İçeriğe atla
Noroxi

Synology kayıtları

synology üreticisine ait 352 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
2 · %0,6
Silahlaştırılmış
6 · %1,7
Pre-auth RCE
44
Düzeltme kaydı olan
%40,3
Yayından KEV’e ortanca
439 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

352 kayıt
  • CVE-2021-3156
    91Hemen

    Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %99

    sudo project · sudo26 Oca 2021

  • CVE-2020-1472
    82Hemen

    Netlogon Elevation of Privilege Vulnerability

    OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %99

    microsoft · windows server 190317 Ağu 2020

  • CVE-2018-1160
    65Bu hafta

    Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c.

    KritikCVSS 9,8Kavram kanıtıEPSS %86

    netatalk · netatalk20 Ara 2018

  • CVE-2017-14491
    65Bu hafta

    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via

    KritikCVSS 9,8Kavram kanıtıEPSS %86

    thekelleys · dnsmasq3 Eki 2017

  • CVE-2013-6955
    65Bu hafta

    webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 al

    KritikCVSS 10,0SilahlaştırılmışEPSS %84

    synology · diskstation manager9 Oca 2014

  • CVE-2017-9554
    60Bu hafta

    An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers

    OrtaCVSS 5,3SilahlaştırılmışEPSS %76

    synology · diskstation manager24 Tem 2017

  • CVE-2017-15889
    57Planlayın

    Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to ex

    YüksekCVSS 8,8SilahlaştırılmışEPSS %73

    synology · diskstation manager4 Ara 2017

  • CVE-2021-44142
    57Planlayın

    The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and intero

    YüksekCVSS 8,8Kavram kanıtıEPSS %73

    samba · samba21 Şub 2022

  • CVE-2019-9515
    56Planlayın

    Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service

    YüksekCVSS 7,5İstismar yokEPSS %87

    apple · swiftnio13 Ağu 2019

  • CVE-2019-9514
    55Planlayın

    Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service

    YüksekCVSS 7,5İstismar yokEPSS %82

    apple · swiftnio13 Ağu 2019

  • CVE-2019-9513
    54Planlayın

    Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service

    YüksekCVSS 7,5İstismar yokEPSS %81

    apple · swiftnio13 Ağu 2019

  • CVE-2016-10329
    51Planlayın

    Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code v

    KritikCVSS 9,8İstismar yokEPSS %40

    synology · photo station12 May 2017

  • CVE-2017-5753
    50Planlayın

    Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an at

    OrtaCVSS 5,6Kavram kanıtıEPSS %93

    intel · atom c4 Oca 2018

  • CVE-2019-9511
    48Planlayın

    Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service

    YüksekCVSS 7,5Kavram kanıtıEPSS %59

    apple · swiftnio13 Ağu 2019

  • CVE-2024-10443
    48Planlayın

    Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manager component in Synolo

    KritikCVSS 9,8Kavram kanıtıEPSS %28

    synology · photos15 Kas 2024

  • CVE-2022-43931
    45Planlayın

    Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4.4-0635 allows remote

    KritikCVSS 10,0İstismar yokEPSS %16

    synology · vpn plus server3 Oca 2023

  • CVE-2017-11155
    44Planlayın

    An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to obtai

    YüksekCVSS 7,5Kavram kanıtıEPSS %47

    synology · photo station8 Ağu 2017

  • CVE-2017-11151
    44Planlayın

    A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    synology · photo station8 Ağu 2017

  • CVE-2015-6912
    44Planlayın

    Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitle_

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    synology · video station11 Eyl 2015

  • CVE-2019-9516
    43Planlayın

    Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service

    OrtaCVSS 6,5İstismar yokEPSS %56

    apple · swiftnio13 Ağu 2019

  • CVE-2017-11153
    43Planlayın

    Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    synology · photo station8 Ağu 2017

  • CVE-2020-27655
    41Planlayın

    Improper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to access restricted resour

    KritikCVSS 10,0İstismar yokEPSS %1

    synology · router manager29 Eki 2020

  • CVE-2018-8897
    40Planlayın

    A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the

    YüksekCVSS 7,8SilahlaştırılmışEPSS %18

    debian · debian linux8 May 2018

  • CVE-2020-27654
    40Planlayın

    Improper access control vulnerability in lbd in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to execute arbitrary

    KritikCVSS 9,8İstismar yokEPSS %4

    synology · router manager29 Eki 2020

  • CVE-2020-27660
    40Planlayın

    SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute arbitrary SQL command

    KritikCVSS 9,8İstismar yokEPSS %4

    synology · safeaccess30 Kas 2020