410 matches found
CVE-2023-28550
Memory corruption in MPP performance while accessing DSM watermark using external memory address...
Memory corruption
Memory corruption in MPP performance while accessing DSM watermark using external memory address...
CVE-2023-28550
CVE-2023-28550 affects Qualcomm chipsets, describing memory corruption in MPP performance when accessing the DSM watermark via an external memory address. The vulnerability is tied to improper memory bounds handling within the MPP component, leading to potential high-severity impact (as indicated...
CVE-2023-28550 Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance
Memory corruption in MPP performance while accessing DSM watermark using external memory address...
PT-2023-21798 · Qualcomm · Qualcomm Chipsets
Name of the Vulnerable Software and Affected Versions: Qualcomm Chipsets affected versions not specified Description: The issue is related to memory corruption in MPP performance while accessing the DSM watermark using an external memory address. Recommendations: At the moment, there is no...
Malicious code in z-dsm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e2e8df0358f7f04a5b41981e5e7496d99d985f9e76087b0e3a233566f9ddfd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8393 Malicious code in z-dsm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e2e8df0358f7f04a5b41981e5e7496d99d985f9e76087b0e3a233566f9ddfd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Synology DiskStation Manager (DSM) < 3.1 Information Disclosure Vulnerability (Feb 2015)
Synology DiskStation Manager DSM is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
New Admin Takeover Vulnerability Exposed in Synology's DiskStation Manager
A medium-severity flaw has been discovered in Synology's DiskStation Manager DSM that could be exploited to decipher an administrator's password and remotely hijack the account. "Under some rare conditions, an attacker could leak enough information to restore the seed of the pseudorandom number...
CVE-2023-24847
Transient DOS in Modem while allocating DSM items...
CVE-2023-24847 NULL pointer Dereference in Modem
Transient DOS in Modem while allocating DSM items...
CVE-2023-24847 NULL pointer Dereference in Modem
Transient DOS in Modem while allocating DSM items...
CVE-2023-24847
CVE-2023-24847 describes a transient DoS in the modem when allocating DSM items. The core issue is a crash/hang in the modem component (Qualcomm closed‑source components) leading to denial of service with a CVSSv3.1 base score of 7.5 (Network, low attack complexity, no user interaction). Affected...
CVE-2023-28129
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user...
CVE-2023-28129
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user...
Design/Logic Flaw
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user...
CVE-2023-28129
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user...
CVE-2023-28129
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user...
CVE-2023-28129
Ivanti DSM (Desktop and Server Management) 2022.2 SU2 and earlier versions are affected by CVE-2023-28129, where a local low-privileged user can execute arbitrary OS commands as the DSM installation user. The issue originates from DSM’s handling of installation-user privileges, enabling privilege...
CVE-2023-2729
Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager DSM before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors...