Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Synology DiskStation Manager (DSM) 6.2.4-25553 Clear all filters
TI-2021-12733 CVE-2021-33182 · GHSA-r945-qf65-4pr8

Path traversal in Synology DiskStation Manager

Priority LOW 25

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in PDF Viewer component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows remote authenticated users to read limi…

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.01112 Published 2021-06-01 Fixed in 6.2.4-25553 CWE-22
TI-2021-09975 CVE-2021-29088 · GHSA-88jq-fmhx-7gr3

Path traversal in Synology DiskStation Manager

Priority LOW 34

Improper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vector…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00318 Published 2021-06-01 Fixed in 6.2.4-25553 CWE-22