Photo Station@* Security Vulnerabilities and Issues — Photo Station@* CVE List

Lucene search

SynologyPhoto Station*

3 matches found

CVE•added 2022/07/06 8:15 a.m.•65 views

CVE-2022-22681

Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors.

8.1CVSS7.5AI score0.00356EPSS

CVE•added 2017/12/20 6:29 p.m.•50 views

CVE-2017-12072

Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter.

5.4CVSS5.1AI score0.00187EPSS

CVE•added 2017/04/10 6:59 p.m.•46 views

CVE-2016-10323

Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophoto_dsm_user --copy-no-ea" command.

7.8CVSS7.6AI score0.0004EPSS