6.3.3341

DATE	CVE	VULNERABILITY TITLE	RISK
2018-02-27	CVE-2017-16770	Information Exposure vulnerability in Synology Surveillance Station File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the filename parameter. network low complexity synology CWE-200	4.0
2018-02-27	CVE-2017-16767	Cross-site Scripting vulnerability in Synology Surveillance Station Cross-site scripting (XSS) vulnerability in User Profile in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to inject arbitrary web script or HTML via the userDesc parameter. network synology CWE-79	3.5