VS
Product
Video Station
6
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 2Low 0
Watch
Add Video Station to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-33181 | 9.1 | Jun 1 | Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows remote authenticated users to send arbitrary request to… Affected: before 2.4.10-1632 |
| CVE-2017-9556 | 5.4 | Aug 11 | Cross-site scripting (XSS) vulnerability in Video Metadata Editor in Synology Video Station before 2.3.0-1435 allows remote authenticated attackers to inject arbitrary web script… Affected: through 2.2.1-1364 |
| CVE-2015-9105 | 5.4 | Jun 30 | Multiple cross-site scripting (XSS) vulnerabilities in Synology Video Station 1.2 before 1.2-0455, 1.5 before 1.5-0772, and 1.6 before 1.6-0847 allow remote authenticated… Affected: 1.2-0439; 1.2-0443; 1.2-0447; 1.2-0451; 1.2-0453; 1.5-0753; +8 more |
| CVE-2015-6912 | – | Sep 11 | Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitle_codepage parameter to subtitle.cgi Affected: through 1.5-0757 |
| CVE-2015-6911 | – | Sep 11 | SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL commands via the id parameter to watchstatus.cgi Affected: through 1.5-0757 |
| CVE-2015-6910 | – | Sep 11 | SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL commands via the id parameter to audiotrack.cgi Affected: through 1.5-0754 |
Showing 6