Media Streaming Add-on (Qnap) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 60 known versions, newest CVE from 2026-03-20. Vendor: Qnap.
CVEs of Media Streaming Add-on
- CVE-2025-59383 - CVSS 9.1 (critical), 2026-03-20: A buffer overflow vulnerability has been reported to affect Media Streaming Add-On. The remote attackers can then exploit the vulnerability to modify memory…
- CVE-2024-56808 - CVSS 7.8 (high), 2026-02-11: A command injection vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access who have also gained a user…
- CVE-2024-56807 - CVSS 5.5 (medium), 2026-02-11: An out-of-bounds read vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access, they can then exploit the…
- CVE-2024-50395 - CVSS 8.8 (high), 2024-11-22: An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could…
- CVE-2023-47220 - CVSS 6.6 (medium), 2024-05-03: An OS command injection vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow authenticated…
- CVE-2023-47222 - CVSS 9.8 (critical), 2024-04-26: An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow users to…
- CVE-2023-23369 - CVSS 9.8 (critical), 2023-11-03: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to…
- CVE-2021-34362 - CVSS 8.7 (high), 2021-10-22: A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remote…
- CVE-2020-36195 - CVSS 9.8 (critical), 2021-04-17: An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability…
- CVE-2017-7640 - CVSS 9.8 (critical), 2018-03-08: QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system…
- CVE-2017-7638 - CVSS 6.5 (medium), 2018-03-08: QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly. Successful exploitation could…
- CVE-2017-7634 - CVSS 6.1 (medium), 2018-03-08: Cross-site scripting (XSS) vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to…
- CVE-2017-7641 - CVSS 8.8 (high), 2018-03-08: QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections.
