Synology Moments — known CVE vulnerabilities

Every CVE whose affected-product data names Synology Moments, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2019-11826 — CVSS 8.0 (high): Relative path traversal vulnerability in SYNO.PhotoTeam.Upload.Item in Synology Moments before 1.3.0-0691 allows remote authenticated users…
• CVE-2018-13298 — CVSS 4.2 (medium): Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man-in-the-middle…