Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2517▼ 423 respecto a la semana anterior
Críticas / altas1296▲ 12 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)57▼ 471 respecto a la semana anterior
59 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7.2) | 0.64% | — | Synology Router Manager | 4/12/2025 | 25/9/2026 | A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages. | |
| Analizada | Media (4.3) | 0.43% | — | Synology Router Manager | 4/12/2025 | 25/9/2026 | A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files. | |
| Analizada | Media (4.3) | 0.43% | — | Synology Router Manager | 4/12/2025 | 25/9/2026 | A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information. | |
| Analizada | Media (5.4) | 0.37% | — | Synology Router Manager | 4/12/2025 | 25/9/2026 | A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files. | |
| Analizada | Media (5.9) | 0.21% | — | Synology Router Manager | 23/7/2025 | 17/6/2026 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in NTP Region functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via unspecified vectors. | |
| Analizada | Media (5.9) | 0.21% | — | Synology Router Manager | 23/7/2025 | 17/6/2026 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in VPN Setting functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via unspecified vectors. | |
| Analizada | Alta (7.2) | 1.1% | — | Synology Router Manager | 23/7/2025 | 17/6/2026 | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to execute arbitrary code via unspecified vectors. | |
| Analizada | Media (5.9) | 0.27% | — | Synology Router Manager | 9/12/2024 | 17/6/2026 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive information and… | |
| Analizada | Media (5.9) | 0.27% | — | Synology Router Manager | 9/12/2024 | 17/6/2026 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect Setting functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive… | |
| Analizada | Media (5.9) | 0.27% | — | Synology Router Manager | 9/12/2024 | 17/6/2026 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Router Port Forward functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive… | |
| Analizada | Media (5.9) | 0.27% | — | Synology Router Manager | 9/12/2024 | 17/6/2026 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect MAC Filter functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive… | |
| Analizada | Media (5.9) | 0.27% | — | Synology Router Manager | 9/12/2024 | 17/6/2026 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Network WOL functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users to read or write specific files containing non-sensitive information and conduct limited… | |
| Analizada | Media (5.9) | 0.27% | — | Synology Router Manager | 9/12/2024 | 17/6/2026 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in network center policy route functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive… | |
| Analizada | Media (5.9) | 0.27% | — | Synology Router Manager | 9/12/2024 | 17/6/2026 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in file station functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive information and… | |
| Analizada | Alta (8.1) | 0.65% | — | Synology Router Manager | 4/12/2024 | 17/6/2026 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in OTP reset functionality in Synology Router Manager (SRM) before 1.3.1-9346-9 allows remote authenticated users to delete arbitrary files via unspecified vectors. | |
| Analizada | Alta (7.5) | 0.27% | — | Synology Router Manager | 28/6/2024 | 17/6/2026 | Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors. | |
| Analizada | Media (5.9) | 0.52% | — | Synology Router Manager | 28/6/2024 | 17/6/2026 | Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to access highly sensitive intranet resources via unspecified vectors. | |
| Modificada | Alta (7.5) | 0.72% | — | Synology Router Manager | 31/8/2023 | 17/6/2026 | Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote attackers to obtain sensitive information via unspecified vectors. | |
| Modificada | Media (5.3) | 0.79% | — | Synology Router Manager | 31/8/2023 | 17/6/2026 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote attackers to read specific files via unspecified vectors. | |
| Modificada | Media (6.5) | 0.78% | — | Synology Router Manager | 31/8/2023 | 17/6/2026 | Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated users to conduct denial-of-service attacks via unspecified vectors. | |
| Modificada | Alta (8.8) | 1.5% | — | Synology Router Manager | 31/8/2023 | 17/6/2026 | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Directory Domain Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated users to execute arbitrary commands via unspecified vectors. | |
| Modificada | Alta (7.5) | 0.88% | — | Synology Diskstation Manager Unified ControllerSynology Router ManagerSynology Diskstation Manager | 13/6/2023 | 17/6/2026 | Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors. | |
| Modificada | Alta (8.1) | 0.97% | — | Synology Diskstation Manager Unified ControllerSynology Router ManagerSynology Diskstation Manager | 13/6/2023 | 17/6/2026 | Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors. | |
| Modificada | Crítica (9.8) | 1.5% | — | Synology Router Manager | 16/5/2023 | 17/6/2026 | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to execute arbitrary code via unspecified vectors. | |
| Modificada | Alta (8.1) | 1.2% | — | Synology Router Manager | 16/5/2023 | 17/6/2026 | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DHCP Client Functionality in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows man-in-the-middle attackers to execute arbitrary commands via unspecified vectors. |