Vulnerabilities (CVE)

Filtered by vendor Synology Subscribe
Filtered by product Video Station
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-9556 1 Synology 1 Video Station 2019-10-09 3.5 LOW 5.4 MEDIUM
Cross-site scripting (XSS) vulnerability in Video Metadata Editor in Synology Video Station before 2.3.0-1435 allows remote authenticated attackers to inject arbitrary web script or HTML via the title parameter.
CVE-2015-9105 1 Synology 1 Video Station 2019-10-09 3.5 LOW 5.4 MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in Synology Video Station 1.2 before 1.2-0455, 1.5 before 1.5-0772, and 1.6 before 1.6-0847 allow remote authenticated attackers to inject arbitrary web script or HTML via the (1) file name or (2) collection name of videos.