Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Synology BeeDrive for desktop — Synology-SA-25:08 BeeDrive for desktop Clear all filters
TI-2025-34003 CVE-2025-54160 · GHSA-qw9v-q466-7hm6

Path traversal in Synology BeeDrive for desktop

Priority LOW 35

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified ve…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00212 Published 2025-12-04 Fixed in 1.4.2-13960 CWE-22
TI-2025-34002 CVE-2025-54159 · GHSA-37xr-mgj2-w9fc

Missing authorization in Synology BeeDrive for desktop

Priority LOW 39

Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attackers to delete arbitrary files via unspecified vectors.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00441 Published 2025-12-04 Fixed in 1.4.2-13960 CWE-862
TI-2025-34001 CVE-2025-54158 · GHSA-9783-62mp-26w6

Missing authentication in Synology BeeDrive for desktop

Priority LOW 35

Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified vectors.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2025-12-04 Fixed in 1.4.2-13960 CWE-306