Synology Photo Station vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SP

Product

Synology Photo Station

by Synology · last CVE Jun 2, 2021

19

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities19 In the news0 Timeline

Severity mix

Critical 5High 8Medium 5Low 0

Severity

All severities19 Critical5 High8 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Synology Photo Station to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-29092	8.8	2%	Jun 1	Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to… Affected: before 6.8.14-3500
CVE-2017-9552	7.8	0%	Jun 13	A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline Affected: 6.0-2528 through 6.7.1-3419
CVE-2017-11155	7.5	47%	Aug 8	An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to obtain sensitive system information via… Affected: before 6.7.3-3432 and 6.3-2967
CVE-2017-11152	7.5	15%	Aug 8	Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to write arbitrary files via the path… Affected: before 6.7.3-3432 and 6.3-2967
CVE-2016-10331	7.5	2%	May 12	Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary files via a full pathname in the id… Affected: All versions prior to version 6.5.3-3226
CVE-2021-29090	7.2	2%	Jun 2	Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Station before 6.8.14-3500 allows remote… Affected: before 6.8.14-3500
CVE-2017-11154	7.2	9%	Aug 8	Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to create arbitrary PHP scripts… Affected: before 6.7.3-3432 and 6.3-2967
CVE-2016-10330	7.1	1%	May 12	Directory traversal vulnerability in synophoto_dsm_user, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local users to write to arbitrary files via… Affected: All versions prior to version 6.5.3-3226