Diskstation Manager (Dsm)
Approved changes feed: RSS · Atom
cpe:2.3:a:synology:diskstation_manager_(dsm):*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Synology (65464e9b-7339-559d-9719-837f074e0220) |
|---|---|
| Product | Diskstation Manager (Dsm) (413f8291-6010-556f-bb8d-6a5e11c649f2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6205 |
vulnerable | 2026-10-13 12:29:54.173443 |
Details available
HIGH (8.1)
An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write arbitrary files and conduct denial-of-service attacks.
Published: 2026-09-18T08:22:15.549Z
Updated: 2026-09-18T19:57:02.255Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4036 |
vulnerable | 2026-10-13 12:29:40.601277 |
Details available
MEDIUM (6.5)
An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to obtain arbitrary sharing files.
Published: 2026-09-18T08:26:18.509Z
Updated: 2026-09-18T19:10:31.286Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40539 |
vulnerable | 2026-10-13 12:29:25.534778 |
Details available
HIGH (7.1)
An improper certificate validation vulnerability in Email API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows man-in-the-middle attackers to read or write arbitrary files and conduct denial-of-service attacks.
Published: 2026-09-18T08:29:33.365Z
Updated: 2026-09-18T10:40:16.842Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40531 |
vulnerable | 2026-10-13 12:29:25.355128 |
Details available
MEDIUM (4.3)
An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to conduct limited denial-of-service attacks.
Published: 2026-09-18T08:26:45.113Z
Updated: 2026-09-18T19:09:31.972Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40535 |
vulnerable | 2026-10-13 12:29:25.284387 |
Details available
MEDIUM (6.5)
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Desktop API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote attackers to write limited files and conduct limited denial-of-service attacks.
Published: 2026-09-18T08:28:55.263Z
Updated: 2026-09-18T10:43:26.294Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40530 |
vulnerable | 2026-10-13 12:29:25.157381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40534 |
vulnerable | 2026-10-13 12:29:25.066775 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40538 |
vulnerable | 2026-10-13 12:29:24.861652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40532 |
vulnerable | 2026-10-13 12:29:24.708509 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40536 |
vulnerable | 2026-10-13 12:29:24.633172 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40533 |
vulnerable | 2026-10-13 12:29:24.048929 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40537 |
vulnerable | 2026-10-13 12:29:23.980768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13673 |
vulnerable | 2026-10-13 12:28:39.594506 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13683 |
vulnerable | 2026-10-13 12:28:39.534323 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13639 |
vulnerable | 2026-10-13 12:28:39.511482 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13635 |
vulnerable | 2026-10-13 12:28:39.395179 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13666 |
vulnerable | 2026-10-13 12:28:39.373961 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13623 |
vulnerable | 2026-10-13 12:28:39.326032 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13684 |
vulnerable | 2026-10-13 12:28:38.981430 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1021 |
vulnerable | 2026-06-08 07:06:36.660406 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13392 |
vulnerable | 2026-06-08 07:04:32.126384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5401 |
vulnerable | 2026-06-08 06:56:15.813120 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50629 |
vulnerable | 2026-06-08 06:52:11.321217 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45539 |
vulnerable | 2026-06-08 06:48:06.753090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45538 |
vulnerable | 2026-06-08 06:48:06.750020 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10445 |
vulnerable | 2026-06-08 06:23:46.596099 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10444 |
vulnerable | 2026-06-08 06:23:46.595379 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10441 |
vulnerable | 2026-06-08 06:23:46.557075 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0854 |
vulnerable | 2026-06-08 06:22:02.991906 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2729 |
vulnerable | 2026-06-08 06:02:42.895870 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0142 |
not_vulnerable | 2026-06-08 05:52:04.351082 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3576 |
vulnerable | 2026-06-08 05:48:21.462183 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27626 |
vulnerable | 2026-06-08 05:42:42.509844 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27625 |
vulnerable | 2026-06-08 05:42:42.508993 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27624 |
vulnerable | 2026-06-08 05:42:42.505120 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27623 |
vulnerable | 2026-06-08 05:42:42.504606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27622 |
vulnerable | 2026-06-08 05:42:42.504118 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27616 |
vulnerable | 2026-06-08 05:42:42.483165 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27610 |
vulnerable | 2026-06-08 05:42:42.472805 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22688 |
vulnerable | 2026-06-08 05:40:54.898437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22687 |
vulnerable | 2026-06-08 05:40:54.896554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22684 |
vulnerable | 2026-06-08 05:40:54.894225 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22680 |
vulnerable | 2026-06-08 05:40:54.884970 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22679 |
vulnerable | 2026-06-08 05:40:54.882545 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43929 |
vulnerable | 2026-06-08 05:36:44.591571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43927 |
vulnerable | 2026-06-08 05:36:44.586554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43926 |
vulnerable | 2026-06-08 05:36:44.586164 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43925 |
vulnerable | 2026-06-08 05:36:44.583403 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29087 |
vulnerable | 2026-06-08 05:31:25.825051 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29086 |
vulnerable | 2026-06-08 05:31:25.824476 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29085 |
vulnerable | 2026-06-08 05:31:25.824102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29084 |
vulnerable | 2026-06-08 05:31:25.823739 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27649 |
vulnerable | 2026-06-08 05:31:22.010848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26563 |
vulnerable | 2026-06-08 05:30:44.853521 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27656 |
vulnerable | 2026-06-08 05:23:52.915600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27652 |
vulnerable | 2026-06-08 05:23:52.910189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27650 |
vulnerable | 2026-06-08 05:23:52.908931 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27648 |
vulnerable | 2026-06-08 05:23:52.901975 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8920 |
vulnerable | 2026-06-08 05:12:06.705168 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8919 |
vulnerable | 2026-06-08 05:12:06.704790 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8917 |
vulnerable | 2026-06-08 05:12:06.702064 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8916 |
vulnerable | 2026-06-08 05:12:06.700564 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13293 |
vulnerable | 2026-06-08 05:10:51.124148 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13291 |
vulnerable | 2026-06-08 05:10:51.123263 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13286 |
vulnerable | 2026-06-08 05:10:51.119915 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13284 |
vulnerable | 2026-06-08 05:10:51.116764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13281 |
vulnerable | 2026-06-08 05:10:51.101758 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13280 |
vulnerable | 2026-06-08 05:10:51.099179 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16774 |
vulnerable | 2026-06-08 05:09:01.048178 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16766 |
vulnerable | 2026-06-08 05:09:01.040389 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15889 |
vulnerable | 2026-06-08 05:08:59.675121 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12075 |
vulnerable | 2026-06-08 05:08:38.701248 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.