Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Synology Drive Server — Synology-SA-24:21 Synology Drive Server (PWN2OWN 2024) Clear all filters
TI-2024-34051 CVE-2024-50631 · GHSA-32wq-rmxf-3mf7

SQL injection in Synology Drive Server

Priority MEDIUM 61

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in the system syncing daemon in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102 allows…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.26764 Published 2025-03-19 Fixed in 3.5.1-26102, 3.5.0-26085 +2 CWE-89
TI-2024-34050 CVE-2024-50630 · GHSA-qxpc-xp35-7g95

Missing authentication in Synology Drive Server

Priority MEDIUM 62

Missing authentication for critical function vulnerability in the webapi component in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102 allows remote attackers to obtain administrator cre…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.24558 Published 2025-03-19 Fixed in 3.0.4-12699, 3.5.1-26102 +2 CWE-306