Approved changes feed: RSS · Atom

cpe:2.3:o:synology:diskstation_manager:6.2:*:*:*:*:*:*:*

part: o version: 6.2 update: *

VendorSynology (65464e9b-7339-559d-9719-837f074e0220)
ProductDiskstation Manager (db429775-8112-5c04-a3e0-3177c21cf9b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-47266 not_vulnerable 2026-06-08 06:48:11.695991 Details available
LOW (2.7)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in share file list functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users with administrator privileges to read specific files containing non-sensitive information via unspecified vectors.
Published: 2025-02-13T06:26:06.229Z
Updated: 2025-02-13T15:54:15.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47265 not_vulnerable 2026-06-08 06:48:11.695597 Details available
MEDIUM (6.5)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in encrypted share umount functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users to write specific files via unspecified vectors.
Published: 2025-02-13T06:25:55.487Z
Updated: 2025-09-16T13:44:48.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47264 not_vulnerable 2026-06-08 06:48:11.694216 Details available
MEDIUM (4.9)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in agent-related functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users with administrator privileges to delete arbitrary files via unspecified vectors.
Published: 2025-02-13T06:25:31.750Z
Updated: 2025-02-18T17:21:29.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29241 not_vulnerable 2026-06-08 06:33:29.067218 Details available
CRITICAL (9.9)
Missing authorization vulnerability in System webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain non-sensitive information, write sensitive configurations in DSM, and reboot or shutdown NAS via unspecified vectors.
Published: 2024-03-28T06:28:53.632Z
Updated: 2025-08-12T08:09:15.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29240 not_vulnerable 2026-06-08 06:33:29.066553 Details available
MEDIUM (4.3)
Missing authorization vulnerability in LayoutSave webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to conduct limited denial-of-service attacks via unspecified vectors.
Published: 2024-03-28T06:28:38.385Z
Updated: 2025-08-01T04:55:21.100Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29239 not_vulnerable 2026-06-08 06:33:29.065949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29238 not_vulnerable 2026-06-08 06:33:29.061722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29237 not_vulnerable 2026-06-08 06:33:29.061083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29236 not_vulnerable 2026-06-08 06:33:29.060443 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29235 not_vulnerable 2026-06-08 06:33:29.060036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29234 not_vulnerable 2026-06-08 06:33:29.059417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29233 not_vulnerable 2026-06-08 06:33:29.058710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29232 not_vulnerable 2026-06-08 06:33:29.058099 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29231 not_vulnerable 2026-06-08 06:33:29.057679 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29230 not_vulnerable 2026-06-08 06:33:29.057146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29229 not_vulnerable 2026-06-08 06:33:29.056730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29228 not_vulnerable 2026-06-08 06:33:29.056082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29227 not_vulnerable 2026-06-08 06:33:29.053895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10442 not_vulnerable 2026-06-08 06:23:46.581477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52944 not_vulnerable 2026-06-08 06:17:55.973321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52943 not_vulnerable 2026-06-08 06:17:55.970449 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27621 not_vulnerable 2026-06-08 05:42:42.503530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27620 not_vulnerable 2026-06-08 05:42:42.495712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27618 not_vulnerable 2026-06-08 05:42:42.491308 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27617 not_vulnerable 2026-06-08 05:42:42.486482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27614 not_vulnerable 2026-06-08 05:42:42.481483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22683 not_vulnerable 2026-06-08 05:40:54.893856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3156 vulnerable 2026-06-08 05:33:50.934690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9518 vulnerable 2026-06-08 05:14:25.671944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9517 vulnerable 2026-06-08 05:14:25.669795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9516 vulnerable 2026-06-08 05:14:25.651239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9515 vulnerable 2026-06-08 05:14:25.648271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9514 vulnerable 2026-06-08 05:14:25.645684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9513 vulnerable 2026-06-08 05:14:25.627222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9511 vulnerable 2026-06-08 05:14:25.623289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3870 vulnerable 2026-06-08 05:13:56.254150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19344 vulnerable 2026-06-08 05:13:22.183699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14907 vulnerable 2026-06-08 05:12:56.411883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.