Login Request a demo
DC
Product
Drive Client
by Synology · last CVE Sep 26, 2024
6
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 2Medium 4Low 0
Severity
All severities6Critical0High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Drive Client to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-52946
8.2
1%
Sep 26
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client before 3.5.0-16084 allows remote attackers…
Affected: before 3.5.0-16084
CVE-2022-49038
7.8
0%
Sep 26
Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users to execute arbitrary…
Affected: before 3.3.0-15082
CVE-2022-49039
6.7
0%
Sep 26
Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute…
Affected: before 3.4.0-15721
CVE-2022-49037
6.5
1%
Sep 26
Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain…
Affected: before 3.3.0-15082
CVE-2022-49041
4.4
0%
Sep 26
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows…
Affected: before 3.5.0-16084
CVE-2022-49040
4.4
0%
Sep 26
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows…
Affected: before 3.4.0-15721
Showing 6