CVE-2017-20210
Published Nov 11, 2025Photo Station 5.4.1 & 5.2.7 include the security fix for the vulnerability related to the XMR mining programs identified by internal research.
Vendor/product archive
qnap / photo_station CVEs
Beta · best-effort26 CVEs tagged to qnap / photo_station — 5 Critical, 6 High, 14 Medium, 1 Low, 0 Unrated.
CVE-2024-12923
Published Aug 29, 2025A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass…
CVE-2024-32770
Published Nov 22, 2024A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to i…
CVE-2024-32769
Published Nov 22, 2024A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to i…
CVE-2024-32768
Published Nov 22, 2024A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to i…
CVE-2024-32767
Published Nov 22, 2024A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to i…
CVE-2023-47221
Published Mar 8, 2024A path traversal vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpect…
CVE-2023-47562
Published Feb 2, 2024An OS command injection vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network.…
CVE-2023-47561
Published Feb 2, 2024A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via…
CVE-2022-27593
Published Sep 8, 2022An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify sys…
- evidence mentions
- 4
- Buzz score
- 47.6
CVE-2021-44057
Published May 5, 2022An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the securit…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2021-34356
Published Oct 1, 2021A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows remote attackers to inject malici…
CVE-2021-34355
Published Oct 1, 2021A cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious…
CVE-2021-34354
Published Oct 1, 2021A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows remote attackers to inject malici…
CVE-2020-2502
Published Feb 17, 2021This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions…
CVE-2020-2491
Published Dec 10, 2020This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2018-19956
Published Nov 2, 2020The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the vulnerability could allow remote attackers to inject malici…
CVE-2018-19955
Published Nov 2, 2020The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the vulnerability could allow remote attackers to inject malici…
CVE-2018-19954
Published Nov 2, 2020The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the vulnerability could allow remote attackers to inject malici…
CVE-2019-7195
Published Dec 5, 2019This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station…
- evidence mentions
- 2
- Buzz score
- 42.5
CVE-2019-7194
Published Dec 5, 2019This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station…
- evidence mentions
- 2
- Buzz score
- 42.5
CVE-2019-7192
Published Dec 5, 2019This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station t…
- evidence mentions
- 3
- Buzz score
- 45.4
CVE-2018-0722
Published Feb 1, 2019Path Traversal vulnerability in Photo Station versions: 5.7.2 and earlier in QTS 4.3.4, 5.4.4 and earlier in QTS 4.3.3, 5.2.8 and earlier in QTS 4.2.6 could allow remote attackers…
CVE-2018-0715
Published Aug 27, 2018Cross-site scripting vulnerability in QNAP Photo Station versions 5.7.0 and earlier could allow remote attackers to inject Javascript code in the compromised application.
CVE-2017-13073
Published Apr 23, 2018Cross-site scripting (XSS) vulnerability in QNAP NAS application Photo Station versions 5.2.7, 5.4.3, and their earlier versions could allow remote attackers to inject arbitrary w…
Showing 1-25 of 26 CVEsPage 1 of 2