Skip to contentSynology vulnerabilities
Products
Show 17 moreShow less
Newest
- synology drive clientInsertion of sensitive information into log file vulnerability in proxy settings component in...CVE-2022-490376.5 Medium
- synology drive, drive client +1 moreBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss...CVE-2023-529468.2 High
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges without consent via unspecified vectors. Th…CVE-2024-393507.5 High
- synology router manager, router manager (srm) +1 moreDownload of code without integrity check vulnerability in AirPrint functionality in Synology...CVE-2024-393487.5 High
- synology router manager, router manager (srm) +1 moreIncorrect default permissions vulnerability in firewall functionality in Synology Router Manager ...CVE-2024-393475.9 Medium
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding incorrect authorization is found in the firmware upgrade functionality....CVE-2024-393524.9 Medium
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding improper neutralization of special elements used in an OS command ('OS...CVE-2024-393517.2 High
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow')...CVE-2024-393499.8 Critical
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding improper limitation of a pathname to a restricted directory ('Path...CVE-2023-478035.3 Medium
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding improper neutralization of special elements used in an OS command ('OS...CVE-2023-478027.2 High
- synology bc500, camera firmware, tc500 +2 more +4 moreA vulnerability regarding buffer copy without checking the size of input ('Classic Buffer...CVE-2024-54636.5 Medium
- synology surveillance stationMissing authorization vulnerability in System webapi component in Synology Surveillance Station...CVE-2024-292419.9 Critical
- synology surveillance stationMissing authorization vulnerability in LayoutSave webapi component in Synology Surveillance...CVE-2024-292404.3 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2024-292395.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2024-292385.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2024-292375.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2024-292365.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2024-292355.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2024-292345.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2024-292335.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2024-292325.4 Medium
- synology surveillance stationImproper validation of array index vulnerability in UserPrivilege.Enum webapi component in...CVE-2024-292315.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2024-292305.4 Medium
- synology surveillance stationMissing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance...CVE-2024-292297.7 High
- synology surveillance stationMissing authorization vulnerability in GetStmUrlPath webapi component in Synology Surveillance...CVE-2024-292287.7 High
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2024-292275.4 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreURL redirection to untrusted site ('Open Redirect') vulnerability in file access component in...CVE-2024-08545.4 Medium
- bosch camera firmware, cpp13 firmware, cpp14 firmware +4 more +6 moreAn information disclosure vulnerability was discovered in Bosch IP camera devices allowing an...CVE-2022-416775.3 Medium
- bosch camera firmware, cpp13 firmware, cpp14 firmware +2 moreA command injection vulnerability exists in Bosch IP cameras that allows an authenticated user...CVE-2023-395097.2 High
- synology ssl vpn clientBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi...CVE-2023-57483.3 Low
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding use of externally-controlled format string is found in the cgi...CVE-2023-57469.8 Critical
- synology router manager, router manager (srm) +1 moreExposure of sensitive information to an unauthorized actor vulnerability in cgi component in...CVE-2023-417415.3 Medium
- synology router manager, router manager (srm) +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2023-417405.3 Medium
- synology router manager, router manager (srm) +1 moreUncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager ...CVE-2023-417394.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2023-417387.2 High
- bosch camera firmware, cpp13 firmware, cpp14 firmware +2 moreDue to an error in the software interface to the secure element chip on Bosch IP cameras of...CVE-2023-322294.9 Medium
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +3 more +5 moreUse of insufficiently random values vulnerability in User Management Functionality in Synology...CVE-2023-27295.9 Medium
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +3 more +5 moreUncontrolled search path element vulnerability in Backup Management Functionality in Synology...CVE-2023-01426.5 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2023-329569.8 Critical
- synology router manager, router manager (srm) +1 moreImproper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2023-329558.1 High
- synology router manager, router manager (srm) +1 moreInteger overflow or wraparound vulnerability in CGI component in Synology Router Manager (SRM)...CVE-2023-00776.5 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of special elements in output used by a downstream component ('Injection'...CVE-2022-439327.5 High
- synology vpn plus serverOut-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server...CVE-2022-43931EPSS 16.8%10.0 Critical
- synology presto file serverImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2022-437485.8 Medium
- synology presto file serverImproper privilege management vulnerability in summary report management in Synology Presto File...CVE-2022-437494.3 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreServer-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology...CVE-2022-276224.1 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreMissing authentication for critical function vulnerability in iSCSI management functionality in...CVE-2022-276237.4 High
- synology diskstation manager (dsm), diskstation manager +1 moreA vulnerability regarding out-of-bounds read is found in the session processing functionality of...CVE-2022-35765.3 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreA vulnerability regarding improper restriction of operations within the bounds of a memory buffer...CVE-2022-2762410.0 Critical
- synology diskstation manager (dsm), diskstation manager +1 moreA vulnerability regarding improper restriction of operations within the bounds of a memory buffer...CVE-2022-2762510.0 Critical
- Show moreLoading…