Vulnerabilities > Synology > Diskstation Manager

DATE CVE VULNERABILITY TITLE RISK
2017-07-24 CVE-2017-9554 Information Exposure vulnerability in Synology Diskstation Manager
An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors.
network
low complexity
synology CWE-200
5.3
2017-07-24 CVE-2017-9553 Unspecified vulnerability in Synology Diskstation Manager
A design flaw in SYNO.API.Encryption in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to bypass the encryption protection mechanism via the crafted version parameter.
network
low complexity
synology
7.5