Overview 352 matches · 0 in Waratek scope · 0 protected · 7 exploited · 2 CISA KEV · 21 public PoC · 14 EPSS ≥ 0.5
352matches
0in Waratek scope0.0%
0protected0.0%
7exploited2.0%
2CISA KEV0.6%
21public PoC6.0%
14EPSS ≥ 0.54.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
13
3.7%
Not applicable
339
96.3%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
352
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 49 / year
20102
Not applicable2
Medium1
Low1
not blocked2
No public exploit2
20110
20120
20131
Not applicable1
High1
not blocked1
Working exploit published1
20146
Not applicable6
High2
Medium4
not blocked6
Working exploit published2
No public exploit4
20159
Not applicable9
High3
Medium6
not blocked9
Working exploit published2
No public exploit7
20160
201749
Not applicable49
Critical6
High17
Medium26
not blocked49
Exploited1
Working exploit published7
No public exploit41
201837
Outside Waratek scope4
Not applicable33
Critical4
High13
Medium20
not blocked37
Exploited1
Working exploit published2
No public exploit34
201940
Outside Waratek scope6
Not applicable34
Critical2
High16
Medium21
Low1
not blocked40
Exploited1
Forecast only5
No public exploit34
202022
Outside Waratek scope2
Not applicable20
Critical6
High10
Medium6
not blocked22
Exploited1
No public exploit21
202135
Outside Waratek scope1
Not applicable34
Critical14
High18
Medium3
not blocked35
Exploited1
No public exploit34
202236
Not applicable36
Critical11
High16
Medium9
not blocked36
Exploited1
No public exploit35
202313
Not applicable13
Critical4
High6
Medium3
not blocked13
No public exploit13
202447
Not applicable47
Critical3
High10
Medium34
not blocked47
Working exploit published1
No public exploit46
202528
Not applicable28
Critical4
High11
Medium12
Low1
not blocked28
Exploited1
Proof of concept only1
No public exploit26
202627
Not applicable27
Critical2
High8
Medium14
Low3
not blocked27
No public exploit27
201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2024-29227 | Medium | 2024-03-28 | Not applicable | No public exploit | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Layout.LayoutSave webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. |
| CVE-2024-0854 | Medium | 2024-01-24 | Not applicable | No public exploit | URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7, 7.1.1-42962-7 and 7.2.1-69057-2 allows remote authenticated users to conduct phishing attacks via unspecified vectors. |
| CVE-2023-5748 | Medium | 2023-11-07 | Not applicable | No public exploit | Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology SSL VPN Client before 1.4.7-0687 allows local users to conduct denial-of-service attacks via unspecified vectors. |
| CVE-2023-5746 | Critical | 2023-10-25 | Not applicable | No public exploit | A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.5-0185 may be affected: BC500 and TC500. |
| CVE-2023-41741 | High | 2023-08-31 | Not applicable | No public exploit | Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote attackers to obtain sensitive information via unspecified vectors. |
| CVE-2023-41740 | Medium | 2023-08-31 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote attackers to read specific files via unspecified vectors. |
| CVE-2023-41739 | Medium | 2023-08-31 | Not applicable | No public exploit | Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated users to conduct denial-of-service attacks via unspecified vectors. |
| CVE-2023-41738 | High | 2023-08-31 | Not applicable | No public exploit | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Directory Domain Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated users to execute arbitrary commands via unspecified vectors. |
| CVE-2023-2729 | High | 2023-06-13 | Not applicable | No public exploit | Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors. |
| CVE-2023-0142 | High | 2023-06-13 | Not applicable | No public exploit | Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors. |
| CVE-2023-32956 | Critical | 2023-05-16 | Not applicable | No public exploit | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to execute arbitrary code via unspecified vectors. |
| CVE-2023-32955 | High | 2023-05-16 | Not applicable | No public exploit | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DHCP Client Functionality in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows man-in-the-middle attackers to execute arbitrary commands via unspecified vectors. |
| CVE-2023-0077 | Critical | 2023-01-05 | Not applicable | No public exploit | Integer overflow or wraparound vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to overflow buffers via unspecified vectors. |
| CVE-2022-43932 | High | 2023-01-05 | Not applicable | No public exploit | Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to read arbitrary files via unspecified vectors. |
| CVE-2022-43931 | Critical | 2023-01-03 | Not applicable | No public exploit | Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4.4-0635 allows remote attackers to execute arbitrary commands via unspecified vectors. |
| CVE-2022-43749 | High | 2022-10-26 | Not applicable | No public exploit | Improper privilege management vulnerability in summary report management in Synology Presto File Server before 2.1.2-1601 allows remote authenticated users to bypass security constraint via unspecified vectors. |
