Synology

Surveillance Station

25 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-29239

  • EPSS 0.59%
  • Veröffentlicht 28.03.2024 07:16:10
  • Zuletzt bearbeitet 04.08.2025 19:08:26

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Recording.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to r...

5.4

CVE-2024-29237

  • EPSS 0.59%
  • Veröffentlicht 28.03.2024 07:16:09
  • Zuletzt bearbeitet 04.08.2025 19:08:31

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in ActionRule.Delete webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read data...

5.4

CVE-2024-29238

  • EPSS 0.59%
  • Veröffentlicht 28.03.2024 07:16:09
  • Zuletzt bearbeitet 04.08.2025 19:08:28

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read da...

5.4

CVE-2024-29236

  • EPSS 0.59%
  • Veröffentlicht 28.03.2024 07:16:08
  • Zuletzt bearbeitet 04.08.2025 19:08:33

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in AudioPattern.Delete webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read da...

5.4

CVE-2024-29235

  • EPSS 0.59%
  • Veröffentlicht 28.03.2024 07:16:07
  • Zuletzt bearbeitet 04.08.2025 19:08:36

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in IOModule.EnumLog webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read datab...

5.4

CVE-2024-29234

  • EPSS 0.59%
  • Veröffentlicht 28.03.2024 07:16:06
  • Zuletzt bearbeitet 04.08.2025 19:08:39

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Group.Save webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database co...

5.4

CVE-2024-29233

  • EPSS 0.59%
  • Veröffentlicht 28.03.2024 07:16:06
  • Zuletzt bearbeitet 04.08.2025 19:08:42

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Emap.Delete webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database c...

5.4

CVE-2024-29232

  • EPSS 0.59%
  • Veröffentlicht 28.03.2024 07:16:05
  • Zuletzt bearbeitet 04.08.2025 19:08:46

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Alert.Enum webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database co...

5.4

CVE-2024-29231

  • EPSS 0.65%
  • Veröffentlicht 28.03.2024 07:16:04
  • Zuletzt bearbeitet 04.08.2025 19:09:15

Improper validation of array index vulnerability in UserPrivilege.Enum webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain non-sensitive information and conduct limited denia...

5.4

CVE-2024-29230

  • EPSS 0.59%
  • Veröffentlicht 28.03.2024 07:16:03
  • Zuletzt bearbeitet 04.08.2025 19:09:18

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in SnapShot.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to re...