Vulnerability index

Browse CVEs

281 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Video Station HIGH 10.0
CVE-2015-6912EPSS 12%

Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitle_codepage …

Fix: after 1.5-0757
Fix from $1,950 2015-09-11
Video Station HIGH 7.5
CVE-2015-6911

SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL commands via the id parameter …

Fix: after 1.5-0757
Fix from $1,950 2015-09-11
Video Station HIGH 7.5
CVE-2015-6910

SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL commands via the id parameter …

Fix: after 1.5-0754
Fix from $1,950 2015-09-11
Cloud Station MEDIUM 6.8
CVE-2015-2851

client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary f…

Mitigation only
Fix from $1,600 2015-05-30
Diskstation Manager MEDIUM 5.0
CVE-2015-2809

The Multicast DNS (mDNS) responder in Synology DiskStation Manager (DSM) before 3.1 inadvertently responds to unicast queries with source addresses t…

Fix: after 3.0
Fix from $1,600 2015-04-01
Ds Audio MEDIUM 5.4
CVE-2014-6868

The DS audio (aka com.synology.DSaudio) application 3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-midd…

Mitigation only
Fix from $1,600 2014-10-02
Ds File MEDIUM 5.4
CVE-2014-6848

The DS file (aka com.synology.DSfile) application 4.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-midd…

Mitigation only
Fix from $1,600 2014-09-30
Ds Photo\+ MEDIUM 5.4
CVE-2014-6836

The DS photo+ (aka com.synology.dsphoto) application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mid…

Mitigation only
Fix from $1,600 2014-09-30
Diskstation Manager HIGH 7.8
CVE-2014-2264

The OpenVPN module in Synology DiskStation Manager (DSM) 4.3-3810 update 1 has a hardcoded root password of synopass, which makes it easier for remot…

Mitigation only
Fix from $1,950 2014-03-02
Diskstation Manager HIGH 10.0
CVE-2013-6955EPSS 85%

webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remo…

Mitigation only
Fix from $1,950 2014-01-09
Diskstation Manager HIGH 7.5
CVE-2013-6987EPSS 15%

Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager (DSM) before 4.3-3810 Update 3 allow remot…

No fix yet
Fix from $1,950 2013-12-31