| CVE-2022-43748 | High | 2022-10-26 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation management in Synology Presto File Server before 2.1.2-1601 allows remote attackers to write arbitrary files via unspecified vectors. |
| CVE-2022-27623 | Critical | 2022-10-25 | Not applicable | No public exploit | Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote attackers to read or write arbitrary files via unspecified vectors. |
| CVE-2022-27622 | Medium | 2022-10-25 | Not applicable | No public exploit | Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to access intranet resources via unspecified vectors. |
| CVE-2022-3576 | High | 2022-10-20 | Not applicable | No public exploit | A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to obtain sensitive information via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500. |
| CVE-2022-27626 | Critical | 2022-10-20 | Not applicable | No public exploit | A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500. |
| CVE-2022-27625 | Critical | 2022-10-20 | Not applicable | No public exploit | A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the message processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500. |
| CVE-2022-27624 | Critical | 2022-10-20 | Not applicable | No public exploit | A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the packet decryption functionality of Out-of-Band (OOB) Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500. |
| CVE-2022-27621 | Medium | 2022-08-03 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology USB Copy before 2.2.0-1086 allows remote authenticated users to read or write arbitrary files via unspecified vectors. |
| CVE-2022-27620 | Medium | 2022-08-03 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology SSO Server before 2.2.3-0331 allows remote authenticated users to read arbitrary files via unspecified vectors. |
| CVE-2022-27619 | Medium | 2022-08-03 | Not applicable | No public exploit | Cleartext transmission of sensitive information vulnerability in authentication management in Synology Note Station Client before 2.2.2-609 allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors. |
| CVE-2022-27618 | Medium | 2022-08-03 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Storage Analyzer before 2.1.0-0390 allows remote authenticated users to delete arbitrary files via unspecified vectors. |
| CVE-2022-27617 | Medium | 2022-08-03 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote authenticated users to download arbitrary files via unspecified vectors. |
| CVE-2022-27616 | High | 2022-08-03 | Not applicable | No public exploit | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 7.0.1-42218-3 allows remote authenticated users to execute arbitrary commands via unspecified vectors. |
| CVE-2022-27615 | High | 2022-07-28 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology DNS Server before 2.2.2-5027 allows remote authenticated users to delete arbitrary files via unspecified vectors. |
| CVE-2022-27614 | High | 2022-07-28 | Not applicable | No public exploit | Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before 1.8.1-2876 allows remote attackers to obtain sensitive information via unspecified vectors. |
| CVE-2022-27613 | High | 2022-07-28 | Not applicable | No public exploit | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in webapi component in Synology CardDAV Server before 6.0.10-0153 allows remote authenticated users to inject SQL commands via unspecified vectors. |
| CVE-2022-27612 | Critical | 2022-07-28 | Not applicable | No public exploit | Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio Station before 6.5.4-3367 allows remote attackers to execute arbitrary commands via unspecified vectors. |
| CVE-2022-27611 | High | 2022-07-28 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Audio Station before 6.5.4-3367 allows remote authenticated users to delete arbitrary files via unspecified vectors. |
| CVE-2022-22685 | High | 2022-07-28 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology WebDAV Server before 2.4.0-0062 allows remote authenticated users to delete arbitrary files via unspecified vectors. |
| CVE-2022-22684 | High | 2022-07-28 | Not applicable | No public exploit | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in task management component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows remote authenticated users to execute arbitrary commands via unspecified vectors. |
| CVE-2022-22683 | Critical | 2022-07-28 | Not applicable | No public exploit | Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary code via unspecified vectors. |
| CVE-2022-27610 | High | 2022-07-27 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25423 allows remote authenticated users to delete arbitrary files via unspecified vectors. |
| CVE-2022-22686 | High | 2022-07-26 | Not applicable | No public exploit | Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote authenticated users to hijack the authentication of administrators via unspecified vectors. |
| CVE-2022-22682 | Medium | 2022-07-12 | Not applicable | No public exploit | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Event Management in Synology Calendar before 2.4.5-10930 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2022-22681 | High | 2022-07-06 | Not applicable | No public exploit | Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors. |
