CVE-2021-26567
Published Feb 26, 2021Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options.
Vendor/product archive
synology / skynas_firmware CVEs
Beta · best-effort13 CVEs tagged to synology / skynas_firmware — 3 Critical, 8 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2021-26566
Published Feb 26, 2021Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to exec…
CVE-2021-26565
Published Feb 26, 2021Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain…
CVE-2021-26564
Published Feb 26, 2021Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof…
CVE-2021-26563
Published Feb 26, 2021Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified v…
CVE-2021-26562
Published Feb 26, 2021Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via…
CVE-2021-26561
Published Feb 26, 2021Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary…
CVE-2021-26560
Published Feb 26, 2021Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers t…
CVE-2021-3156
Published Jan 26, 2021Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line ar…
- evidence mentions
- 17
- Buzz score
- 89.3
CVE-2020-27652
Published Oct 29, 2020Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensiti…
CVE-2020-27650
Published Oct 29, 2020Synology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capt…
CVE-2020-27648
Published Oct 29, 2020Improper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and…
CVE-2019-3870
Published Apr 9, 2019A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdi…
Showing 1-13 of 13 CVEsPage 1 of 1