Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:4 a.m.9 views

CVE-2024-29238

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in Log.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and...

5.4CVSS6.6AI score0.00586EPSS
Exploits0References1
NVD
NVD
added 2024/03/28 7:16 a.m.11 views

CVE-2024-29238

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in Log.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and...

5.4CVSS5.7AI score0.00586EPSS
Exploits0References1
CVE
CVE
added 2024/03/28 6:28 a.m.73 views

CVE-2024-29238

Synology Surveillance Station is affected by an SQL Injection in the Log.CountByCategory webapi component. The issue arises from improper neutralization of elements in SQL commands, allowing remote authenticated users to read database contents (non-sensitive data) and perform limited denial-of-se...

5.4CVSS6.5AI score0.00586EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/28 6:28 a.m.22 views

CVE-2024-29238

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in Log.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and...

5.4CVSS6.1AI score0.00586EPSS
Exploits0References1
Rows per page
Query Builder