CVE Vulnerability Database
Search and browse 397,864 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-40829 | HIGH | 7 | 0.3% | May 27, 2026 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the view.html.php files ... |
| CVE-2026-40828 | HIGH | 7 | 0.3% | May 27, 2026 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DeleteSysLogEntry fu... |
| CVE-2026-40827 | HIGH | 7 | 0.3% | May 27, 2026 | A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _RemoveRequest funct... |
| CVE-2026-2237 | MEDIUM | 5.5 | 0.1% | May 27, 2026 | A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager ... |
| CVE-2025-66593 | MEDIUM | 5.6 | 0.1% | May 27, 2026 | An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary ... |
| CVE-2025-66592 | MEDIUM | 5.6 | 0.1% | May 27, 2026 | An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local use... |
| CVE-2025-52747 | HIGH | 7.1 | 0.2% | May 27, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes Themebox -... |
| CVE-2025-30028 | HIGH | 8.6 | 0.4% | May 27, 2026 | A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files. |
| CVE-2025-22741 | HIGH | 7.1 | 0.2% | May 27, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RiceTheme Felan Fr... |
| CVE-2025-14713 | HIGH | 7.5 | 0.5% | May 27, 2026 | An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0... |
| CVE-2025-13593 | MEDIUM | 5.6 | 0.1% | May 27, 2026 | Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arbi... |
| CVE-2025-13392 | CRITICAL | 9.8 | 0.5% | May 27, 2026 | Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7... |
| CVE-2025-13167 | MEDIUM | 5.4 | 0.3% | May 27, 2026 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functional... |
| CVE-2025-12686 | CRITICAL | 9.8 | 2.8% | May 27, 2026 | Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStati... |
| CVE-2025-10466 | MEDIUM | 5.9 | 0.3% | May 27, 2026 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Safe Access in Syn... |
| CVE-2024-47272 | LOW | 2.7 | 0.2% | May 27, 2026 | Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 and... |
| CVE-2024-47271 | MEDIUM | 4.9 | 0.3% | May 27, 2026 | Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-... |
| CVE-2024-47270 | LOW | 2.7 | 0.2% | May 27, 2026 | Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station befo... |
| CVE-2024-47269 | MEDIUM | 4.9 | 0.2% | May 27, 2026 | Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Stati... |
| CVE-2024-47268 | MEDIUM | 4.9 | 0.3% | May 27, 2026 | Missing authorization vulnerability in AddOns functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.... |
| CVE-2024-47267 | LOW | 2.7 | 0.3% | May 27, 2026 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Archiving Pull functiona... |
| CVE-2024-11399 | MEDIUM | 6.8 | 0.1% | May 27, 2026 | Files or directories accessible to external parties vulnerability in redis-server component in Synology BeeDrive for des... |
| CVE-2023-52945 | HIGH | 7.8 | 0.1% | May 27, 2026 | Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13... |
| CVE-2026-8942 | MEDIUM | 4.3 | 0.1% | May 27, 2026 | The MetaMagic SEO Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc... |
| CVE-2026-8906 | MEDIUM | 6.1 | 0.1% | May 27, 2026 | The WP Promoter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1... |