PS
Product
Photo Station
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 15Medium 11Low 0
Watch
Add Photo Station to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-10443 | 9.8 | Nov 15 | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manager component in Synology BeePhotos before 1.0.2-10026 and… Affected: before 1.6.2-0720 |
| CVE-2021-29089 | 9.8 | Jun 2 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo Station before 6.8.14-3500 allows… Affected: 6.8 before 6.8.14-3500 |
| CVE-2019-11821 | 9.8 | Jun 30 | SQL injection vulnerability in synophoto_csPhotoDB.php in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to execute arbitrary SQL command… Affected: 6.3 before 6.3-2977; 6.8 before 6.8.11-3489 |
| CVE-2017-11161 | 9.8 | Sep 8 | Multiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allow remote attackers to execute arbitrary SQL commands via the (1) article_id… Affected: through 6.3-2967; through 6.7.3-3432 |
| CVE-2017-11153 | 9.8 | Aug 8 | Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to gain administrator privileges via a… Affected: through 6.7.2-3429; 6.3-2967 |
| CVE-2017-11151 | 9.8 | Aug 8 | A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the… Affected: through 6.7.2-3429; 6.3-2967 |
| CVE-2016-10329 | 9.8 | May 12 | Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code via shell metacharacters in the crafted… Affected: through 6.5.2-3225 |
Showing 7