| CVE-2022-22688 | High | 2022-03-25 | Not applicable | No public exploit | Improper neutralization of special elements used in a command ('Command Injection') vulnerability in File service functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-2 allows remote authenticated users to execute arbitrary commands via unspecified vectors. |
| CVE-2022-22687 | Critical | 2022-03-25 | Not applicable | No public exploit | Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors. |
| CVE-2021-44142 | High | 2022-02-21 | Not applicable | Exploited | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root. |
| CVE-2022-22680 | High | 2022-02-07 | Not applicable | No public exploit | Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to obtain sensitive information via unspecified vectors. |
| CVE-2022-22679 | Medium | 2022-02-07 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service management in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote authenticated users to write arbitrary files via unspecified vectors. |
| CVE-2021-43929 | Medium | 2022-02-07 | Not applicable | No public exploit | Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in work flow management in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2021-43928 | Critical | 2022-02-07 | Not applicable | No public exploit | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sending and receiving component in Synology Mail Station before 20211105-10315 allows remote authenticated users to execute arbitrary commands via unspecified vectors. |
| CVE-2021-43927 | Critical | 2022-02-07 | Not applicable | No public exploit | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Security Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors. |
| CVE-2021-43926 | Critical | 2022-02-07 | Not applicable | No public exploit | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors. |
| CVE-2021-43925 | Critical | 2022-02-07 | Not applicable | No public exploit | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors. |
| CVE-2021-29087 | High | 2021-06-23 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to write arbitrary files via unspecified vectors. |
| CVE-2021-29086 | High | 2021-06-23 | Not applicable | No public exploit | Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to obtain sensitive information via unspecified vectors. |
| CVE-2021-29085 | High | 2021-06-23 | Not applicable | No public exploit | Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in file sharing management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors. |
| CVE-2021-29084 | High | 2021-06-23 | Not applicable | No public exploit | Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Security Advisor report management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors. |
| CVE-2021-27649 | Critical | 2021-06-23 | Not applicable | No public exploit | Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors. |
| CVE-2021-34812 | High | 2021-06-18 | Not applicable | No public exploit | Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensitive information via unspecified vectors. |
| CVE-2021-34811 | Medium | 2021-06-18 | Not applicable | No public exploit | Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors. |
| CVE-2021-34810 | Critical | 2021-06-18 | Not applicable | No public exploit | Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors. |
| CVE-2021-34809 | Critical | 2021-06-18 | Not applicable | No public exploit | Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors. |
| CVE-2021-34808 | Medium | 2021-06-18 | Not applicable | No public exploit | Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows remote attackers to access intranet resources via unspecified vectors. |
| CVE-2021-29091 | High | 2021-06-02 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors. |
| CVE-2021-29090 | High | 2021-06-02 | Not applicable | No public exploit | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary SQL command via unspecified vectors. |
| CVE-2021-29089 | Critical | 2021-06-02 | Not applicable | No public exploit | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo Station before 6.8.14-3500 allows remote attackers users to execute arbitrary SQL commands via unspecified vectors. |
| CVE-2021-33184 | High | 2021-06-01 | Not applicable | No public exploit | Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors. |
| CVE-2021-33183 | High | 2021-06-01 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability container volume management component in Synology Docker before 18.09.0-0515 allows local users to read or write arbitrary files via unspecified vectors. |
| CVE-2021-33182 | Medium | 2021-06-01 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in PDF Viewer component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows remote authenticated users to read limited files via unspecified vectors. |
| CVE-2021-33181 | Critical | 2021-06-01 | Not applicable | No public exploit | Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows remote authenticated users to send arbitrary request to intranet resources via unspecified vectors. |
| CVE-2021-33180 | Critical | 2021-06-01 | Not applicable | No public exploit | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. |
| CVE-2021-29092 | High | 2021-06-01 | Not applicable | No public exploit | Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary code via unspecified vectors. |
