Synology Photo Station
Approved changes feed: RSS · Atom
cpe:2.3:a:synology:synology_photo_station:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Synology (65464e9b-7339-559d-9719-837f074e0220) |
|---|---|
| Product | Synology Photo Station (1989aa53-bac2-589a-ba05-cc8458e569dd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-29092 |
vulnerable | 2026-06-08 05:31:25.836147 |
Details available
HIGH (8.8)
Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Published: 2021-06-01T09:45:16.520Z
Updated: 2024-09-16T19:05:47.001Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29091 |
vulnerable | 2026-06-08 05:31:25.835818 |
Details available
HIGH (7.7)
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors.
Published: 2021-06-02T02:00:11.061Z
Updated: 2024-09-16T17:17:50.578Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29090 |
vulnerable | 2026-06-08 05:31:25.835356 |
Details available
HIGH (7.2)
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary SQL command via unspecified vectors.
Published: 2021-06-02T02:00:14.204Z
Updated: 2024-09-17T03:29:04.856Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29089 |
vulnerable | 2026-06-08 05:31:25.833647 |
Details available
CRITICAL (9.8)
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo Station before 6.8.14-3500 allows remote attackers users to execute arbitrary SQL commands via unspecified vectors.
Published: 2021-06-02T02:15:10.069Z
Updated: 2024-09-16T21:04:38.021Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9555 |
vulnerable | 2026-06-08 05:10:10.156689 |
Details available
Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.0-3414 allows remote attackers to inject arbitrary web script or HTML via the image parameter.
Published: 2017-08-24T19:00:00.000Z
Updated: 2024-09-17T03:44:20.400Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9552 |
vulnerable | 2026-06-08 05:10:10.139642 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16769 |
vulnerable | 2026-06-08 05:09:01.043879 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12071 |
vulnerable | 2026-06-08 05:08:38.697483 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11162 |
vulnerable | 2026-06-08 05:08:36.945513 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11161 |
vulnerable | 2026-06-08 05:08:36.945209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11155 |
vulnerable | 2026-06-08 05:08:36.933833 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11154 |
vulnerable | 2026-06-08 05:08:36.933510 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11153 |
vulnerable | 2026-06-08 05:08:36.933188 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11152 |
vulnerable | 2026-06-08 05:08:36.932827 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11151 |
vulnerable | 2026-06-08 05:08:36.930360 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10331 |
vulnerable | 2026-06-08 05:07:17.782075 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10330 |
vulnerable | 2026-06-08 05:07:17.781735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10329 |
vulnerable | 2026-06-08 05:07:17.781286 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.