Show filters
207 Total Results
Displaying 91-100 of 207
Sort by:
Attacker Value
Unknown
CVE-2021-26560
Disclosure Date: February 26, 2021 (last updated February 22, 2025)
Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session.
0
Attacker Value
Unknown
CVE-2021-26563
Disclosure Date: February 26, 2021 (last updated February 22, 2025)
Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-26565
Disclosure Date: February 26, 2021 (last updated February 22, 2025)
Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain sensitive information via an HTTP session.
0
Attacker Value
Unknown
CVE-2020-8353
Disclosure Date: November 11, 2020 (last updated February 22, 2025)
Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.
0
Attacker Value
Unknown
CVE-2020-27650
Disclosure Date: October 29, 2020 (last updated February 22, 2025)
Synology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session.
0
Attacker Value
Unknown
CVE-2020-27652
Disclosure Date: October 29, 2020 (last updated February 22, 2025)
Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors.
0
Attacker Value
Unknown
CVE-2020-27648
Disclosure Date: October 29, 2020 (last updated February 22, 2025)
Improper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
0
Attacker Value
Unknown
CVE-2019-7291
Disclosure Date: October 27, 2020 (last updated November 28, 2024)
A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. An attacker in a privileged position may be able to perform a denial of service attack.
0
Attacker Value
Unknown
CVE-2019-8572
Disclosure Date: October 27, 2020 (last updated February 22, 2025)
A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution.
0
Attacker Value
Unknown
CVE-2019-8580
Disclosure Date: October 27, 2020 (last updated November 28, 2024)
Source-routed IPv4 packets were disabled by default. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. Source-routed IPv4 packets may be unexpectedly accepted.
0
