Beedrive

beedrive

Vendor: Synology • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-11399 1Synology 1Beedrive Jun 17, 2026 May 27, 2026 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Files or directories accessible to external parties vulnerability in redis-server component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to conduct denial-of-service attacks via unspecified vect...Show more Files or directories accessible to external parties vulnerability in redis-server component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to conduct denial-of-service attacks via unspecified vectors.Show less
CVE-2023-52945 1Synology 1Beedrive Jun 17, 2026 May 27, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to execute arbitrary code via unspecified vectors.
CVE-2025-8074 1Synology 1Beedrive Jun 17, 2026 Dec 4, 2025 N/A· v4 5.6 MEDIUM· v3 N/A· v2 Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors.
CVE-2025-54160 1Synology 1Beedrive Jun 17, 2026 Dec 4, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified ve...Show more Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified vectors.Show less
CVE-2025-54159 1Synology 1Beedrive Jun 17, 2026 Dec 4, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attackers to delete arbitrary files via unspecified vectors.
CVE-2025-54158 1Synology 1Beedrive Jun 17, 2026 Dec 4, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified vectors.