Synology Router Manager (SRM) 1.3.1-9346 Update 5
Approved changes feed: RSS · Atom
cpe:2.3:o:synology:router_manager:1.3.1-9346:update5:*:*:*:*:*:*
part: o version: 1.3.1-9346 update: update5
| Vendor | Synology (65464e9b-7339-559d-9719-837f074e0220) |
|---|---|
| Product | Router Manager (0abc53bc-fbdb-5072-9a27-ab0c4a782c0a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-29846 |
vulnerable | 2026-06-08 07:14:56.864882 |
Details available
HIGH (7.2)
A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.
Published: 2025-12-04T15:01:51.064Z
Updated: 2026-02-26T16:57:34.742Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29845 |
vulnerable | 2026-06-08 07:14:56.864162 |
Details available
MEDIUM (4.3)
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.
Published: 2025-12-04T15:01:23.275Z
Updated: 2025-12-04T20:01:39.166Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29844 |
vulnerable | 2026-06-08 07:14:56.863149 |
Details available
MEDIUM (4.3)
A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information.
Published: 2025-12-04T15:00:50.827Z
Updated: 2025-12-04T20:01:46.097Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29843 |
vulnerable | 2026-06-08 07:14:56.859951 |
Details available
MEDIUM (5.4)
A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files.
Published: 2025-12-04T15:00:14.201Z
Updated: 2025-12-04T20:01:53.069Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53288 |
vulnerable | 2026-06-08 06:54:14.943117 |
Details available
MEDIUM (5.9)
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in NTP Region functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via unspecified vectors.
Published: 2025-07-23T04:11:58.476Z
Updated: 2025-07-23T15:14:16.849Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53287 |
vulnerable | 2026-06-08 06:54:14.942031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53286 |
vulnerable | 2026-06-08 06:54:14.940928 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53285 |
vulnerable | 2026-06-08 06:54:14.921476 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53284 |
vulnerable | 2026-06-08 06:54:14.920371 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53283 |
vulnerable | 2026-06-08 06:54:14.919317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53282 |
vulnerable | 2026-06-08 06:54:14.918316 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53281 |
vulnerable | 2026-06-08 06:54:14.917033 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53280 |
vulnerable | 2026-06-08 06:54:14.913051 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53279 |
vulnerable | 2026-06-08 06:54:14.909378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39348 |
vulnerable | 2026-06-08 06:41:49.137004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39347 |
vulnerable | 2026-06-08 06:41:49.130755 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11398 |
vulnerable | 2026-06-08 06:23:49.575830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.