Login Request a demo
SP
Product
Synology Photo Station
by Synology · last CVE Jun 2, 2021
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 5High 8Medium 5Low 0
Severity
All severities19Critical5High8Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Synology Photo Station to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-29091
6.5
1%
Jun 2
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows…
Affected: before 6.8.14-3500
CVE-2017-12071
6.5
1%
Sep 8
Server-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users to download…
Affected: before 6.7.4-3433 and 6.3-2968
CVE-2017-11162
6.5
2%
Sep 8
Directory traversal vulnerability in synphotoio in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users to read arbitrary files via unspecified…
Affected: before 6.7.4-3433 and 6.3-2968
CVE-2017-9555
5.4
1%
Aug 24
Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.0-3414 allows remote attackers to inject arbitrary web script or HTML via…
Affected: before 6.7.0-3414
CVE-2017-16769
5.3
2%
Feb 23
Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs…
Affected: 6.8.1-3458
Showing 5