Synology DiskStation Manager Improper Neutralization of Special Elements used in a Command (CVE-2017-12075)

Command injection vulnerability in EZ-Internet in Synology DiskStation Manager DSM before 6.2-23739 allows remote authenticated users to execute arbitrary command via the username parameter. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Synology Router Manager (SRM) 1.1.x Command Injection Vulnerability (Synology-SA-17:79)

Synology Router Manager SRM is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Synology DiskStation Manager Command Injection Vulnerability (CNVD-2018-11370)

Synology DiskStation Manager DSM is a set of operating systems for use on networked storage servers NAS from Synology Inc. The operating system can manage information such as data, files, photos, music, etc. EZ-Internet is one of the network configuration tools. A command injection vulnerability...

Synology Router Manager Command Injection Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology.EZ-Internet is one of the network configuration tools. A command injection vulnerability exists in EZ-Internet in Synology SRM versions prior to 1.1.6-6931. A remote attacker can exploit the...

Command injection

Command injection vulnerability in EZ-Internet in Synology DiskStation Manager DSM before 6.2-23739 allows remote authenticated users to execute arbitrary command via the username parameter...

Command injection

Command injection vulnerability in EZ-Internet in Synology Router Manager SRM before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter...

CVE-2017-12075

Command injection vulnerability in EZ-Internet in Synology DiskStation Manager DSM before 6.2-23739 allows remote authenticated users to execute arbitrary command via the username parameter...

CVE-2017-12078

Command injection vulnerability in EZ-Internet in Synology Router Manager SRM before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter...