Browse CVEs

HIGH 7.5 CVE-2015-6911 SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL commands via the id parameter … Video Station after 1.5-0757 Fix from $1,9502015-09-11 HIGH 7.5 CVE-2015-6910 SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL commands via the id parameter … Video Station after 1.5-0754 Fix from $1,9502015-09-11 MEDIUM 6.8 CVE-2015-2851 client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary f… Cloud Station Mitigation only Fix from $1,6002015-05-30 MEDIUM 5.0 CVE-2015-2809 The Multicast DNS (mDNS) responder in Synology DiskStation Manager (DSM) before 3.1 inadvertently responds to unicast queries with source addresses t… Diskstation Manager after 3.0 Fix from $1,6002015-04-01 MEDIUM 5.4 CVE-2014-6868 The DS audio (aka com.synology.DSaudio) application 3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-midd… Ds Audio Mitigation only Fix from $1,6002014-10-02 MEDIUM 5.4 CVE-2014-6848 The DS file (aka com.synology.DSfile) application 4.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-midd… Ds File Mitigation only Fix from $1,6002014-09-30 MEDIUM 5.4 CVE-2014-6836 The DS photo+ (aka com.synology.dsphoto) application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mid… Ds Photo\+ Mitigation only Fix from $1,6002014-09-30 HIGH 7.8 CVE-2014-2264 The OpenVPN module in Synology DiskStation Manager (DSM) 4.3-3810 update 1 has a hardcoded root password of synopass, which makes it easier for remot… Diskstation Manager Mitigation only Fix from $1,9502014-03-02 HIGH 10.0 CVE-2013-6955EPSS 85% webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remo… Diskstation Manager Mitigation only Fix from $1,9502014-01-09 HIGH 7.5 CVE-2013-6987EPSS 15% Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager (DSM) before 4.3-3810 Update 3 allow remot… Diskstation Manager No fix yet Fix from $1,9502013-12-31