| CVE-2021-29088 | High | 2021-06-01 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors. |
| CVE-2021-31439 | High | 2021-05-21 | Not applicable | No public exploit | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager. Authentication is not required to exploit this vulnerablity. The specific flaw exists within the processing of DSI structures in Netatalk. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12326. |
| CVE-2021-27648 | Critical | 2021-04-28 | Not applicable | No public exploit | Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors. |
| CVE-2021-29083 | High | 2021-04-01 | Not applicable | No public exploit | Improper neutralization of special elements used in an OS command in SYNO.Core.Network.PPPoE in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote authenticated users to execute arbitrary code via realname parameter. |
| CVE-2021-27647 | Critical | 2021-03-12 | Not applicable | No public exploit | Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests. |
| CVE-2021-27646 | Critical | 2021-03-12 | Not applicable | No public exploit | Use After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests. |
| CVE-2021-26569 | Critical | 2021-03-12 | Not applicable | No public exploit | Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests. |
| CVE-2021-26567 | High | 2021-02-26 | Not applicable | No public exploit | Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options. |
| CVE-2021-26566 | Critical | 2021-02-26 | Not applicable | No public exploit | Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary commands via inbound QuickConnect traffic. |
| CVE-2021-26565 | High | 2021-02-26 | Not applicable | No public exploit | Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain sensitive information via an HTTP session. |
| CVE-2021-26564 | High | 2021-02-26 | Not applicable | No public exploit | Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session. |
| CVE-2021-26563 | High | 2021-02-26 | Not applicable | No public exploit | Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors. |
| CVE-2021-26562 | Critical | 2021-02-26 | Not applicable | No public exploit | Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header. |
| CVE-2021-26561 | Critical | 2021-02-26 | Not applicable | No public exploit | Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header. |
| CVE-2021-26560 | Critical | 2021-02-26 | Not applicable | No public exploit | Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session. |
| CVE-2021-3156 | High | 2021-01-26 | Outside Waratek scope | Exploited | Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character. |
| CVE-2020-27660 | Critical | 2020-11-30 | Not applicable | No public exploit | SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute arbitrary SQL commands via the domain parameter. |
| CVE-2020-27659 | High | 2020-11-30 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) profile parameter. |
| CVE-2020-27658 | High | 2020-10-29 | Not applicable | No public exploit | Synology Router Manager (SRM) before 1.2.4-8081 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. |
| CVE-2020-27657 | Medium | 2020-10-29 | Not applicable | No public exploit | Cleartext transmission of sensitive information vulnerability in DDNS in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-middle attackers to eavesdrop authentication information of DNSExit via unspecified vectors. |
| CVE-2020-27656 | Medium | 2020-10-29 | Not applicable | No public exploit | Cleartext transmission of sensitive information vulnerability in DDNS in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to eavesdrop authentication information of DNSExit via unspecified vectors. |
| CVE-2020-27655 | Critical | 2020-10-29 | Not applicable | No public exploit | Improper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to access restricted resources via inbound QuickConnect traffic. |
| CVE-2020-27654 | Critical | 2020-10-29 | Not applicable | No public exploit | Improper access control vulnerability in lbd in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to execute arbitrary commands via port (1) 7786/tcp or (2) 7787/tcp. |
| CVE-2020-27653 | High | 2020-10-29 | Not applicable | No public exploit | Algorithm downgrade vulnerability in QuickConnect in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors. |
| CVE-2020-27652 | High | 2020-10-29 | Not applicable | No public exploit | Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors. |
| CVE-2020-27651 | High | 2020-10-29 | Not applicable | No public exploit | Synology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session. |
| CVE-2020-27650 | Medium | 2020-10-29 | Not applicable | No public exploit | Synology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session. |
| CVE-2020-27649 | Critical | 2020-10-29 | Not applicable | No public exploit | Improper certificate validation vulnerability in OpenVPN client in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. |
| CVE-2020-27648 | Critical | 2020-10-29 | Not applicable | No public exploit | Improper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. |
| CVE-2020-8623 | High | 2020-08-21 | Outside Waratek scope | No public exploit | In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the system must: * be running BIND that was built with "--enable-native-pkcs11" * be signing one or more zones with an RSA key * be able to receive queries from a possible attacker |