Media Streaming Add-on (Qnap Systems Inc.) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-03-20. Vendor: Qnap Systems Inc..

CVEs of Media Streaming Add-on

CVE-2025-59383 - CVSS 9.1 (critical), 2026-03-20: A buffer overflow vulnerability has been reported to affect Media Streaming Add-On. The remote attackers can then exploit the vulnerability to modify memory…
CVE-2024-56808 - CVSS 7.8 (high), 2026-02-11: A command injection vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access who have also gained a user…
CVE-2024-56807 - CVSS 5.5 (medium), 2026-02-11: An out-of-bounds read vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access, they can then exploit the…
CVE-2024-50395 - CVSS 8.8 (high), 2024-11-22: An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could…
CVE-2023-47220 - CVSS 6.6 (medium), 2024-05-03: An OS command injection vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow authenticated…
CVE-2023-47222 - CVSS 9.8 (critical), 2024-04-26: An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow users to…
CVE-2023-23369 - CVSS 9.8 (critical), 2023-11-03: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to…
CVE-2021-34362 - CVSS 8.7 (high), 2021-10-22: A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remote…
CVE-2020-36195 - CVSS 9.8 (critical), 2021-04-17: An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability…