Login Request a demo
MS
Product
Media Server
by Synology · last CVE Dec 18, 2024
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news4Timeline
Severity mix
Critical 3High 2Medium 1Low 0
Severity
All severities6Critical3High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Media Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-22683
9.8
2%
Jul 28
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute…
Affected: before 1.8.1-2876; before 1.4-2665
CVE-2021-33180
9.8
1%
Jun 1
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote…
Affected: before 1.8.1-2876
CVE-2018-8914
9.8
1%
May 10
SQL injection vulnerability in UPnP DMA in Synology Media Server before 1.7.6-2842 and before 1.4-2654 allows remote attackers to execute arbitrary SQL commands via the ObjectID…
Affected: 1.4 before 1.4-2654; 1.7 before 1.7.6-2842
Showing 3