404 matches found
CVE-2017-12076
CVE-2017-12076 affects Synology DiskStation Manager (DSM) prior to 6.1.1-15088, specifically SYNO.Core.PortForwarding.Rules. The vulnerability allows a remote authenticated attacker to cause uncontrolled resource consumption by exhausting memory, resulting in a denial of service. Affects DSM depl...
Information disclosure
An information exposure vulnerability in forgetpasswd.cgi in Synology DiskStation Manager DSM before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors...
CVE-2017-9554
Synology DiskStation Manager (DSM) is affected by CVE-2017-9554 via the forget_passwd.cgi endpoint. The vulnerability is an information exposure that allows remote attackers to enumerate valid usernames. Affected firmware versions are DSM prior to 6.1.3-15152. The root cause is information leakag...
CVE-2017-9554
An information exposure vulnerability in forgetpasswd.cgi in Synology DiskStation Manager DSM before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors. Recent assessments: h00die at May 21, 2020 2:01pm UTC reported: Vulnerability is trivial to exploit. Send ...
CVE-2016-10330
Directory traversal vulnerability in synophotodsmuser, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local users to write to arbitrary files via unspecified vectors...
CVE-2016-2406
The permission control module in Huawei Document Security Management aka DSM before V100R002C05SPC670 allows remote authenticated users to obtain sensitive information from encrypted documents by leveraging incorrect control of permissions on the PrintScreen button...
CVE-2016-2406
The CVE-2016-2406 issue affects Huawei Document Security Management (DSM) prior to V100R002C05SPC670. The vulnerability is in the permission control module, where incorrect control of permissions on the PrintScreen button allows remote authenticated users to obtain sensitive information from encr...
CVE-2016-2406
The permission control module in Huawei Document Security Management aka DSM before V100R002C05SPC670 allows remote authenticated users to obtain sensitive information from encrypted documents by leveraging incorrect control of permissions on the PrintScreen button...
Synology DiskStation Manager (DSM) Web Administration Interface Default Credentials
The web administration interface for the Synology DiskStation Manager DSM application running on the remote host uses a default blank password for the administrator account. A remote attacker can exploit this to gain administrative access to the web interface. C Tenable Network Security, Inc...
Synology NAS DSM 5.2 远程代码执行漏洞
Getting started I recently bought a Synology DS416 NAS and noticed during the set-up process you are first required to download the device firmware, which is then flashed to the device via the setup web interface. Interested in my new devices security, I decided to take a look at the firmware whi...
CVE-2015-8303
Huawei Document Security Management DSM with software before V100R002C05SPC661 does not clear the clipboard when closing a secure file, which allows local users to obtain sensitive information by pasting the contents to another file...
Design/Logic Flaw
Huawei Document Security Management DSM with software before V100R002C05SPC661 does not clear the clipboard when closing a secure file, which allows local users to obtain sensitive information by pasting the contents to another file...
CVE-2015-8303
Huawei Document Security Management (DSM) prior to V100R002C05SPC661 fails to clear the clipboard after closing a secure file, enabling local users to paste sensitive data into another file. Multiple sources (NVD/CNVD/CVE records, Huawei PSIRT advisory HWPSIRT-2015-09009) describe this local info...
Security Advisory - Information Leak Vulnerability in Huawei DSM Product
There is a information leak vulnerability in DSM Product. The DSM does not clear the clipboard after data in a secure file opened using the DSM is copied and the secure file is closed. Data in the clipboard can be copied in common documents that do not use the DSM, leading to information leaks...
Cross site scripting
Cross-site scripting XSS vulnerability in Synology DiskStation Manager DSM before 5.2-5565 Update 1 allows remote attackers to inject arbitrary web script or HTML via the "compound" parameter to entry.cgi...
CVE-2015-4655
Affected product and component: Synology DiskStation Manager (DSM) prior to 5.2-5565 Update 1, specifically the entry.cgi endpoint. Vulnerability and root cause: Cross-site scripting (XSS) vulnerability where an attacker can inject arbitrary web script or HTML via the cookie-like parameter named ...
[SYSS-2014-007] FrontRange DSM - Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2014-007 Product: FrontRange DSM Vendor: FrontRange Solutions USA Inc. and/or its affiliates Affected Versions: v7.2.1.2020, v7.2.2.2331 Tested Versions: v7.2.1.2020, v7.2.2.2331 Vulnerability Type: Use of Hard-coded Cryptographic...
CVE-2015-2809
Summary: Multiple connected advisories confirm a vulnerability related to the Avahi daemon (unrelated to DSM CVE-2015-2809) where Avahi through 0.6.x/0.7.x replies to IPv6 unicast queries with non on-link source addresses, enabling remote DoS (traffic amplification) and potentially information le...
CVE-2012-1556
CVE-2012-1556 is a reflected XSS vulnerability in Synology Photo Station 5 on DSM 3.2-1955, where input in the name parameter to photo/photo_one.php is not properly sanitized. The root cause is improper verification of the name input, enabling remote attackers to inject arbitrary scripts. Impacts...