[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYyxhCS-IAWpEX2bqmgumPqQLCWpJUZMNiPa8LbO0liM":3,"g5a-ex:synology\u002Fdownload_station@*":189,"g5a-family:synology\u002Fdownload_station":191},{"success":4,"data":5},true,{"product":6,"versions":85,"topVulnerabilitiesByEpss":120,"kevVulnerabilities":166,"seoMetadata":167,"meta":186},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":84},"synology","download_station",34,8,0,"2021-06-18",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"3.2-2295",2,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"3.3-2382",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"3.3-2383",{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},"3.3-2386",{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"3.4-2477",{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"3.4-2478",{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},"3.4-2480",{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},"3.4-2485",{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},"3.4-2486",{"version":35,"cve_count":16,"kev_count":11,"has_kev":17},"3.4-2489",{"version":37,"cve_count":16,"kev_count":11,"has_kev":17},"3.4-2490",{"version":39,"cve_count":16,"kev_count":11,"has_kev":17},"3.4-2514",{"version":41,"cve_count":16,"kev_count":11,"has_kev":17},"3.4-2555",{"version":43,"cve_count":16,"kev_count":11,"has_kev":17},"3.4-2557",{"version":45,"cve_count":16,"kev_count":11,"has_kev":17},"3.4-2558",{"version":47,"cve_count":16,"kev_count":11,"has_kev":17},"3.5-2638",{"version":49,"cve_count":16,"kev_count":11,"has_kev":17},"3.5-2705",{"version":51,"cve_count":16,"kev_count":11,"has_kev":17},"3.5-2706",{"version":53,"cve_count":16,"kev_count":11,"has_kev":17},"3.5-2955",{"version":55,"cve_count":16,"kev_count":11,"has_kev":17},"3.5-2956",{"version":57,"cve_count":16,"kev_count":11,"has_kev":17},"3.5-2962",{"version":59,"cve_count":16,"kev_count":11,"has_kev":17},"3.5-2963",{"version":61,"cve_count":16,"kev_count":11,"has_kev":17},"3.5-2967",{"version":63,"cve_count":16,"kev_count":11,"has_kev":17},"3.5-2968",{"version":65,"cve_count":16,"kev_count":11,"has_kev":17},"3.5-2970",{"version":67,"cve_count":16,"kev_count":11,"has_kev":17},"3.5-2973",{"version":69,"cve_count":16,"kev_count":11,"has_kev":17},"3.5-2980",{"version":71,"cve_count":16,"kev_count":11,"has_kev":17},"3.5-2982",{"version":73,"cve_count":16,"kev_count":11,"has_kev":17},"3.8.0-3416",{"version":75,"cve_count":16,"kev_count":11,"has_kev":17},"3.8.1-3420",{"version":77,"cve_count":11,"kev_count":11,"has_kev":17},"3.8.15-3563",{"version":79,"cve_count":16,"kev_count":11,"has_kev":17},"3.8.2-3455",{"version":81,"cve_count":16,"kev_count":11,"has_kev":17},"3.8.3-3458",{"version":83,"cve_count":16,"kev_count":11,"has_kev":17},"3.8.4-3468","Download Station by Synology is a technology product with 34 tracked versions and 8 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},{"version":35,"cve_count":16,"kev_count":11,"has_kev":17},{"version":37,"cve_count":16,"kev_count":11,"has_kev":17},{"version":39,"cve_count":16,"kev_count":11,"has_kev":17},{"version":41,"cve_count":16,"kev_count":11,"has_kev":17},{"version":43,"cve_count":16,"kev_count":11,"has_kev":17},{"version":45,"cve_count":16,"kev_count":11,"has_kev":17},{"version":47,"cve_count":16,"kev_count":11,"has_kev":17},{"version":49,"cve_count":16,"kev_count":11,"has_kev":17},{"version":51,"cve_count":16,"kev_count":11,"has_kev":17},{"version":53,"cve_count":16,"kev_count":11,"has_kev":17},{"version":55,"cve_count":16,"kev_count":11,"has_kev":17},{"version":57,"cve_count":16,"kev_count":11,"has_kev":17},{"version":59,"cve_count":16,"kev_count":11,"has_kev":17},{"version":61,"cve_count":16,"kev_count":11,"has_kev":17},{"version":63,"cve_count":16,"kev_count":11,"has_kev":17},{"version":65,"cve_count":16,"kev_count":11,"has_kev":17},{"version":67,"cve_count":16,"kev_count":11,"has_kev":17},{"version":69,"cve_count":16,"kev_count":11,"has_kev":17},{"version":71,"cve_count":16,"kev_count":11,"has_kev":17},{"version":73,"cve_count":16,"kev_count":11,"has_kev":17},{"version":75,"cve_count":16,"kev_count":11,"has_kev":17},{"version":77,"cve_count":11,"kev_count":11,"has_kev":17},{"version":79,"cve_count":16,"kev_count":11,"has_kev":17},{"version":81,"cve_count":16,"kev_count":11,"has_kev":17},{"version":83,"cve_count":16,"kev_count":11,"has_kev":17},[121,129,137,143,147,152,156,162],{"cveId":122,"description":123,"publishedDate":124,"cvssScore":125,"cvssVersion":126,"severity":127,"isKev":17,"epssScore":128},"CVE-2017-11156","Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 