Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Synology Media Server 1.8.1-2876 Clear all filters
TI-2022-06944 CVE-2022-22683 · GHSA-6c2f-mh7j-8w6q

Buffer overflow in Synology Media Server

Priority MEDIUM 46

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01646 Published 2022-07-28 Fixed in 1.8.1-2876 CWE-120
TI-2022-10595 CVE-2022-27614 · GHSA-h49j-cx34-86j7

Information disclosure in Synology Media Server

Priority LOW 35

Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before 1.8.1-2876 allows remote attackers to obtain sensitive information via unspecified vectors.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00939 Published 2022-07-28 Fixed in 1.8.1-2876 CWE-200