Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Synology Photo Station 6.8.14-3500 Clear all filters
TI-2021-09976 CVE-2021-29089 · GHSA-jp6v-hr4q-pxq2

SQL injection in Synology Photo Station

Priority MEDIUM 46

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo Station before 6.8.14-3500 allows remote attackers users to execute arbitrary SQ…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01929 Published 2021-06-02 Fixed in 6.8.14-3500 CWE-89
TI-2021-09977 CVE-2021-29090 · GHSA-qh9r-964g-2889

SQL injection in Synology Photo Station

Priority LOW 35

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary SQL…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01672 Published 2021-06-02 Fixed in 6.8.14-3500 CWE-89
TI-2021-09978 CVE-2021-29091 · GHSA-67j5-jjhw-3h9m

Path traversal in Synology Photo Station

Priority LOW 36

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.01143 Published 2021-06-02 Fixed in 6.8.14-3500 CWE-22