7.0.1.42218.1

DATE	CVE	VULNERABILITY TITLE	RISK
2022-02-07	CVE-2021-43925	SQL Injection vulnerability in Synology Diskstation Manager Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors. network low complexity synology CWE-89 critical	9.8
2022-02-07	CVE-2021-43926	SQL Injection vulnerability in Synology Diskstation Manager Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors. network low complexity synology CWE-89 critical	9.8
2022-02-07	CVE-2021-43927	SQL Injection vulnerability in Synology Diskstation Manager Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Security Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors. network low complexity synology CWE-89 critical	9.8
2022-02-07	CVE-2021-43929	Cross-site Scripting vulnerability in Synology Diskstation Manager Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in work flow management in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. network low complexity synology CWE-79	5.4
2022-02-07	CVE-2022-22679	Path Traversal vulnerability in Synology Diskstation Manager Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service management in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote authenticated users to write arbitrary files via unspecified vectors. network low complexity synology CWE-22	4.9
2022-02-07	CVE-2022-22680	Unspecified vulnerability in Synology Diskstation Manager Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to obtain sensitive information via unspecified vectors. network low complexity synology	7.5