Login Request a demo
MS
Product
Media Server
by Synology · last CVE Dec 18, 2024
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news4Timeline
Severity mix
Critical 3High 2Medium 1Low 0
Severity
All severities6Critical3High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Media Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-22683
9.8
2%
Jul 28
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute…
Affected: before 1.8.1-2876; before 1.4-2665
CVE-2021-33180
9.8
1%
Jun 1
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote…
Affected: before 1.8.1-2876
CVE-2018-8914
9.8
1%
May 10
SQL injection vulnerability in UPnP DMA in Synology Media Server before 1.7.6-2842 and before 1.4-2654 allows remote attackers to execute arbitrary SQL commands via the ObjectID…
Affected: 1.4 before 1.4-2654; 1.7 before 1.7.6-2842
CVE-2024-4464
7.5
1%
Dec 18
Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4-2680, 2.0.5-3152 and 2.2.0-3325 allows remote attackers to…
Affected: before 2.0.5-3152; before 2.2.0-3325; before 1.4-2680
CVE-2022-27614
7.5
1%
Jul 28
Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before 1.8.1-2876 allows remote attackers to obtain sensitive…
Affected: before 1.8.1-2876; before 1.4-2665
CVE-2021-34808
5.3
1%
Jun 18
Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows remote attackers to access intranet resources via unspecified…
Affected: before 1.8.3-2881
Showing 6