Lucene search

K
QnapPhoto Station6.4.0

8 matches found

CVE
CVE
added 2024/03/08 5:15 p.m.43 views

CVE-2023-47221

A path traversal vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version:Photo...

5.5CVSS5.2AI score0.00046EPSS
CVE
CVE
added 2024/11/22 4:15 p.m.41 views

CVE-2024-32770

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. We have already fixed the vulnerability in the following version:Photo Station 6.4.3 ( 2024/07/12 ...

6.3CVSS6AI score0.00102EPSS
CVE
CVE
added 2024/11/22 4:15 p.m.35 views

CVE-2024-32769

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. We have already fixed the vulnerability in the following version:Photo Station 6.4.3 ( 2024/07/12 ...

6.3CVSS6AI score0.00102EPSS
CVE
CVE
added 2024/11/22 4:15 p.m.34 views

CVE-2024-32768

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. We have already fixed the vulnerability in the following version:Photo Station 6.4.3 ( 2024/07/12 ...

6.3CVSS6AI score0.00102EPSS
CVE
CVE
added 2024/02/02 4:15 p.m.31 views

CVE-2023-47561

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version:Photo Station 6.4.2 ( 2023/12/15 ) and later

5.5CVSS5.6AI score0.00104EPSS
CVE
CVE
added 2024/11/22 4:15 p.m.31 views

CVE-2024-32767

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. We have already fixed the vulnerability in the following version:Photo Station 6.4.3 ( 2024/07/12 ...

6.3CVSS6AI score0.00102EPSS
CVE
CVE
added 2024/02/02 4:15 p.m.29 views

CVE-2023-47562

An OS command injection vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version:Photo Station 6.4.2 ( 2023/12/15 ) and later

8.8CVSS8.8AI score0.00362EPSS
CVE
CVE
added 2025/08/29 5:15 p.m.6 views

CVE-2024-12923

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version:Photo Sta...

5.4CVSS5.3AI score0.00074EPSS