SS
Product
Surveillance Station
25
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 19Low 3
Watch
Add Surveillance Station to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-29241 | 9.9 | Mar 28 | Missing authorization vulnerability in System webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2024-29229 | 7.7 | Mar 28 | Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2024-29228 | 7.7 | Mar 28 | Missing authorization vulnerability in GetStmUrlPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2017-16770 | 6.5 | Feb 27 | File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote… Affected: before 8.1.2-5469 |
| CVE-2024-29239 | 5.4 | Mar 28 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Recording.CountByCategory webapi component in Synology Surveillance Station… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2024-29238 | 5.4 | Mar 28 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log.CountByCategory webapi component in Synology Surveillance Station before… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2024-29237 | 5.4 | Mar 28 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in ActionRule.Delete webapi component in Synology Surveillance Station before… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2024-29236 | 5.4 | Mar 28 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in AudioPattern.Delete webapi component in Synology Surveillance Station before… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2024-29235 | 5.4 | Mar 28 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in IOModule.EnumLog webapi component in Synology Surveillance Station before… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2024-29234 | 5.4 | Mar 28 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Group.Save webapi component in Synology Surveillance Station before… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2024-29233 | 5.4 | Mar 28 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Emap.Delete webapi component in Synology Surveillance Station before… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2024-29232 | 5.4 | Mar 28 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Alert.Enum webapi component in Synology Surveillance Station before… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2024-29231 | 5.4 | Mar 28 | Improper validation of array index vulnerability in UserPrivilege.Enum webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2024-29230 | 5.4 | Mar 28 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in SnapShot.CountByCategory webapi component in Synology Surveillance Station… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2024-29227 | 5.4 | Mar 28 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Layout.LayoutSave webapi component in Synology Surveillance Station before… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2017-16767 | 5.4 | Feb 27 | Cross-site scripting (XSS) vulnerability in User Profile in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to inject arbitrary web script or… Affected: before 8.1.2-5469 |
| CVE-2024-47271 | 4.9 | May 27 | Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with… Affected: before 9.2.2-9575; before 9.2.2-11575 |
| CVE-2024-47269 | 4.9 | May 27 | Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote… Affected: before 9.2.2-9575; before 9.2.2-11575 |
| CVE-2024-47268 | 4.9 | May 27 | Missing authorization vulnerability in AddOns functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator… Affected: before 9.2.2-9575; before 9.2.2-11575 |
| CVE-2023-52944 | 4.3 | Dec 4 | Incorrect authorization vulnerability in ActionRule webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2023-52943 | 4.3 | Dec 4 | Incorrect authorization vulnerability in Alert.Setting webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to to… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2024-29240 | 4.3 | Mar 28 | Missing authorization vulnerability in LayoutSave webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to conduct… Affected: before 9.2.0-9289; before 9.2.0-11289 |
| CVE-2024-47272 | 2.7 | May 27 | Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with… Affected: before 9.2.2-9575; before 9.2.2-11575 |
| CVE-2024-47270 | 2.7 | May 27 | Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated… Affected: before 9.2.2-9575; before 9.2.2-11575 |
| CVE-2024-47267 | 2.7 | May 27 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Archiving Pull functionality in Synology Surveillance Station before 9.2.2-11575… Affected: before 9.2.2-9575; before 9.2.2-11575 |
Showing 25