Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Synology Photo Station 6.3-2975, 6.8.5-3471 Clear all filters
TI-2018-06464 CVE-2018-8926 · GHSA-mr65-chc3-q36v

Permissive regular expression vulnerability in synophoto_dsm_user in Synology Photo…

Priority MEDIUM 41

Permissive regular expression vulnerability in synophoto_dsm_user in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote authenticated users to conduct privilege escalation attacks via the fullname…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01713 Published 2018-06-08 Fixed in 6.8.5-3471, 6.3-2975 CWE-625
TI-2018-06463 CVE-2018-8925 · GHSA-mqrx-5gr3-m8p8

Cross-site request forgery in Synology Photo Station

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in admin/user.php in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote attackers to hijack the authentication of administrators via the (1) usernam…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00735 Published 2018-06-08 Fixed in 6.8.5-3471, 6.3-2975 CWE-352