4 matches found
CVE-2022-27611
Summary: CVE-2022-27611 is a path traversal vulnerability in the Synology Audio Station webapi component. An improper limitation of a pathname to a restricted directory enables remote authenticated users to delete arbitrary files via unspecified vectors. Affected product/version: Synology Audio S...
CVE-2015-9104
The CVE-2015-9104 entry documents a Cross-site scripting (XSS) vulnerability in Synology Audio Station. Affected versions are 5.1 before 5.1-2550 and 5.4 before 5.4-2857. The flaw allows remote authenticated attackers to inject arbitrary web script or HTML via the album title. No exploitation det...
CVE-2022-27612
The CVE-2022-27612 entry concerns Synology Audio Station, specifically the cgi component. A vulnerability described as a buffer copy without checking the input size (classic buffer overflow) exists in versions prior to 6.5.4-3367, enabling remote attackers to execute arbitrary commands via unspec...