Synology Diskstation Manager (Dsm)
Approved changes feed: RSS · Atom
cpe:2.3:a:synology:synology_diskstation_manager_(dsm):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Synology (65464e9b-7339-559d-9719-837f074e0220) |
|---|---|
| Product | Synology Diskstation Manager (Dsm) (2e5574d3-771c-5b45-81be-64af7e2f49e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-33182 |
vulnerable | 2026-06-08 05:32:10.967872 |
Details available
MEDIUM (5)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in PDF Viewer component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows remote authenticated users to read limited files via unspecified vectors.
Published: 2021-06-01T09:50:17.599Z
Updated: 2024-09-16T19:05:32.694Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29088 |
vulnerable | 2026-06-08 05:31:25.825576 |
Details available
HIGH (7.8)
Improper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors.
Published: 2021-06-01T09:45:20.782Z
Updated: 2024-09-16T20:16:24.198Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29083 |
vulnerable | 2026-06-08 05:31:25.823164 |
Details available
HIGH (7.2)
Improper neutralization of special elements used in an OS command in SYNO.Core.Network.PPPoE in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote authenticated users to execute arbitrary code via realname parameter.
Published: 2021-04-01T05:20:13.245Z
Updated: 2024-09-17T02:42:37.369Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27647 |
vulnerable | 2026-06-08 05:31:22.007393 |
Details available
CRITICAL (9.8)
Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests.
Published: 2021-03-12T06:35:11.865Z
Updated: 2024-09-16T20:13:32.164Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27646 |
vulnerable | 2026-06-08 05:31:22.005287 |
Details available
CRITICAL (9.8)
Use After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests.
Published: 2021-03-12T06:45:13.026Z
Updated: 2024-09-16T18:54:23.293Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26569 |
vulnerable | 2026-06-08 05:30:44.864616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26566 |
vulnerable | 2026-06-08 05:30:44.856495 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26565 |
vulnerable | 2026-06-08 05:30:44.855615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26564 |
vulnerable | 2026-06-08 05:30:44.854626 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26562 |
vulnerable | 2026-06-08 05:30:44.849943 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26561 |
vulnerable | 2026-06-08 05:30:44.849179 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26560 |
vulnerable | 2026-06-08 05:30:44.841873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15894 |
vulnerable | 2026-06-08 05:08:59.682355 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.