Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

synology download station 3.5-2967 vulnerabilities and exploits

(subscribe to this query)
356
VMScore
CVE-2017-11149
Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x prior to 3.8.5-3475 and 3.x prior to 3.5-2984 allows remote authenticated users to download arbitrary local files via crafted URI.
Synology Download Station 3.4-2480Synology Download Station 3.4-2485Synology Download Station 3.4-2486Synology Download Station 3.4-2489Synology Download Station 3.5-2706Synology Download Station 3.5-2955Synology Download Station 3.5-2956Synology Download Station 3.5-2962Synology Download Station 3.3-2382Synology Download Station 3.3-2386Synology Download Station 3.4-2478Synology Download Station 3.4-2490Synology Download Station 3.4-2555Synology Download Station 3.4-2558Synology Download Station 3.5-2705Synology Download Station 3.5-2963Synology Download Station 3.5-2968Synology Download Station 3.5-2973Synology Download Station 3.2-2295Synology Download Station 3.8.2-3455Synology Download Station 3.8.3-3458Synology Download Station 3.8.1-3420
578
VMScore
CVE-2017-11156
Synology Download Station 3.8.x prior to 3.8.5-3475 and 3.x prior to 3.5-2984 uses weak permissions (0777) for ui/dlm/btsearch directory, which allows remote authenticated users to execute arbitrary code by uploading an executable via unspecified vectors.
Synology Download Station 3.5-2973Synology Download Station 3.5-2970Synology Download Station 3.5-2968Synology Download Station 3.5-2967Synology Download Station 3.4-2489Synology Download Station 3.4-2486Synology Download Station 3.4-2485Synology Download Station 3.4-2480Synology Download Station 3.4-2478Synology Download Station 3.8.0-3416Synology Download Station 3.5-2980Synology Download Station 3.5-2963Synology Download Station 3.5-2956Synology Download Station 3.4-2555Synology Download Station 3.4-2490Synology Download Station 3.3-2386Synology Download Station 3.3-2382Synology Download Station 3.8.4-3468Synology Download Station 3.8.3-3458Synology Download Station 3.8.2-3455Synology Download Station 3.5-2706Synology Download Station 3.5-2705
383
VMScore
CVE-2015-6913
Cross-site scripting (XSS) vulnerability in the "Create download task via URL" feature in Synology Download Station prior to 3.5-2967 allows remote malicious users to inject arbitrary web script or HTML via the urls parameter in an add_url_task action to dlm/downloadman...
Synology Download Station
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook