Lucene search
+L

4553 matches found

CNVD
CNVD
added 2019/12/09 12:00 a.m.18 views

QNAP Systems QNAP Music Station Cross-Site Scripting Vulnerability

QNAP Systems QNAP Music Station is a music playback and management application from QNAP Systems. A cross-site scripting vulnerability exists in QNAP Systems Music Station. The vulnerability stems from a lack of proper validation of client data in the web application. An attacker can exploit this...

4.8CVSS8.8AI score0.01456EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2019/12/06 10:54 a.m.7 views

school-of-music.focus.tv Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1031812 Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting school-of-music.focus.tv...

0.1AI score
SaveExploits0
OSV
OSV
added 2019/12/05 5:15 p.m.11 views

CVE-2019-7185

This cross-site scripting XSS vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions...

4.8CVSS5.8AI score0.01456EPSS
SaveExploits0References1
NVD
NVD
added 2019/12/05 5:15 p.m.18 views

CVE-2019-7185

This cross-site scripting XSS vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions...

4.8CVSS5AI score0.01456EPSS
SaveExploits0References1
Prion
Prion
added 2019/12/05 5:15 p.m.22 views

Cross site scripting

This cross-site scripting XSS vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions...

3.5CVSS5AI score0.01456EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/12/05 4:48 p.m.66 views

CVE-2019-7185

CVE-2019-7185 is an XSS vulnerability in QNAP Music Station. Multiple connected sources (Red Hat, CNVD, OpenVAS, etc.) confirm a cross-site scripting flaw in the Music Station web interface that allows remote attackers to inject and execute scripts in the administrator’s management console. Root ...

4.8CVSS5.1AI score0.01456EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/12/05 4:48 p.m.36 views

CVE-2019-7185

This cross-site scripting XSS vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions...

5.2AI score0.01456EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/12/05 12:00 a.m.46 views

QNAP QTS Multiple Vulnerabilities (NAS-201911-27)

QNAP QTS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; if description...

9.8CVSS8.2AI score0.01614EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/12/05 12:00 a.m.42 views

QNAP QTS Music Station RCE Vulnerability (NAS-201911-20)

QNAP Music Station is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS9.8AI score0.02341EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/12/05 12:00 a.m.26 views

PT-2019-18460 · Synology · Music Station

Name of the Vulnerable Software and Affected Versions: Music Station versions prior to the latest version Description: This issue allows remote attackers to inject and execute scripts on the administrator’s management console through a cross-site scripting XSS vulnerability in Music Station...

4.8CVSS5.7AI score0.01456EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2019/12/05 12:00 a.m.48 views

QNAP QTS Music Station XSS Vulnerability (NAS-201911-27)

QNAP Music Station is prone to a cross-site scripting vulnerability on the administrator Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Thi...

4.8CVSS5.3AI score0.01456EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/04 5:16 p.m.7 views

CVE-2018-0729

This command injection vulnerability in Music Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating Music Station to their latest versions...

9.8CVSS5.9AI score0.02341EPSS
SaveExploits0References1
NVD
NVD
added 2019/12/04 5:16 p.m.20 views

CVE-2018-0729

This command injection vulnerability in Music Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating Music Station to their latest versions...

9.8CVSS9.8AI score0.02341EPSS
SaveExploits0References1
Prion
Prion
added 2019/12/04 5:16 p.m.19 views

Command injection

This command injection vulnerability in Music Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating Music Station to their latest versions...

7.5CVSS9.7AI score0.02341EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/12/04 4:33 p.m.51 views

CVE-2018-0729

CVE-2018-0729 affects QNAP Music Station and describes a remote command execution (RCE) via a command injection vulnerability. Multiple connected sources identify Music Station as the affected component and state that an attacker could execute commands on the affected device. The remediation is t...

9.8CVSS9.8AI score0.02341EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/12/04 4:33 p.m.29 views

CVE-2018-0729

This command injection vulnerability in Music Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating Music Station to their latest versions...

9.9AI score0.02341EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/12/04 12:00 a.m.23 views

Fedora Update for milkytracker FEDORA-2019-04babe66b5

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS5.8AI score0.01344EPSS
SaveExploits1References2
Fedora
Fedora
added 2019/12/03 1:10 a.m.31 views

[SECURITY] Fedora 31 Update: milkytracker-1.02.00-5.fc31

MilkyTracker is an application for creating music in the .MOD and .XM forma ts. Its goal is to be free replacement for the popular Fasttracker II software...

5.5CVSS2.5AI score0.01344EPSS
SaveExploits1
Fedora
Fedora
added 2019/12/02 7:11 p.m.23 views

[SECURITY] Fedora 30 Update: milkytracker-1.02.00-4.fc30

MilkyTracker is an application for creating music in the .MOD and .XM forma ts. Its goal is to be free replacement for the popular Fasttracker II software...

5.5CVSS2.5AI score0.01344EPSS
SaveExploits1
CNVD
CNVD
added 2019/11/30 12:00 a.m.4 views

X5music Music Management System frontend ne***.php file has SQL injection vulnerability

X5music music management system is a set of open source music products. X5music music management system front ne.php file SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information in the database...

7.5AI score
SaveExploits0
Rows per page
Query Builder