Vulnerabilities (CVE)

Filtered by vendor Synology Subscribe
Filtered by product Video Station
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-6910 1 Synology 1 Video Station 2018-10-09 7.5 HIGH N/A
SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL commands via the id parameter to audiotrack.cgi.
CVE-2015-6911 1 Synology 1 Video Station 2018-10-09 7.5 HIGH N/A
SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL commands via the id parameter to watchstatus.cgi.
CVE-2015-6912 1 Synology 1 Video Station 2018-10-09 10.0 HIGH N/A
Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitle_codepage parameter to subtitle.cgi.