Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 10:04 a.m.•16 views

CVE-2024-29236

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in AudioPattern.Delete webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and...

5.4CVSS6.6AI score0.00586EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/28 7:16 a.m.•32 views

CVE-2024-29236

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in AudioPattern.Delete webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and...

5.4CVSS5.7AI score0.00586EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/28 6:27 a.m.•19 views

CVE-2024-29236

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in AudioPattern.Delete webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and...

5.4CVSS6.5AI score0.00586EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/28 6:27 a.m.•45 views

CVE-2024-29236

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in AudioPattern.Delete webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and...

5.4CVSS6.1AI score0.00586EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/28 6:27 a.m.•93 views

CVE-2024-29236

Synology Surveillance Station is affected by CVE-2024-29236 due to an SQL injection vulnerability in the AudioPattern.Delete webapi component. The flaw arises from improper neutralization of special elements used in SQL commands, enabling remote authenticated users to read the database and cause ...

5.4CVSS6.5AI score0.00586EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/28 12:00 a.m.•5 views

CVE-2024-29236: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in AudioPattern.Delete webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and...

5.4CVSS5.9AI score0.00586EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•4 views

PT-2024-22832

Name of the Vulnerable Software and Affected Versions Synology Surveillance Station versions prior to 9.2.0-9289 Synology Surveillance Station versions prior to 9.2.0-11289 Description The issue is related to an improper neutralization of special elements used in an SQL command, also known as 'SQ...

8.8CVSS5.8AI score0.00586EPSS
SaveExploits0References6
Rows per page
Query Builder