Approved changes feed: RSS · Atom

cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSynology (65464e9b-7339-559d-9719-837f074e0220)
ProductPhoto Station (3603953a-809e-5c9d-a4f3-e0adf12696c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10443 vulnerable 2026-06-08 06:23:46.586740 Details available
CRITICAL (9.8)
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manager component in Synology BeePhotos before 1.0.2-10026 and 1.1.0-10053 and Synology Photos before 1.6.2-0720 and 1.7.0-0795 allows remote attackers to execute arbitrary code via unspecified vectors.
Published: 2024-11-15T10:23:51.233Z
Updated: 2025-09-16T06:02:16.158Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22681 vulnerable 2026-06-08 05:40:54.886996 Details available
HIGH (8.1)
Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors.
Published: 2022-07-06T07:35:10.641Z
Updated: 2024-09-16T16:18:01.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29092 vulnerable 2026-06-08 05:31:25.836180 Details available
HIGH (8.8)
Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Published: 2021-06-01T09:45:16.520Z
Updated: 2024-09-16T19:05:47.001Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29091 vulnerable 2026-06-08 05:31:25.835853 Details available
HIGH (7.7)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors.
Published: 2021-06-02T02:00:11.061Z
Updated: 2024-09-16T17:17:50.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29090 vulnerable 2026-06-08 05:31:25.835398 Details available
HIGH (7.2)
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary SQL command via unspecified vectors.
Published: 2021-06-02T02:00:14.204Z
Updated: 2024-09-17T03:29:04.856Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29089 vulnerable 2026-06-08 05:31:25.834955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11822 vulnerable 2026-06-08 05:12:38.145752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11821 vulnerable 2026-06-08 05:12:38.145348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8926 vulnerable 2026-06-08 05:12:06.712112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8925 vulnerable 2026-06-08 05:12:06.711663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13282 vulnerable 2026-06-08 05:10:51.113359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9555 vulnerable 2026-06-08 05:10:10.158230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16772 vulnerable 2026-06-08 05:09:01.046599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16771 vulnerable 2026-06-08 05:09:01.046258 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12080 vulnerable 2026-06-08 05:08:38.709572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12079 vulnerable 2026-06-08 05:08:38.709265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12072 vulnerable 2026-06-08 05:08:38.697898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12071 vulnerable 2026-06-08 05:08:38.697528 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11162 vulnerable 2026-06-08 05:08:36.945544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11161 vulnerable 2026-06-08 05:08:36.945247 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11155 vulnerable 2026-06-08 05:08:36.933866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11154 vulnerable 2026-06-08 05:08:36.933539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11153 vulnerable 2026-06-08 05:08:36.933219 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11152 vulnerable 2026-06-08 05:08:36.932867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11151 vulnerable 2026-06-08 05:08:36.931494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10331 vulnerable 2026-06-08 05:07:17.782105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10330 vulnerable 2026-06-08 05:07:17.781774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10329 vulnerable 2026-06-08 05:07:17.781336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10323 vulnerable 2026-06-08 05:07:17.768184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10322 vulnerable 2026-06-08 05:07:17.767863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9102 vulnerable 2026-06-08 05:07:12.689637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4656 vulnerable 2026-06-08 05:06:40.399247 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.