Media Server
Approved changes feed: RSS · Atom
cpe:2.3:a:synology:media_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Synology (65464e9b-7339-559d-9719-837f074e0220) |
|---|---|
| Product | Media Server (67087f02-3440-5f85-a11e-6cc4992f75a2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-4464 |
vulnerable | 2026-06-08 06:50:17.808236 |
Details available
HIGH (7.5)
Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4-2680, 2.0.5-3152 and 2.2.0-3325 allows remote attackers to read specific files via unspecified vectors.
Published: 2024-12-18T06:00:18.463Z
Updated: 2024-12-18T16:21:15.401Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27614 |
vulnerable | 2026-06-08 05:42:42.478519 |
Details available
MEDIUM (5.3)
Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before 1.8.1-2876 allows remote attackers to obtain sensitive information via unspecified vectors.
Published: 2022-07-28T06:55:12.139Z
Updated: 2024-09-17T03:48:14.077Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22683 |
vulnerable | 2026-06-08 05:40:54.890930 |
Details available
CRITICAL (10)
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary code via unspecified vectors.
Published: 2022-07-28T07:00:13.884Z
Updated: 2024-09-16T22:41:30.330Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34808 |
vulnerable | 2026-06-08 05:32:17.010274 |
Details available
MEDIUM (5.8)
Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows remote attackers to access intranet resources via unspecified vectors.
Published: 2021-06-18T03:00:32.942Z
Updated: 2024-09-17T03:47:41.516Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33180 |
vulnerable | 2026-06-08 05:32:10.964318 |
Details available
HIGH (7.3)
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2021-06-01T09:45:12.077Z
Updated: 2024-09-17T03:34:27.324Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8914 |
vulnerable | 2026-06-08 05:12:06.698257 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.