6693 matches found
CVE-2016-10330
Directory traversal vulnerability in synophotodsmuser, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local users to write to arbitrary files via unspecified vectors...
Directory traversal
Directory traversal vulnerability in synophotodsmuser, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local users to write to arbitrary files via unspecified vectors...
CVE-2016-10329
Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code via shell metacharacters in the crafted 'X-Forwarded-For' header...
CVE-2016-10331
Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary files via a full pathname in the id parameter...
CVE-2016-10329
Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code via shell metacharacters in the crafted 'X-Forwarded-For' header...
CVE-2016-10331
The vulnerability CVE-2016-10331 affects Synology Photo Station before version 6.5.3-3226. A directory traversal flaw exists in download.php that allows remote attackers to read arbitrary files by supplying a full pathname in the id parameter, due to improper path handling. The issue is confirmed...
CVE-2016-10329
Affected product: Synology Photo Station (prior to version 6.5.3-3226). Vulnerability: Command injection in login.php that allows remote attackers to execute arbitrary code through shell metacharacters in a crafted X-Forwarded-For header. Impact: Remote code execution with high risk (as noted by ...
CVE-2016-10330
Directory traversal vulnerability in synophotodsmuser, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local users to write to arbitrary files via unspecified vectors...
CVE-2016-10330
Synology Photo Station contains a directory traversal vulnerability in the synophoto_dsm_user SUID binary. A local attacker can write to arbitrary files due to path traversal in versions prior to 6.5.3-3226. Remediation: upgrade to Photo Station 6.5.3-3226 or later.
QNAP Photo Station and Music Station Authentication Bypass Vulnerability
QNAP Photo Station, Music Station is an application that displays photos and music stored in all shared folders. An authentication bypass vulnerability exists in QNAP Photo Station version 5.2.4 and Music Station version 4.8.4. The vulnerability allows attackers to bypass authentication to enter...
VulnCheck KEV: CVE-2017-20210
Photo Station 5.4.1 & 5.2.7 include the security fix for the vulnerability related to the XMR mining programs identified by internal research...
Photo Gallery by WD <= 1.3.35 - Authenticated SQL Injection
http://www.defensecode.com/advisories/DC-2017-02-011WordPressWebDoradoGalleryPluginAdvisory.pdf http://www.vulnerablesite.com/wp-admin/admin-ajax.php?action=addAlbumsGalleries&albumid=0%20AND%20SELECT%20%20FROM%20SELECTSLEEP5VvZV&width=700&height=550&bwgitemsperpage=20&bwgnonce=b939983df9&TBifram...
ClipBucket cross-site scripting vulnerability (CNVD-2017-05017)
ClipBucket is an open source video sharing software. The software allows you to share videos to video sites and supports the light off effect when watching a movie. A cross-site scripting vulnerability exists in ClipBucket version 2.7.0.5. A remote attacker can exploit this vulnerability by...
Synology Photo Station Security Bypass Vulnerability
Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A security bypass vulnerability exists in Synology Photo Station versions prior to 6.3-2958. The vulnerability can be exploited by a remote attacker to execute arbitrary commands by sending an...
Synology Photo Station Elevation of Privilege Vulnerability
Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. An elevation of privilege vulnerability exists in Synology Photo Station. A local attacker can exploit this vulnerability to gain privileges...
CVE-2016-10323
Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophotodsmuser --copy-no-ea" command...
Command injection
Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophotodsmuser --copy-no-ea" command...
CVE-2016-10323
Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophotodsmuser --copy-no-ea" command...
Design/Logic Flaw
Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HTTP header to photo/login.php...