26, 2021
• synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Insertion of sensitive information into sent data vulnerability in synorelayd in Synology... CVE-2021-26566 8.3 HighFebruary 26, 2021
• synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Cleartext transmission of sensitive information vulnerability in synorelayd in Synology... CVE-2021-26565 8.3 HighFebruary 26, 2021
• synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Cleartext transmission of sensitive information vulnerability in synorelayd in Synology... CVE-2021-26564 8.3 HighFebruary 26, 2021
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more +4 more Improper access control vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM)... CVE-2021-26563 8.2 HighFebruary 26, 2021
• synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM)... CVE-2021-26562 9.0 CriticalFebruary 26, 2021
• synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager ... CVE-2021-26561 9.0 CriticalFebruary 26, 2021
• synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology... CVE-2021-26560 9.0 CriticalFebruary 26, 2021
• sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 more Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ... CVE-2021-3156 In KEVPublic exploitFix available EPSS 100.0% 7.8 HighJanuary 26, 2021