Vulnerabilities (CVE)

Filtered by vendor Synology Subscribe
Filtered by product Download Station
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-34811 1 Synology 1 Download Station 2021-06-23 4.0 MEDIUM 4.3 MEDIUM
Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors.
CVE-2017-11149 1 Synology 1 Download Station 2019-10-09 4.0 MEDIUM 6.5 MEDIUM
Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote authenticated users to download arbitrary local files via crafted URI.