Music Station (Qnap) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 68 known versions, newest CVE from 2024-09-06. Vendor: Qnap.
CVEs of Music Station
- CVE-2023-45038 - CVSS 8.8 (high), 2024-09-06: An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the…
- CVE-2023-39299 - CVSS 7.5 (high), 2023-11-03: A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to read the contents of unexpected…
- CVE-2023-23365 - CVSS 7.7 (high), 2023-10-06: A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the contents…
- CVE-2023-23366 - CVSS 7.7 (high), 2023-10-06: A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the contents…
- CVE-2020-36197 - CVSS 8.8 (high), 2021-05-13: An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited, this vulnerability allows attackers to…
- CVE-2020-2494 - CVSS 6.1 (medium), 2020-12-10: This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in the…
- CVE-2018-19952 - CVSS 7.5 (high), 2020-11-02: If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information. This issue affects: QNAP Systems Inc. Music…
- CVE-2018-19951 - CVSS 6.1 (medium), 2020-11-02: If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Music…
- CVE-2018-19950 - CVSS 9.8 (critical), 2020-11-02: If exploited, this command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Music…
- CVE-2019-7185 - CVSS 4.8 (medium), 2019-12-05: This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management…
- CVE-2018-0729 - CVSS 9.8 (critical), 2019-12-04: This command injection vulnerability in Music Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend…
- CVE-2018-0718 - CVSS 9.8 (critical), 2018-09-14: Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands…
- CVE-2017-13069 - CVSS 9.8 (critical), 2017-10-06: QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier. If…
