Skip to contentSynology vulnerabilities
Products
Show 17 moreShow less
Newest
- qnap systems inc. photo stationSQL injection vulnerability in synophoto_csPhotoDB.php in Synology Photo Station before 6.8.11...CVE-2019-118217.3 High
- humhub calendarCross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615...CVE-2019-118256.5 Medium
- synology moments, photo moments +1 moreRelative path traversal vulnerability in SYNO.PhotoTeam.Upload.Item in Synology Moments before 1...CVE-2019-118268.0 High
- humhub calendarInformation exposure through process environment vulnerability in Synology Calendar before 2.3.3...CVE-2019-118205.5 Medium
- w1.fi hostapd, wi-fi alliance hostapd with sae support, fedoraproject fedora +7 more +9 moreThe implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacksCVE-2019-9494Fix available5.9 Medium
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-CommitCVE-2019-9499Fix available8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-CommitCVE-2019-9498Fix available8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, debian linux +8 more +10 moreThe implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patternsCVE-2019-9495Fix available3.7 Low
- samba, fedoraproject fedora, synology directory server +4 more +6 moreA vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10...CVE-2019-3870Fix available6.1 Medium
- humhub calendarRelative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2...CVE-2018-132994.3 Medium
- synology android moments, moments +1 moreChannel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments...CVE-2018-132984.2 Medium
- synology drive, drive server +1 moreInformation exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2...CVE-2018-132975.3 Medium
- synology mailplus serverUncontrolled resource consumption vulnerability in TLS configuration in Synology MailPlus Server...CVE-2018-132967.5 High
- synology application serviceInformation exposure vulnerability in SYNO.Personal.Application.Info in Synology Application...CVE-2018-132954.3 Medium
- synology application serviceInformation exposure vulnerability in SYNO.Personal.Profile in Synology Application Service...CVE-2018-132944.3 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreCross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation...CVE-2018-132935.9 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreInformation exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager ...CVE-2018-132914.3 Medium
- synology router manager, router manager (srm) +1 moreInformation exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM)...CVE-2018-132924.3 Medium
- synology router manager, router manager (srm) +1 moreInformation exposure vulnerability in SYNO.Core.ACL in Synology Router Manager (SRM) before 1.1.7...CVE-2018-132904.3 Medium
- synology router manager, router manager (srm) +1 moreInformation exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM)...CVE-2018-132895.3 Medium
- synology file stationInformation exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2...CVE-2018-132885.3 Medium
- synology router manager, router manager (srm) +1 moreIncorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM)...CVE-2018-132876.5 Medium
- synology router manager, router manager (srm) +1 moreCommand injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1...CVE-2018-132857.5 High
- synology diskstation manager (dsm), diskstation manager +1 moreIncorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM...CVE-2018-132866.5 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreCommand injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1...CVE-2018-132847.5 High
- sophos ssl vpn clientLack of administrator control over security vulnerability in client.cgi in Synology SSL VPN...CVE-2018-132838.8 High
- synology sso serverImproper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology...CVE-2017-167757.1 High
- synology diskstation manager (dsm), diskstation manager +1 moreCross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology...CVE-2017-167746.5 Medium
- synology web stationMissing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote...CVE-2018-89137.1 High
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager ...CVE-2018-89205.9 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreInformation exposure vulnerability in SYNO.Core.Desktop.SessionData in Synology DiskStation...CVE-2018-89198.3 High
- synology diskstation manager (dsm), diskstation manager +1 moreCross-site scripting (XSS) vulnerability in info.cgi in Synology DiskStation Manager (DSM) before...CVE-2018-89176.5 Medium
- synology router manager, router manager (srm) +1 moreCross-site scripting (XSS) vulnerability in info.cgi in Synology Router Manager (SRM) before 1.1...CVE-2018-89186.5 Medium
- netatalk, debian linux, synology diskstation manager +3 more +5 moreNetatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to...CVE-2018-1160Public exploitFix availableEPSS 86.4%9.8 Critical
- qnap systems inc. photo stationSession fixation vulnerability in SYNO.PhotoStation.Auth in Synology Photo Station before 6.8.7...CVE-2018-132825.6 Medium
- synology diskstation manager (dsm), diskstation manager, skynas +1 more +3 moreInformation exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before...CVE-2018-132814.3 Medium
- pivotal application servicePivotal Applications Manager in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1...CVE-2018-110888.8 High
- pivotal application servicePivotal Usage Service in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior...CVE-2018-110868.8 High
- synology diskstation manager (dsm), diskstation manager +1 moreUse of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology...CVE-2018-132807.4 High
- synology ds107 firmware, ds116 firmware, ds213 firmware +3 more +5 moreSynology NAS servers DS107, DS116, and DS213, use default credentialsCVE-2016-65549.8 Critical
- sophos ssl vpn clientImproper restriction of communication channel to intended endpoints vulnerability in HTTP daemon...CVE-2018-89297.3 High
- synology carddav serverCross-site scripting (XSS) vulnerability in Address Book Editor in Synology CardDAV Server before...CVE-2018-89286.5 Medium
- synology universal searchImproper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0...CVE-2017-167736.5 Medium
- humhub calendarImproper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows...CVE-2018-89275.4 Medium
- qnap systems inc. photo stationPermissive regular expression vulnerability in synophoto_dsm_user in Synology Photo Station...CVE-2018-89268.8 High
- qnap systems inc. photo stationCross-site request forgery (CSRF) vulnerability in admin/user.php in Synology Photo Station...CVE-2018-89258.8 High
- synology diskstation manager (dsm), diskstation manager +1 moreUnverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM)...CVE-2018-89166.3 Medium
- synology router manager, router manager (srm) +1 moreCommand injection vulnerability in EZ-Internet in Synology Router Manager (SRM) before 1.1.6-6931...CVE-2017-120787.2 High
- synology diskstation manager (dsm), diskstation manager +1 moreCommand injection vulnerability in EZ-Internet in Synology DiskStation Manager (DSM) before 6.2...CVE-2017-120757.2 High
- microsoft officeCross-site scripting (XSS) vulnerability in Title Tootip in Synology Office before 3.0.3-2143...CVE-2018-89246.5 Medium
- Show moreLoading…