PT-2018-6336

Name of the Vulnerable Software and Affected Versions: Synology Photo Station versions prior to 6.8.3-3463 Synology Photo Station versions prior to 6.3-2971 Description: The issue is related to improper input validation in the SYNOPHOTO Flickr MultiUpload function. This allows remote authenticate...

CVE-2017-16771: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Log Viewer in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

Leizi technology station building cms v1.0 there are arbitrary file editing vulnerabilities

Leizi technology station cms is a set of website source program developed independently by Chongqing Leizi technology computer company. Leizi technology station cms v1.0 there are arbitrary file editing vulnerability. The vulnerability is due to the program to edit the file name and write the...

Denial of Service Vulnerability in Auto Station

Auto Station is a PLC-IVC series programming software from INVT. Auto Station suffers from a denial of service vulnerability. When the input 'data content' is more or less than its corresponding 'length', an attacker can obtain a null address via the GetVauleName function, resulting in a denial o...

Synology Surveillance Station Cross-Site Scripting Vulnerability

Synology Surveillance Station is a video management application from Synology, and User Profile is one of the user information storage files. A cross-site scripting vulnerability exists in User Profile in Synology Surveillance Station versions prior to 8.1.2-5469. A remote attacker can exploit th...

Synology Surveillance Station File and Directory Information Disclosure Vulnerability

Synology Surveillance Station is a video management application from Synology, and User Profile is one of the user information storage files. An information disclosure vulnerability exists in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station versions prior to...

CVE-2017-16770

File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the filename parameter...

CVE-2017-16767

Cross-site scripting XSS vulnerability in User Profile in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to inject arbitrary web script or HTML via the userDesc parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in User Profile in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to inject arbitrary web script or HTML via the userDesc parameter...

CVE-2017-16770

File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the filename parameter...

Information disclosure

File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the filename parameter...

CVE-2017-16767

Cross-site scripting XSS vulnerability in User Profile in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to inject arbitrary web script or HTML via the userDesc parameter...

CVE-2017-16767

Summary: CVE-2017-16767 is a cross-site scripting (XSS) vulnerability in the User Profile feature of Synology Surveillance Station. The issue affects versions prior to 8.1.2-5469. An attacker with remote authenticated access can inject arbitrary web script or HTML via the userDesc parameter, pote...

CVE-2017-16767

Cross-site scripting XSS vulnerability in User Profile in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to inject arbitrary web script or HTML via the userDesc parameter...

CVE-2017-16770

CVE-2017-16770 affects Synology Surveillance Station, specifically SYNO.SurveillanceStation.PersonalSettings.Photo. Affected: Surveillance Station before 8.1.2-5469. Issue: file and directory information disclosure; remote authenticated users can obtain other users’ sensitive files via the filena...

CVE-2017-16767: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in User Profile in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to inject arbitrary web script or HTML via the userDesc parameter...

PT-2018-6334

Name of the Vulnerable Software and Affected Versions: Synology Surveillance Station versions prior to 8.1.2-5469 Description: The issue allows remote authenticated users to obtain other users' sensitive files. This is achieved via the filename parameter in the...

PT-2018-6331

Name of the Vulnerable Software and Affected Versions: Synology Surveillance Station versions prior to 8.1.2-5469 Description: A cross-site scripting XSS issue exists in the User Profile component, allowing remote authenticated users to inject arbitrary web script or HTML via the userDesc...

CVE-2017-16770: Insertion of Sensitive Information into Externally-Accessible File or Directory

File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the filename parameter...

Wireshark NBAP Parser Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.NBAP dissector is one of the Base Station Application Partial Protocol parsers. ...