Login Request a demo
PS
Product
Photo Station
by Synology · last CVE Nov 15, 2024
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities34In the news0Timeline
Severity mix
Critical 7High 15Medium 11Low 0
Severity
All severities34Critical7High15Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Photo Station to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-29091
6.5
1%
Jun 2
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows…
Affected: 6.8 before 6.8.14-3500
CVE-2019-11822
6.5
1%
Jun 30
Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to upload arbitrary files…
Affected: 6.3 before 6.3-2977; 6.8 before 6.8.11-3489
CVE-2017-12071
6.5
1%
Sep 8
Server-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users to download…
Affected: through 6.3-2967; through 6.7.3-3432
CVE-2017-11162
6.5
2%
Sep 8
Directory traversal vulnerability in synphotoio in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users to read arbitrary files via unspecified…
Affected: through 6.3-2967; through 6.7.3-3432
CVE-2018-13282
6.3
1%
Oct 31
Session fixation vulnerability in SYNO.PhotoStation.Auth in Synology Photo Station before 6.8.7-3481 allows remote attackers to hijack web sessions via the PHPSESSID parameter
Affected: 6.3 before 6.3-2976; 6.8 before 6.8.7-3481
CVE-2017-16771
6.1
1%
Mar 22
Cross-site scripting (XSS) vulnerability in Log Viewer in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote attackers to inject arbitrary web script or…
Affected: 6.8 before 6.8.3-3463; 6.3 before 6.3-2971
CVE-2017-12072
5.4
1%
Dec 20
Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or…
Affected: before 6.8.0-3456
CVE-2017-9555
5.4
1%
Aug 24
Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.0-3414 allows remote attackers to inject arbitrary web script or HTML via…
Affected: through 6.6.3-3347
CVE-2015-9102
5.4
1%
Jun 30
Multiple cross-site scripting (XSS) vulnerabilities in Synology Photo Station 6.0 before 6.0-2638 and 6.3 before 6.3-2962 allow remote authenticated attackers to inject arbitrary…
Affected: through 6.3-2960
CVE-2017-16769
5.3
2%
Feb 23
Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs…
Affected: 6.8.1-3458
CVE-2017-12080
5.3
1%
Dec 4
An information exposure vulnerability in default HTTP configuration file in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain…
Affected: 6.3 before 6.3-2970; 6.8 before 6.8.1-3458
Showing 11