Diskstation Manager@* Security Vulnerabilities and Issues — Diskstation Manager@* CVE List

Lucene search

SynologyDiskstation Manager*

5 matches found

CVE•added 2019/04/01 3:29 p.m.•48 views

CVE-2017-16774

Cross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager (DSM) before 6.1.4-15217-3 allows remote authenticated users to inject arbitrary web script or HTML via the package parameter.

6.5CVSS5.1AI score0.00282EPSS

CVE•added 2019/04/01 3:29 p.m.•47 views

CVE-2018-13284

Command injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to execute arbitrary OS commands via the (1) MKD or (2) RMD command.

9CVSS8.7AI score0.00663EPSS

CVE•added 2019/04/01 3:29 p.m.•43 views

CVE-2018-13293

Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to inject arbitrary web script or HTML via the URL parameter.

5.9CVSS5AI score0.0023EPSS

CVE•added 2019/04/01 3:29 p.m.•42 views

CVE-2018-13286

Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to obtain sensitive information via the world readable configuration.

6.5CVSS5.9AI score0.0027EPSS

CVE•added 2019/04/01 3:29 p.m.•34 views

CVE-2018-13291

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to obtain sensitive information via the world readable configuration.

4.3CVSS4.1AI score0.003EPSS