Show filters
300 Total Results
Displaying 111-120 of 300
Sort by:
Attacker Value
Unknown
CVE-2021-34811
Disclosure Date: June 17, 2021 (last updated February 22, 2025)
Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-34810
Disclosure Date: June 17, 2021 (last updated February 22, 2025)
Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-34812
Disclosure Date: June 17, 2021 (last updated February 22, 2025)
Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensitive information via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-34808
Disclosure Date: June 17, 2021 (last updated February 22, 2025)
Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows remote attackers to access intranet resources via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-29089
Disclosure Date: June 02, 2021 (last updated February 22, 2025)
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo Station before 6.8.14-3500 allows remote attackers users to execute arbitrary SQL commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-29090
Disclosure Date: June 01, 2021 (last updated February 22, 2025)
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary SQL command via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-29091
Disclosure Date: June 01, 2021 (last updated February 22, 2025)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-29092
Disclosure Date: May 31, 2021 (last updated February 22, 2025)
Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary code via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-33180
Disclosure Date: May 26, 2021 (last updated February 22, 2025)
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-33181
Disclosure Date: May 26, 2021 (last updated February 22, 2025)
Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows remote authenticated users to send arbitrary request to intranet resources via unspecified vectors.
0
