Skip to contentSynology vulnerabilities
Products
Show 17 moreShow less
Newest
- netatalk, synology diskstation manager, debian linux +2 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...CVE-2021-31439Fix available8.8 High
- synology antivirus essentialExternally controlled reference to a resource in another sphere in quarantine functionality in...CVE-2021-276489.0 Critical
- qnap surveillance stationStack Buffer Overflow in Surveillance StationCVE-2021-287979.8 Critical
- synology diskstation manager, diskstation manager (dsm) +1 moreImproper neutralization of special elements used in an OS command in SYNO.Core.Network.PPPoE in...CVE-2021-290837.2 High
- synology diskstation manager, diskstation manager (dsm) +1 moreUse After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM)...CVE-2021-276469.8 Critical
- synology diskstation manager, diskstation manager (dsm) +1 moreRace Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation...CVE-2021-265699.8 Critical
- synology diskstation manager, diskstation manager (dsm) +1 moreOut-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM...CVE-2021-276479.8 Critical
- faad2 project faad2, synology diskstation manager, diskstation manager unified controller +2 more +4 moreUse of unmaintained third party components vulnerability in faad in Synology DiskStation Manager ...CVE-2021-265677.8 High
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreInsertion of sensitive information into sent data vulnerability in synorelayd in Synology...CVE-2021-265668.3 High
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreCleartext transmission of sensitive information vulnerability in synorelayd in Synology...CVE-2021-265658.3 High
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreCleartext transmission of sensitive information vulnerability in synorelayd in Synology...CVE-2021-265648.3 High
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more +4 moreImproper access control vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM)...CVE-2021-265638.2 High
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreOut-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM)...CVE-2021-265629.0 Critical
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreStack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager ...CVE-2021-265619.0 Critical
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 moreCleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology...CVE-2021-265609.0 Critical
- qnap surveillance stationStack Buffer Overflow in Surveillance StationCVE-2020-25019.8 Critical
- sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 moreSudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...CVE-2021-3156In KEVPublic exploitFix availableEPSS 100.0%7.8 High
- synology safeaccess, safe access +1 moreSQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote...CVE-2020-276609.6 Critical
- synology safeaccess, safe access +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Synology SafeAccess before 1.2.3-0234...CVE-2020-276598.4 High
- synology diskstation manager (dsm), diskstation manager +1 moreCleartext transmission of sensitive information vulnerability in DDNS in Synology DiskStation...CVE-2020-276566.5 Medium
- synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreAlgorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6...CVE-2020-276528.3 High
- synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreSynology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the...CVE-2020-276505.8 Medium
- synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreImproper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager ...CVE-2020-276488.3 High
- synology router manager, router manager (srm) +1 moreSynology Router Manager (SRM) before 1.2.4-8081 does not include the HTTPOnly flag in a Set...CVE-2020-276587.1 High
- synology router manager, router manager (srm) +1 moreCleartext transmission of sensitive information vulnerability in DDNS in Synology Router Manager ...CVE-2020-276576.5 Medium
- synology router manager, router manager (srm) +1 moreImproper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows...CVE-2020-276556.5 Medium
- synology router manager, router manager (srm) +1 moreImproper access control vulnerability in lbd in Synology Router Manager (SRM) before 1.2.4-8081...CVE-2020-276549.8 Critical
- synology router manager, router manager (srm), diskstation manager +2 moreAlgorithm downgrade vulnerability in QuickConnect in Synology Router Manager (SRM) before 1.2.4...CVE-2020-276538.3 High
- synology router manager, router manager (srm) +1 moreSynology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the session...CVE-2020-276515.8 Medium
- synology router manager, router manager (srm) +1 moreImproper certificate validation vulnerability in OpenVPN client in Synology Router Manager (SRM)...CVE-2020-276498.3 High
- isc bind, canonical ubuntu linux, debian linux +5 more +7 moreA flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.cCVE-2020-8623Fix available7.5 High
- isc bind, canonical ubuntu linux, debian linux +6 more +8 moreA truncated TSIG response can lead to an assertion failureCVE-2020-8622Fix available6.5 Medium
- isc bind, canonical ubuntu linux, isc bind9 +3 more +5 moreAttempting QNAME minimization after forwarding can lead to an assertion failure in resolver.cCVE-2020-8621Fix available7.5 High
- microsoft netlogon, canonical ubuntu linux, debian linux +24 more +26 moreNetlogon Elevation of Privilege VulnerabilityCVE-2020-1472In KEVPublic exploitFix availableEPSS 99.4%5.5 Medium
- synology router manager, router manager (srm) +1 moreCRLF injection vulnerability in Network Center in Synology Router Manager (SRM) before 1.2.3-8017...CVE-2019-118238.6 High
- broadcom bcm4339 firmware, wifi drivers, synology router manager +2 moreBroadcom wl driver is vulnerable to heap buffer overflowCVE-2019-9502Fix available7.9 High
- broadcom bcm4339 firmware, wifi drivers, synology router manager +2 moreBroadcom wl driver is vulnerable to heap buffer overflowCVE-2019-9501Fix available7.9 High
- red hat samba, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x...CVE-2019-19344Fix available6.5 Medium
- red hat samba, canonical ubuntu linux, debian linux +7 more +9 moreAll samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an...CVE-2019-14907Fix available6.5 Medium
- apache traffic server, apple swiftnio, canonical ubuntu linux +15 more +17 moreSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of serviceCVE-2019-9518Fix availableEPSS 25.4%7.5 High
- apache http server, traffic server, apple swiftnio +20 more +22 moreSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of serviceCVE-2019-9517Fix availableEPSS 27.0%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +16 more +18 moreSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of serviceCVE-2019-9516Fix availableEPSS 57.5%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +19 more +21 moreSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of serviceCVE-2019-9515Fix availableEPSS 87.3%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 moreSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of serviceCVE-2019-9514Fix availableEPSS 82.8%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of serviceCVE-2019-9513Public exploitFix availableEPSS 81.6%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of serviceCVE-2019-9511Public exploitFix availableEPSS 59.5%7.5 High
- synology note stationCross-site scripting (XSS) vulnerability in SYNO.NoteStation.Shard in Synology Note Station...CVE-2019-118276.5 Medium
- microsoft officeCross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows...CVE-2019-118285.5 Medium
- humhub calendarOS command injection vulnerability in drivers_syno_import_user.php in Synology Calendar before 2...CVE-2019-118297.3 High
- qnap systems inc. photo stationRelative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before...CVE-2019-118224.3 Medium
- Show moreLoading…