Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Synology DiskStation Manager (DSM), Unified Controller (DSMUC) — Synology-SA-24:27 DSM Clear all filters
TI-2024-05017 CVE-2024-5401 · GHSA-5fr5-6cwj-9hp2

Improper control of dynamically-managed code resources vulnerability in WebAPI component…

Priority LOW 38

Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manager (DSM) before 7.1.1-42962-8 and 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUC…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00408 Published 2025-12-04 Fixed in 7.2.2-72806, 7.2.1-69057-2 +1 CWE-913
TI-2024-30563 CVE-2024-45539 · GHSA-h2q6-xwhq-3g2x

Out-of-bounds write in Synology DiskStation Manager

Priority LOW 39

Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote attackers to conduct…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00515 Published 2025-12-04 Fixed in 7.2.2-72806, 7.2.1-69057-2 +1 CWE-787
TI-2024-30562 CVE-2024-45538 · GHSA-q82m-7968-cf69

Cross-site request forgery in Synology DiskStation Manager

Priority MEDIUM 43

Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote atta…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00393 Published 2025-12-04 Fixed in 7.2.2-72806, 7.2.1-69057-2 +1 CWE-352