Approved changes feed: RSS · Atom

cpe:2.3:a:synology:diskstation_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSynology (65464e9b-7339-559d-9719-837f074e0220)
ProductDiskstation Manager (db429775-8112-5c04-a3e0-3177c21cf9b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-0854 vulnerable 2026-06-08 06:22:02.992840 Details available
MEDIUM (5.4)
URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7, 7.1.1-42962-7 and 7.2.1-69057-2 allows remote authenticated users to conduct phishing attacks via unspecified vectors.
Published: 2024-01-24T10:08:55.529Z
Updated: 2025-05-30T14:16:55.201Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2729 vulnerable 2026-06-08 06:02:42.899045 Details available
MEDIUM (5.9)
Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors.
Published: 2023-06-13T07:11:54.850Z
Updated: 2025-01-03T15:24:12.653Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0142 vulnerable 2026-06-08 05:52:04.353064 Details available
MEDIUM (6.5)
Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors.
Published: 2023-06-13T06:52:50.745Z
Updated: 2025-01-03T01:55:23.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3576 vulnerable 2026-06-08 05:48:21.463050 Details available
MEDIUM (5.3)
A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to obtain sensitive information via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500.
Published: 2022-10-20T05:50:24.922Z
Updated: 2025-05-05T20:08:56.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27626 vulnerable 2026-06-08 05:42:42.509876 Details available
CRITICAL (10)
A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500.
Published: 2022-10-20T05:50:10.327Z
Updated: 2025-05-08T13:42:27.475Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27625 vulnerable 2026-06-08 05:42:42.509137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27624 vulnerable 2026-06-08 05:42:42.505157 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27623 vulnerable 2026-06-08 05:42:42.504645 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27622 vulnerable 2026-06-08 05:42:42.504150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27616 vulnerable 2026-06-08 05:42:42.483210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27610 vulnerable 2026-06-08 05:42:42.473754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22688 vulnerable 2026-06-08 05:40:54.898581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22687 vulnerable 2026-06-08 05:40:54.896588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22684 vulnerable 2026-06-08 05:40:54.894264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22680 vulnerable 2026-06-08 05:40:54.885010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22679 vulnerable 2026-06-08 05:40:54.883560 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44142 vulnerable 2026-06-08 05:36:44.983509 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43929 vulnerable 2026-06-08 05:36:44.591612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43927 vulnerable 2026-06-08 05:36:44.586729 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43926 vulnerable 2026-06-08 05:36:44.586204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43925 vulnerable 2026-06-08 05:36:44.584446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33182 vulnerable 2026-06-08 05:32:10.968494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31439 vulnerable 2026-06-08 05:31:53.486001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29088 vulnerable 2026-06-08 05:31:25.825609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29087 vulnerable 2026-06-08 05:31:25.825080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29086 vulnerable 2026-06-08 05:31:25.824505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29085 vulnerable 2026-06-08 05:31:25.824136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29084 vulnerable 2026-06-08 05:31:25.823770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29083 vulnerable 2026-06-08 05:31:25.823300 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27649 vulnerable 2026-06-08 05:31:22.010896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27647 vulnerable 2026-06-08 05:31:22.007534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27646 vulnerable 2026-06-08 05:31:22.006030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26569 vulnerable 2026-06-08 05:30:44.864762 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26567 vulnerable 2026-06-08 05:30:44.861988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26566 vulnerable 2026-06-08 05:30:44.856525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26565 vulnerable 2026-06-08 05:30:44.855654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26564 vulnerable 2026-06-08 05:30:44.854668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26563 vulnerable 2026-06-08 05:30:44.853573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26562 vulnerable 2026-06-08 05:30:44.849980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26561 vulnerable 2026-06-08 05:30:44.849218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26560 vulnerable 2026-06-08 05:30:44.842886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27656 vulnerable 2026-06-08 05:23:52.915745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27652 vulnerable 2026-06-08 05:23:52.910222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27650 vulnerable 2026-06-08 05:23:52.909052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27648 vulnerable 2026-06-08 05:23:52.902878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8920 vulnerable 2026-06-08 05:12:06.705199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8919 vulnerable 2026-06-08 05:12:06.704831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8917 vulnerable 2026-06-08 05:12:06.702106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8916 vulnerable 2026-06-08 05:12:06.701138 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7185 vulnerable 2026-06-08 05:11:55.137352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7170 vulnerable 2026-06-08 05:11:55.093133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1160 vulnerable 2026-06-08 05:11:17.071069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13293 vulnerable 2026-06-08 05:10:51.124185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13291 vulnerable 2026-06-08 05:10:51.123302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13286 vulnerable 2026-06-08 05:10:51.119955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13284 vulnerable 2026-06-08 05:10:51.116814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13281 vulnerable 2026-06-08 05:10:51.101798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13280 vulnerable 2026-06-08 05:10:51.100055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9554 vulnerable 2026-06-08 05:10:10.156382 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9553 vulnerable 2026-06-08 05:10:10.155355 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5753 vulnerable 2026-06-08 05:09:49.453353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16774 vulnerable 2026-06-08 05:09:01.048216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16766 vulnerable 2026-06-08 05:09:01.040427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15894 vulnerable 2026-06-08 05:08:59.682400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15889 vulnerable 2026-06-08 05:08:59.675690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12076 vulnerable 2026-06-08 05:08:38.703469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12075 vulnerable 2026-06-08 05:08:38.702033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4655 vulnerable 2026-06-08 05:06:40.397416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2809 vulnerable 2026-06-08 05:06:35.959891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.