📦 Diskstation Manager Unified Controller

A Cross-Site Request Forgery (CSRF) vulnerability in Synology's WebAPI Framework allows remote attackers to trick authenticated users into executing arbitrary code on Synology DiskStation Manager (DSM...

This is a critical buffer overflow vulnerability in Synology DiskStation Manager's authentication functionality that allows remote attackers to execute arbitrary code without authentication. It affect...

This is a critical use-after-free vulnerability in Synology DiskStation Manager's file transfer protocol component that allows remote attackers to execute arbitrary code on affected systems. Attackers...

This vulnerability allows man-in-the-middle attackers to execute arbitrary code on Synology DiskStation Manager (DSM) systems by exploiting an out-of-bounds write in the synoagentregisterd service via...

CVE-2021-26560 allows man-in-the-middle attackers to intercept and spoof servers during HTTP sessions with synoagentregisterd in Synology DSM. This cleartext transmission vulnerability affects Synolog...

An out-of-bounds write vulnerability in CGI components of Synology DiskStation Manager (DSM) and Unified Controller (DSMUC) allows remote attackers to cause denial-of-service attacks. This affects Syn...

This vulnerability allows remote attackers to read arbitrary files on Synology DiskStation Manager (DSM) systems through improper input sanitization in the file sharing management component. Attackers...

This path traversal vulnerability in Synology DiskStation Manager's webapi component allows remote attackers to write arbitrary files to restricted directories. It affects Synology DSM versions before...

This vulnerability allows authenticated remote users to escalate privileges without authorization in Synology DiskStation Manager and Unified Controller. Attackers with valid credentials can gain high...