Skip to contentSynology vulnerabilities
Products
Show 17 moreShow less
Newest
- synology diskstation manager (dsm), diskstation manager +1 moreA vulnerability regarding concurrent execution using shared resource with improper...CVE-2022-2762610.0 Critical
- synology usb copyImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2022-276215.5 Medium
- synology sso serverImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2022-276206.8 Medium
- synology note station, note station client +1 moreCleartext transmission of sensitive information vulnerability in authentication management in...CVE-2022-276196.8 Medium
- synology storage analyzerImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2022-276186.8 Medium
- synology calendarImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2022-276175.0 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2022-276167.2 High
- synology audio stationImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2022-276115.4 Medium
- synology audio stationBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi...CVE-2022-276127.3 High
- plex media serverBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi...CVE-2022-2268310.0 Critical
- plex media serverExposure of sensitive information to an unauthorized actor vulnerability in web server in...CVE-2022-276145.3 Medium
- synology webdav serverImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2022-226858.7 High
- synology carddav serverImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2022-276138.3 High
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2022-226847.2 High
- synology dns serverImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2022-276157.7 High
- synology diskstation manager (dsm), diskstation manager +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2022-276106.5 Medium
- synology calendarCross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2...CVE-2022-226866.5 Medium
- synology calendarImproper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2022-226826.5 Medium
- qnap systems inc. photo stationSession fixation vulnerability in access control management in Synology Photo Station before 6.8...CVE-2022-226818.1 High
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 moreBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in...CVE-2022-226879.8 Critical
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of special elements used in a command ('Command Injection') vulnerability...CVE-2022-226888.8 High
- synology diskstation manager (dsm), diskstation manager +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2022-226796.5 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of special elements in output used by a downstream component ('Injection'...CVE-2021-439296.5 Medium
- synology mail stationImproper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2021-439289.9 Critical
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2021-439274.7 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2021-439264.7 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2021-439254.7 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreExposure of sensitive information to an unauthorized actor vulnerability in Web Server in...CVE-2022-226805.3 Medium
- samba, canonical ubuntu linux, debian linux +20 more +22 moreThe Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced...CVE-2021-44142Public exploitFix availableEPSS 73.6%8.8 High
- qnap surveillance stationStack Overflow Vulnerability in Surveillance StationCVE-2021-386878.1 High
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 moreImproper neutralization of special elements in output used by a downstream component ('Injection'...CVE-2021-290847.5 High
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 moreImproper neutralization of special elements in output used by a downstream component ('Injection'...CVE-2021-290858.6 High
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2021-290877.5 High
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 moreUse after free vulnerability in file transfer protocol component in Synology DiskStation Manager ...CVE-2021-276499.8 Critical
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 moreExposure of sensitive information to an unauthorized actor vulnerability in webapi component in...CVE-2021-290865.3 Medium
- plex media serverServer-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before...CVE-2021-348085.8 Medium
- qnap systems inc. download stationImproper neutralization of special elements used in a command ('Command Injection') vulnerability...CVE-2021-348099.9 Critical
- qnap systems inc. download stationImproper privilege management vulnerability in cgi component in Synology Download Station before...CVE-2021-348109.9 Critical
- qnap systems inc. download stationServer-Side Request Forgery (SSRF) vulnerability in task management component in Synology...CVE-2021-348115.0 Medium
- synology calendarUse of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0...CVE-2021-348125.8 Medium
- synology photo stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2021-290899.8 Critical
- synology photo stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2021-290907.2 High
- synology photo stationImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2021-290917.7 High
- synology video stationServer-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station...CVE-2021-331816.6 Medium
- synology diskstation manager, diskstation manager (dsm) +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2021-331825.0 Medium
- synology download stationServer-Side request forgery (SSRF) vulnerability in task management component in Synology...CVE-2021-331847.7 High
- synology dockerImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability...CVE-2021-331837.9 High
- synology diskstation manager, diskstation manager (dsm) +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component...CVE-2021-290887.8 High
- synology photo stationUnrestricted upload of file with dangerous type vulnerability in file management component in...CVE-2021-290928.8 High
- synology media serverImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2021-331807.3 High
- Show moreLoading…