CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2021-43930

2022-05-09

N/A

4.9 MEDIUM

Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path traversal attacks and potentially download arbitrary files from the system.

CVE-2021-43929

2022-02-10

N/A

4.3 MEDIUM

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in work flow management in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CVE-2021-43928

2022-05-13

N/A

8.8 HIGH

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sending and receiving component in Synology Mail Station before 20211105-10315 allows remote authenticated users to execute arbitrary commands via unspecified vectors.

CVE-2021-43927

2022-02-10

N/A

9.8 CRITICAL

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Security Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors.

CVE-2021-43926

2022-02-10

N/A

9.8 CRITICAL

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors.

CVE-2021-43925

2022-02-10

N/A

9.8 CRITICAL

CVE-2021-43908

2022-01-01

N/A

4.3 MEDIUM

Visual Studio Code Spoofing Vulnerability

CVE-2021-43907

2022-01-01

N/A