Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper validation of array index vulnerability in UserPrivilege.Enum webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 2 products
🔴 scitokens, SQL Injection, #CVE-2024-29231 (Critical) https://dailycve.com/scitokens-sql-injection-cve-2024-29231-critical/
Post summary
The sentence only announces a critical SQL injection vulnerability (CVE‑2024‑29231) in scitokens, without mentioning any PoC, exploit, or remediation.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | synology | diskstation_manager | 6.2 | - | - |
| OS | synology | diskstation_manager | 7.1 | - | - |
| OS | synology | diskstation_manager | 7.2 | - | - |
| App | synology | surveillance_station | - | - | - |