Lucene search
+L

385 matches found

CNNVD
CNNVD
added 2024/12/09 12:00 a.m.12 views

Synology Router Manager 跨站脚本漏洞

Synology Router ManagerSRM is a ChinaSRM etc are all products of China's SynologySynology.Synology Router Manager is a software used to configure and manage Synology routers.WebSockets ws etc are all WebSockets WebSockets ws is a Node.js WebSocket library. tanStack form and others are TanStack op...

5.9CVSS5.5AI score0.00271EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.13 views

Synology Router Manager 安全漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A security vulnerability exists in Synology Router Manager versions prior to 1.3.1-9346-10, which stems from improper input neutralization in the WiFi Connect setup feature, and is...

5.9CVSS5.5AI score0.00271EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.12 views

Synology Router Manager 安全漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A security vulnerability exists in Synology Router Manager versions prior to 1.3.1-9346-10, which stems from improper input neutralization in the DDNS logging feature, which is...

5.9CVSS5.7AI score0.00271EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/04 7:15 a.m.23 views

CVE-2024-11398

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in OTP reset functionality in Synology Router Manager SRM before 1.3.1-9346-9 allows remote authenticated users to delete arbitrary files via unspecified vectors...

8.1CVSS0.00645EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/04 7:15 a.m.13 views

CVE-2024-11398

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in OTP reset functionality in Synology Router Manager SRM before 1.3.1-9346-9 allows remote authenticated users to delete arbitrary files via unspecified vectors...

8.1CVSS5.9AI score0.00645EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/04 6:59 a.m.35 views

CVE-2024-11398

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in OTP reset functionality in Synology Router Manager SRM before 1.3.1-9346-9 allows remote authenticated users to delete arbitrary files via unspecified vectors...

8.1CVSS0.00645EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/04 6:59 a.m.14 views

CVE-2024-11398

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in OTP reset functionality in Synology Router Manager SRM before 1.3.1-9346-9 allows remote authenticated users to delete arbitrary files via unspecified vectors...

8.1CVSS6.7AI score0.00645EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/04 6:59 a.m.79 views

CVE-2024-11398

CVE-2024-11398 affects Synology Router Manager (SRM) prior to version 1.3.1-9346-9, via an improper limitation of a pathname in the OTP reset functionality (path traversal). The vulnerability could allow remote authenticated users to delete arbitrary files through unspecified vectors. Documented ...

8.1CVSS6.7AI score0.00645EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/12/04 12:00 a.m.14 views

Synology Router Manager 路径遍历漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology Inc. A path traversal vulnerability exists in Synology Router Manager SRM versions prior to 1.3.1-9346-9, which stems from improperly restricting path names. An attacker could exploit...

8.1CVSS6.6AI score0.00645EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/10/18 12:00 a.m.17 views

Synology Router Manager (SRM) 1.3.x Multiple Vulnerabilities (Synology-SA-24:16) - Unreliable Remote Version Check

Synology Router Manager SRM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.2CVSS5.8AI score0.01148EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/10/18 12:00 a.m.16 views

Synology Router Manager (SRM) 1.3.x Multiple Vulnerabilities (Synology-SA-24:16) - Remote Known Vulnerable Versions Check

Synology Router Manager SRM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.2CVSS5.8AI score0.01148EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/09/23 12:00 a.m.112 views

Synology Router Manager (SRM) 1.3.x Multiple Vulnerabilities (Synology-SA-24:09) - Remote Known Vulnerable Versions Check

Synology Router Manager SRM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.9CVSS6.3AI score0.00271EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/09 12:00 a.m.15 views

PT-2024-9672 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.3.1-9346-10 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, in the WiFi Connect Setting functionality. This...

6.5CVSS5.8AI score0.00271EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/09/09 12:00 a.m.11 views

PT-2024-9667 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager versions prior to 1.3.1-9346-10 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting attacks. Remote authenticated users with...

6.5CVSS5.7AI score0.00271EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/09/09 12:00 a.m.12 views

PT-2024-9665 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.3.1-9346-10 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting attacks. Remote authenticated users with...

6.5CVSS5.7AI score0.00271EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/09/09 12:00 a.m.11 views

PT-2024-9671 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.3.1-9346-10 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows remote authenticated users with...

6.5CVSS5.7AI score0.00271EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/09/09 12:00 a.m.12 views

PT-2024-9674 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager versions prior to 1.3.1-9346-10 Description: The issue is related to the DDNS Record component of Synology Router Manager, where improper neutralization of input during web page generation allows for Cross-site Scripti...

6.5CVSS6AI score0.00271EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/09/09 12:00 a.m.11 views

PT-2024-9668 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager versions prior to 1.3.1-9346-10 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS, in the Network WOL functionality. This could all...

6.5CVSS6.2AI score0.00271EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/09/09 12:00 a.m.11 views

PT-2024-9670 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager versions prior to 1.3.1-9346-10 Description: The issue is related to the WiFi Connect MAC Filter component of the Synology Router Manager, which fails to properly neutralize input during web page generation, leading to...

6.5CVSS5.8AI score0.00271EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2024/07/05 12:00 a.m.17 views

The vulnerability of AirPrint’s interface on the operating system for managing Synology Router Manager network devices allows a hacker to execute arbitrary code.

The vulnerability of AirPrint’s functionality in the operating system for managing network devices with Synology Router Manager is related to the loading of code without checking its integrity. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.6CVSS5.9AI score0.00266EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder