Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Synology Diskstation ManagerUncontrolled search path element vulnerability in Backup Management Functionality in Synology DiskSt…

Risk 60
Severity
8.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors.

1 / 2
Source: NVD
First published (updated )
CVE-2023-0142

Synology Diskstation ManagerUse of insufficiently random values vulnerability in User Management Functionality in Synology DiskS…

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors.

First published (updated )
CVE-2023-2729

Synology Router ManagerPath Traversal

Risk 66
Severity
7.2
Path Traversal
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.

First published (updated )
CVE-2025-29846

Synology Router ManagerPath Traversal

Risk 34
Severity
5.4
Path Traversal
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files.

First published (updated )
CVE-2025-29843

Synology Router ManagerPath Traversal

Risk 22
Severity
4.3
Path Traversal
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.

First published (updated )
CVE-2025-29845

Synology Router ManagerPath Traversal

Risk 22
Severity
4.3
Path Traversal
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information.

First published (updated )
CVE-2025-29844

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203