Qnap Photo Station vulnerabilities, page 2

26 vulnerabilities

Known vulnerabilities in Qnap Photo Station, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2019-7195qnapphoto_stationKEVRansomware
EPSS score
89.68%
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.9.8CVE-2019-7192qnapphoto_stationKEVRansomware
EPSS score
88.10%
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.9.8CVE-2019-7194qnapphoto_stationKEVRansomware
EPSS score
82.71%
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.8.8CVE-2023-47562qnap systems inc.photo station+1
EPSS score
1.11%
An OS command injection vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: Photo Station 6.4.2 ( 2023/12/15 ) and later5.5CVE-2023-47221qnap systems inc.photo station+1
EPSS score
0.45%
A path traversal vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: Photo Station 6.4.2 ( 2023/12/15 ) and later5.5CVE-2023-47561qnap systems inc.photo station+1
EPSS score
0.26%
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Photo Station 6.4.2 ( 2023/12/15 ) and later