718 matches found
CVE-2017-16766
CVE-2017-16766 concerns an improper access control vulnerability in the Synology DSM component synodsmnotify . The issue affects DSM versions prior to 6.1.4-15217 and prior to 6.0.3-8754-6, where local users can inject arbitrary web script or HTML via the -fn option. The root cause is inadequate ...
PT-2017-14548 · Synology · Synology Diskstation Manager
Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.1.4-15217 Synology DiskStation Manager DSM versions prior to 6.0.3-8754-6 Description: An improper access control issue in synodsmnotify allows local users to inject arbitrary web script or...
Directory traversal
Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager DSM 6.0.x before 6.0.3-8754-3 and before 5.2-5967-6 allows remote authenticated users to write arbitrary files via the destfolderpath parameter...
CVE-2017-15894
Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager DSM 6.0.x before 6.0.3-8754-3 and before 5.2-5967-6 allows remote authenticated users to write arbitrary files via the destfolderpath parameter...
CVE-2017-15894
Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager DSM 6.0.x before 6.0.3-8754-3 and before 5.2-5967-6 allows remote authenticated users to write arbitrary files via the destfolderpath parameter...
CVE-2017-15894
The CVE-2017-15894 entry affects Synology DiskStation Manager (DSM) via a directory traversal in the SYNO.FileStation.Extract component. Affected versions are DSM 6.0.x prior to 6.0.3-8754-3 and DSM 5.2-5967-6 and earlier. The vulnerability allows remote authenticated users to write arbitrary fil...
CVE-2017-15894
Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager DSM 6.0.x before 6.0.3-8754-3 and before 5.2-5967-6 allows remote authenticated users to write arbitrary files via the destfolderpath parameter...
PT-2017-14272 · Synology · Synology Diskstation Manager
Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions 6.0.x before 6.0.3-8754-3 Synology DiskStation Manager DSM versions 5.2-5967-6 and earlier Description: A directory traversal issue in the SYNO.FileStation.Extract component allows remote authenticate...
Synology DiskStation Manager Command Injection Vulnerability
Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology. The operating system manages information such as data, files, photos, music, and more. A command injection vulnerability exists in the smart.cgi file in Synology DSM versions prior to...
Command injection
Command injection vulnerability in smart.cgi in Synology DiskStation Manager DSM before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field...
CVE-2017-15889
Command injection vulnerability in smart.cgi in Synology DiskStation Manager DSM before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field...
CVE-2017-15889
CVE-2017-15889 is a command injection vulnerability in Synology DiskStation Manager (DSM) smart.cgi that affects DSM versions prior to 5.2-5967-5. An authenticated remote attacker can inject commands via the disk field, potentially executing arbitrary commands with root privileges. Public details...
CVE-2017-15889
Command injection vulnerability in smart.cgi in Synology DiskStation Manager DSM before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field...
CVE-2017-15889
Command injection vulnerability in smart.cgi in Synology DiskStation Manager DSM before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field. Recent assessments: h00die at May 20, 2020 12:19pm UTC reported: AUTHENTICATED command execution in...
PT-2017-14267 · Synology · Synology Diskstation Manager
Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 5.2-5967-5 Description: The issue allows remote authenticated users to execute arbitrary commands via the disk field in the smart.cgi script. This can be exploited by sending a malicious...
Synology DiskStation Manager (DSM) Denial of Service Vulnerability
DiskStation Manager DSM is an intuitive web-based operating system for every Synology NAS designed to help you manage digital assets in your home and office. A security vulnerability in SYNO.Core.PortForwarding.Rules in Synology DiskStation Manager DSM allows remote authenticated attackers to...
Synology DiskStation Manager (DSM) Encryption Mechanism Bypass Vulnerability
Synology DiskStation Manager is an operating system for use on networked storage servers NAS. A security vulnerability in Synology DiskStation Manager SYNO.API.Encryption allows remote attackers to bypass the encryption protection mechanism by submitting a special 'version' parameter request...
Synology DiskStation Manager (DSM) Information Disclosure Vulnerability
Synology DiskStation Manager is an operating system for use on networked storage servers NAS. A security vulnerability in Synology DiskStation Manager forgetpasswd.cgi allows remote attackers to submit a special request to enumerate valid usernames...
CVE-2017-9553
A design flaw in SYNO.API.Encryption in Synology DiskStation Manager DSM before 6.1.3-15152 allows remote attackers to bypass the encryption protection mechanism via the crafted version parameter...