Skip to contentSynology vulnerabilities
Products
Show 17 moreShow less
Newest
- synology file stationCross-site scripting (XSS) vulnerability in Attachment Preview in Synology File Station before 1...CVE-2018-89236.5 Medium
- synology drive, drive server +1 moreImproper access control vulnerability in Synology Drive before 1.0.2-10275 allows remote...CVE-2018-89226.5 Medium
- synology drive, drive server +1 moreCross-site scripting (XSS) vulnerability in File Sharing Notify Toast in Synology Drive before 1...CVE-2018-89216.5 Medium
- humhub calendarCross-site scripting (XSS) vulnerability in Notification Center in Synology Calendar before 2.1.1...CVE-2018-89156.5 Medium
- plex media serverSQL injection vulnerability in UPnP DMA in Synology Media Server before 1.7.6-2842 and before 1.4...CVE-2018-89147.3 High
- synology drive, drive server +1 moreCross-site scripting (XSS) vulnerability in Attachment Preview in Synology Drive before 1.0.1...CVE-2018-89106.5 Medium
- synology note stationCross-site scripting (XSS) vulnerability in SYNO.NoteStation.Note in Synology Note Station before...CVE-2018-89126.5 Medium
- synology note stationCross-site scripting (XSS) vulnerability in Attachment Preview in Synology Note Station before 2...CVE-2018-89116.5 Medium
- debian linux, freebsd, xen +8 more +10 moreA statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software...CVE-2018-8897Public exploitFix availableEPSS 18.5%7.8 High
- qnap systems inc. photo stationImproper input validation vulnerability in SYNOPHOTO_Flickr_MultiUpload in Synology Photo Station...CVE-2017-167728.8 High
- qnap systems inc. photo stationCross-site scripting (XSS) vulnerability in Log Viewer in Synology Photo Station before 6.8.3...CVE-2017-167716.1 Medium
- ntp, hpe hpux-ntp, netapp hci +6 more +8 morentpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the...CVE-2018-7170Fix available5.3 Medium
- ntp, canonical ubuntu linux, hpe hpux-ntp +13 more +15 moreThe protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of...CVE-2018-7185Fix available7.5 High
- ntp, canonical ubuntu linux, netapp cloud backup +7 more +9 morentpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp,...CVE-2018-7184Fix available7.5 High
- synology surveillance stationFile and directory information exposure vulnerability in SYNO.SurveillanceStation...CVE-2017-167706.5 Medium
- synology surveillance stationCross-site scripting (XSS) vulnerability in User Profile in Synology Surveillance Station before...CVE-2017-167675.4 Medium
- synology photo stationExposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1...CVE-2017-167695.3 Medium
- arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 moreCVE-2017-5753 does not affect BellSoft softwareCVE-2017-5753Public exploitFix availableEPSS 93.8%5.6 Medium
- destiny.gg chatMultiple cross-site scripting (XSS) vulnerabilities in Slash Command Creator in Synology Chat...CVE-2017-158925.4 Medium
- destiny.gg chatServer-side request forgery (SSRF) vulnerability in Link Preview in Synology Chat before 2.0.0...CVE-2017-158866.5 Medium
- synology mailplus serverCross-site scripting (XSS) vulnerability in User Policy editor in Synology MailPlus Server before...CVE-2017-167684.8 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreAn improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM)...CVE-2017-167666.5 Medium
- qnap systems inc. photo stationCross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station...CVE-2017-120725.4 Medium
- synology mailplus serverCross-site scripting (XSS) vulnerability in Disclaimer in Synology MailPlus Server before 1.4.0...CVE-2017-158904.8 Medium
- synology router manager, router manager (srm) +1 moreDirectory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager (SRM...CVE-2017-158956.5 Medium
- synology diskstation manager, diskstation manager (dsm) +1 moreDirectory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager...CVE-2017-158946.5 Medium
- synology file stationDirectory traversal vulnerability in the SYNO.FileStation.Extract in Synology File Station before...CVE-2017-158936.5 Medium
- synology calendarImproper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1...CVE-2017-158916.5 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreCommand injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2...CVE-2017-15889Public exploitEPSS 73.7%8.8 High
- qnap systems inc. photo stationAn information exposure vulnerability in default HTTP configuration file in Synology Photo...CVE-2017-120805.3 Medium
- qnap systems inc. photo stationFiles or directories accessible to external parties vulnerability in picasa.php in Synology Photo...CVE-2017-120797.5 High
- synology carddav serverAn improper restriction of excessive authentication attempts vulnerability in /principals in...CVE-2017-158879.8 Critical
- synology audio stationCross-site scripting (XSS) vulnerability in Custom Internet Radio List in Synology Audio Station...CVE-2017-158885.4 Medium
- thekelleys dnsmasq, arista eos, arubanetworks arubaos +18 more +20 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14491Public exploitFix availableEPSS 86.5%9.8 Critical
- synology photo stationServer-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station...CVE-2017-120716.5 Medium
- synology photo stationDirectory traversal vulnerability in synphotoio in Synology Photo Station before 6.7.4-3433 and 6...CVE-2017-111626.5 Medium
- synology photo stationMultiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968...CVE-2017-111619.8 Critical
- synology cloud station driveMultiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive...CVE-2017-111587.8 High
- synology cloud station backupMultiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Backup...CVE-2017-111577.8 High
- synology router managerUncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology...CVE-2017-120774.9 Medium
- synology diskstation managerUncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology...CVE-2017-120764.9 Medium
- synology photo stationCross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station...CVE-2017-95555.4 Medium
- synology dns serverDirectory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS...CVE-2017-120746.5 Medium
- synology photo station uploaderMultiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader...CVE-2017-111597.8 High
- synology assistantMultiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1...CVE-2017-111607.8 High
- synology download stationSynology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 uses weak permissions ...CVE-2017-111567.8 High
- synology officeCommand injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506...CVE-2017-111507.8 High
- synology download stationServer-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x...CVE-2017-111496.5 Medium
- synology video stationCross-site scripting (XSS) vulnerability in Video Metadata Editor in Synology Video Station...CVE-2017-95565.4 Medium
- synology chatServer-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0...CVE-2017-111486.5 Medium
- Show moreLoading…