uses weak permissions (0777) for ui\u002Fdlm\u002Fbtsearch directory, which allows remote authenticated users to execute arbitrary code by uploading an executable via unspecified vectors.","2017-08-14",7.8,"v3.0","High",0.02302,{"cveId":130,"description":131,"publishedDate":132,"cvssScore":133,"cvssVersion":134,"severity":135,"isKev":17,"epssScore":136},"CVE-2015-6909","Cross-site scripting (XSS) vulnerability in the \"Create download task via file upload\" feature in Synology Download Station before 3.5-2962 allows remote attackers to inject arbitrary web script or HTML via the name element in the Info dictionary in a torrent file.","2015-09-11",4.3,"v2","Medium",0.02087,{"cveId":138,"description":139,"publishedDate":12,"cvssScore":140,"cvssVersion":141,"severity":127,"isKev":17,"epssScore":142},"CVE-2021-34809","Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors.",8.8,"v3.1",0.01935,{"cveId":144,"description":145,"publishedDate":132,"cvssScore":133,"cvssVersion":134,"severity":135,"isKev":17,"epssScore":146},"CVE-2015-6913","Cross-site scripting (XSS) vulnerability in the \"Create download task via URL\" feature in Synology Download Station before 3.5-2967 allows remote attackers to inject arbitrary web script or HTML via the urls parameter in an add_url_task action to dlm\u002Fdownloadman.cgi.",0.01917,{"cveId":148,"description":149,"publishedDate":124,"cvssScore":150,"cvssVersion":126,"severity":135,"isKev":17,"epssScore":151},"CVE-2017-11149","Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote authenticated users to download arbitrary local files via crafted URI.",6.5,0.01599,{"cveId":153,"description":154,"publishedDate":12,"cvssScore":140,"cvssVersion":141,"severity":127,"isKev":17,"epssScore":155},"CVE-2021-34810","Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors.",0.01369,{"cveId":157,"description":158,"publishedDate":159,"cvssScore":160,"cvssVersion":141,"severity":127,"isKev":17,"epssScore":161},"CVE-2021-33184","Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors.","2021-06-01",7.7,0.01,{"cveId":163,"description":164,"publishedDate":12,"cvssScore":133,"cvssVersion":141,"severity":135,"isKev":17,"epssScore":165},"CVE-2021-34811","Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors.",0.00764,[],{"title":168,"metaDescription":169,"keywords":170,"structuredData":171},"Download Station by Synology - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Download Station by Synology covering 34 versions with 8 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Download Station vulnerabilities, Download Station security, Download Station CVE, Synology Download Station, Download Station threat intelligence, Synology security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":172,"@type":173,"name":174,"description":169,"url":175,"manufacturer":176,"applicationCategory":180,"softwareVersion":181,"mainEntity":182},"https:\u002F\u002Fschema.org","SoftwareApplication","Download Station","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsynology\u002Fdownload_station",{"@type":177,"name":178,"url":179},"Organization","Synology","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fsynology","Security Software","34 versions tracked",{"@type":183,"name":184,"description":185,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Download Station Security Vulnerabilities","Security vulnerabilities affecting Download Station by Synology",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":187,"apiVersion":188},"2026-10-28T21:12:22.342Z","3.0",{"rows":190,"total":11,"capped":17,"failed":11},[],[]]