Login Request a demo
SP
Product
Synology Photo Station
by Synology · last CVE Jun 2, 2021
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 5High 8Medium 5Low 0
Severity
All severities19Critical5High8Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Synology Photo Station to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-29089
9.8
2%
Jun 2
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo Station before 6.8.14-3500 allows…
Affected: before 6.8.14-3500
CVE-2017-11161
9.8
1%
Sep 8
Multiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allow remote attackers to execute arbitrary SQL commands via the (1) article_id…
Affected: before 6.7.4-3433 and 6.3-2968
CVE-2017-11151
9.8
16%
Aug 8
A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the…
Affected: before 6.7.3-3432 and 6.3-2967
CVE-2017-11153
9.8
12%
Aug 8
Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to gain administrator privileges via a…
Affected: before 6.7.3-3432 and 6.3-2967
CVE-2016-10329
9.8
41%
May 12
Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code via shell metacharacters in the crafted…
Affected: All versions prior to version 6.5.3-3226
Showing 5