Advisories · Technology

Synology Photo Station.

Every CVE that names Synology Photo Station among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-22681 CVE record

CVSS 8.1 High

Session fixation in Synology Photo Station
- Synology Photo Station
- Authentication bypass
Not analysed yet 6 Jul 2022
CVE-2021-29089 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

SQL injection in Synology Photo Station
- Synology Photo Station
- SQL injection
Not analysed yet 2 Jun 2021
CVE-2021-29090 CVE record

CVSS 7.2 High

SQL injection in Synology Photo Station
- Synology Photo Station
- SQL injection
Not analysed yet 2 Jun 2021
CVE-2021-29091 CVE record

CVSS 7.7 High

Path traversal in Synology Photo Station
- Synology Photo Station
- Path traversal
Not analysed yet 2 Jun 2021
CVE-2021-29092 CVE record

CVSS 8.8 High

Unrestricted file upload in Synology Photo Station
- Synology Photo Station
- Unrestricted file upload
Not analysed yet 1 Jun 2021
CVE-2019-11822 CVE record

CVSS 4.3 Medium

Path traversal in Synology Photo Station
- Synology Photo Station
- Path traversal
Not analysed yet 30 Jun 2019
CVE-2019-11821 CVE record

CVSS 7.3 High

SQL injection in Synology Photo Station
- Synology Photo Station
- SQL injection
Not analysed yet 30 Jun 2019
CVE-2018-13282 CVE record

CVSS 5.6 Medium

Session fixation in Synology Photo Station
- Synology Photo Station
- Authentication bypass
Not analysed yet 31 Oct 2018
CVE-2018-8926 CVE record

CVSS 8.8 High

Synology Photo Station: Permissive regular expression vulnerability in synophoto_dsm_user in Synology Photo…
- Synology Photo Station
- CWE-625
Not analysed yet 8 Jun 2018
CVE-2018-8925 CVE record

CVSS 8.8 High

Synology Photo Station: Cross-site request forgery (CSRF) vulnerability in admin/user.php in Synology Photo…
- Synology Photo Station
Not analysed yet 8 Jun 2018
CVE-2017-16772 CVE record

Unrestricted file upload in Synology Photo Station
- Synology Photo Station
- Unrestricted file upload
Not analysed yet 22 Mar 2018
CVE-2017-16771 CVE record

Cross-site scripting in Synology Photo Station
- Synology Photo Station
- Cross-site scripting (XSS)
Not analysed yet 22 Mar 2018
CVE-2017-16769 CVE record

Exposure of personal information in Synology Photo Station
- Synology Photo Station
- Information disclosure
Not analysed yet 23 Feb 2018
CVE-2017-12072 CVE record

Cross-site scripting in Synology Photo Station
- Synology Photo Station
- Cross-site scripting (XSS)
Not analysed yet 20 Dec 2017
CVE-2017-12080 CVE record

Information disclosure in Synology Photo Station
- Synology Photo Station
- Information disclosure
Not analysed yet 4 Dec 2017
CVE-2017-12079 CVE record

Files accessible to external parties in Synology Photo Station
- Synology Photo Station
- Information disclosure
Not analysed yet 4 Dec 2017
CVE-2017-12071 CVE record

Server-side request forgery in Synology Photo Station
- Synology Photo Station
- Server-side request forgery (SSRF)
Not analysed yet 8 Sept 2017
CVE-2017-11162 CVE record

Path traversal in Synology Photo Station
- Synology Photo Station
- Path traversal
Not analysed yet 8 Sept 2017
CVE-2017-11161 CVE record

SQL injection in Synology Photo Station
- Synology Photo Station
- SQL injection
Not analysed yet 8 Sept 2017
CVE-2017-9555 CVE record

Cross-site scripting in Synology Photo Station
- Synology Photo Station
- Cross-site scripting (XSS)
Not analysed yet 24 Aug 2017
CVE-2017-11155 CVE record

Synology Photo Station: An information exposure vulnerability in index.php in Synology Photo Station before…
- Synology Photo Station
- CWE-205
Not analysed yet 8 Aug 2017
CVE-2017-11154 CVE record

Unrestricted file upload in Synology Photo Station
- Synology Photo Station
- Unrestricted file upload
Not analysed yet 8 Aug 2017
CVE-2017-11153 CVE record

Deserialization of untrusted data in Synology Photo Station
- Synology Photo Station
- Insecure deserialization
Not analysed yet 8 Aug 2017
CVE-2017-11152 CVE record

Path traversal in Synology Photo Station
- Synology Photo Station
- Path traversal
Not analysed yet 8 Aug 2017
CVE-2017-11151 CVE record

Improper authentication in Synology Photo Station
- Synology Photo Station
- Authentication bypass
Not analysed yet 8 Aug 2017
CVE-2015-9102 CVE record

Cross-site scripting in Synology Photo Station
- Synology Photo Station
- Cross-site scripting (XSS)
Not analysed yet 30 Jun 2017
CVE-2017-9552 CVE record

Insufficiently protected credentials in Synology Photo Station
- Synology Photo Station
- Hard-coded credentials
Not analysed yet 13 Jun 2017
CVE-2016-10331 CVE record

Path traversal in Synology Photo Station
- Synology Photo Station
- Path traversal
Not analysed yet 12 May 2017
CVE-2016-10330 CVE record

Path traversal in Synology Photo Station
- Synology Photo Station
- Path traversal
Not analysed yet 12 May 2017
CVE-2016-10329 CVE record

Command injection in Synology Photo Station
- Synology Photo Station
- Command injection
Not analysed yet 12 May 2017