Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

synology / note_station CVEs

Beta · best-effort

5 CVEs tagged to synology / note_station — 0 Critical, 0 High, 5 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to synology vendor archive

CVE-2022-27619

Published Aug 3, 2022

Cleartext transmission of sensitive information vulnerability in authentication management in Synology Note Station Client before 2.2.2-609 allows man-in-the-middle attackers to o…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-11827

Published Jun 30, 2019

Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Shard in Synology Note Station before 2.5.3-0863 allows remote attackers to inject arbitrary web script or HTML via th…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-8912

Published May 9, 2018

Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Note in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HT…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-8911

Published May 9, 2018

Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HTML…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2015-9103

Published Jun 30, 2017

Multiple cross-site scripting (XSS) vulnerabilities in Synology Note Station 1.1-0212 and earlier allow remote authenticated attackers to inject arbitrary web script or HTML via t…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1