Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Advisory: Synology Router Manager (SRM) — Synology-SA-24:09 SRM Clear all filters
TI-2024-35747 CVE-2024-53285 · GHSA-73xm-gvm5-fvj6

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00271 Published 2024-12-09 Fixed in 1.3.1-9346-10 CWE-79
TI-2024-35746 CVE-2024-53284 · GHSA-m7m4-7vv7-53gq

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect Setting functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated u…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00271 Published 2024-12-09 Fixed in 1.3.1-9346-10 CWE-79
TI-2024-35745 CVE-2024-53283 · GHSA-2mjf-6957-c593

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Router Port Forward functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated us…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00271 Published 2024-12-09 Fixed in 1.3.1-9346-10 CWE-79
TI-2024-35744 CVE-2024-53282 · GHSA-8hwf-74p7-79cc

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect MAC Filter functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticate…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00271 Published 2024-12-09 Fixed in 1.3.1-9346-10 CWE-79
TI-2024-35743 CVE-2024-53281 · GHSA-2f87-f3xg-gj6p

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Network WOL functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users to r…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00271 Published 2024-12-09 Fixed in 1.3.1-9346-10 CWE-79
TI-2024-35741 CVE-2024-53279 · GHSA-xw9r-xwcq-fwq5

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in file station functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users wit…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00271 Published 2024-12-09 Fixed in 1.3.1-9346-10 CWE-79
TI-2024-35742 CVE-2024-53280 · GHSA-hhq4-hjcp-jxv5

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in network center policy route functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenti…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00271 Published 2024-12-09 Fixed in 1.3.1-9346-10 CWE-79