Advisories · Technology

Synology DiskStation Manager (DSM).

Every CVE that names Synology DiskStation Manager (DSM) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-26565 CVE record

CVSS 8.3 High

Cleartext transmission of sensitive information in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Weak cryptography or TLS
Not analysed yet 26 Feb 2021
CVE-2021-26564 CVE record

CVSS 8.3 High

Cleartext transmission of sensitive information in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Weak cryptography or TLS
Not analysed yet 26 Feb 2021
CVE-2021-26563 CVE record

CVSS 8.2 High

Incorrect authorization in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Broken access control
Not analysed yet 26 Feb 2021
CVE-2021-26562 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Out-of-bounds write in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Memory corruption
Not analysed yet 26 Feb 2021
CVE-2021-26561 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Stack-based buffer overflow in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Memory corruption
Not analysed yet 26 Feb 2021
CVE-2021-26560 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Cleartext transmission of sensitive information in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Weak cryptography or TLS
Not analysed yet 26 Feb 2021
CVE-2020-27656 CVE record

CVSS 6.5 Medium

Cleartext transmission of sensitive information in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Weak cryptography or TLS
Not analysed yet 29 Oct 2020
CVE-2020-27652 CVE record

CVSS 8.3 High

Broken or risky cryptographic algorithm in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Weak cryptography or TLS
Not analysed yet 29 Oct 2020
CVE-2020-27650 CVE record

CVSS 5.8 Medium

Synology DiskStation Manager (DSM): Synology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for…
- Synology DiskStation Manager (DSM)
- CWE-614
Not analysed yet 29 Oct 2020
CVE-2020-27648 CVE record

CVSS 8.3 High

Improper certificate validation in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Weak cryptography or TLS
Not analysed yet 29 Oct 2020
CVE-2018-13293 CVE record

CVSS 5.9 Medium

Cross-site scripting in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2019
CVE-2018-13291 CVE record

CVSS 4.3 Medium

Information disclosure in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Information disclosure
Not analysed yet 1 Apr 2019
CVE-2018-13286 CVE record

CVSS 6.5 Medium

Incorrect default permissions in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Broken access control
Not analysed yet 1 Apr 2019
CVE-2018-13284 CVE record

CVSS 7.5 High

OS command injection in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Command injection
Not analysed yet 1 Apr 2019
CVE-2017-16774 CVE record

CVSS 6.5 Medium

Cross-site scripting in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2019
CVE-2018-8920 CVE record

CVSS 5.9 Medium

Improper output encoding in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- CWE-116
Not analysed yet 24 Dec 2018
CVE-2018-8919 CVE record

CVSS 8.3 High

Information disclosure in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Information disclosure
Not analysed yet 24 Dec 2018
CVE-2018-8917 CVE record

CVSS 6.5 Medium

Cross-site scripting in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Cross-site scripting (XSS)
Not analysed yet 24 Dec 2018
CVE-2018-13281 CVE record

CVSS 4.3 Medium

Information disclosure in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Information disclosure
Not analysed yet 31 Oct 2018
CVE-2018-13280 CVE record

CVSS 7.4 High

Insufficiently random values in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Weak cryptography or TLS
Not analysed yet 30 Jul 2018
CVE-2018-8916 CVE record

CVSS 6.3 Medium

Synology DiskStation Manager (DSM): Unverified password change vulnerability in Change Password in Synology DiskStation…
- Synology DiskStation Manager (DSM)
- CWE-620
Not analysed yet 8 Jun 2018
CVE-2017-12075 CVE record

CVSS 7.2 High

Command injection in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Command injection
Not analysed yet 8 Jun 2018
CVE-2017-16766 CVE record

Improper access control in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Broken access control
Not analysed yet 22 Dec 2017
CVE-2017-15894 CVE record

Path traversal in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Path traversal
Not analysed yet 8 Dec 2017
CVE-2017-15889 CVE record

Command injection in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- Command injection
Not analysed yet 4 Dec 2017