Approved changes feed: RSS · Atom

cpe:2.3:a:synology:synology_video_station:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSynology (65464e9b-7339-559d-9719-837f074e0220)
ProductSynology Video Station (79a04fe2-a1f2-5a46-963c-77634eefe7d8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-33181 vulnerable 2026-06-08 05:32:10.965437 Details available
MEDIUM (6.6)
Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows remote authenticated users to send arbitrary request to intranet resources via unspecified vectors.
Published: 2021-06-01T09:50:22.302Z
Updated: 2024-09-17T03:34:24.558Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9556 vulnerable 2026-06-08 05:10:10.159217 Details available
Cross-site scripting (XSS) vulnerability in Video Metadata Editor in Synology Video Station before 2.3.0-1435 allows remote authenticated attackers to inject arbitrary web script or HTML via the title parameter.
Published: 2017-08-11T20:00:00.000Z
Updated: 2024-09-16T17:03:18.742Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.