CVE-2017-7640

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges...

CVE-2017-7641

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections...

CVE-2017-7640

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges...

CVE-2017-7638

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly. Successful exploitation could lead to change of the Media Streaming settings, and leakage of sensitive information of the QNAP NAS...

CVE-2017-7634

CVE-2017-7634 is a cross-site scripting (XSS) vulnerability in the QNAP NAS application Media Streaming add-on (versions 421.1.0.2, 430.1.2.0, and earlier). The issue allows remote attackers to inject arbitrary web script or HTML when a user clicks a crafted link; the injected code is triggered o...

CVE-2017-7638

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly. Successful exploitation could lead to change of the Media Streaming settings, and leakage of sensitive information of the QNAP NAS...

CVE-2017-7640

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges...

CVE-2017-7641

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections...

CVE-2017-7634

Cross-site scripting XSS vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to inject arbitrary web script or HTML. The injected code will only be triggered by a crafted link, not the normal page...

CVE-2017-7641

The CVE-2017-7641 entry documents a CSRF vulnerability in the QNAP NAS Media Streaming add-on. Affected versions include 421.1.0.2, 430.1.2.0, and earlier. Root cause: the add-on does not implement CSRF protections, which could allow an attacker to coerce an authenticated user to perform maliciou...

CVE-2017-7640

CVE-2017-7640 affects the QNAP NAS Media Streaming add-on for the firmware versions 421.1.0.2, 430.1.2.0, and earlier. The vulnerability allows remote attackers to execute arbitrary operating system commands with root privileges on the affected NAS devices. The connected documents confirm the aff...

CVE-2017-7638

CVE-2017-7638 affects QNAP NAS Media Streaming add-on (versions 421.1.0.2, 430.1.2.0 and earlier). The vulnerability is that the add-on does not authenticate requests properly, which could allow an attacker to change Media Streaming settings and access sensitive information on the NAS. Connected ...

PT-2018-8417

Name of the Vulnerable Software and Affected Versions QNAP NAS application Media Streaming add-on versions 421.1.0.2, 430.1.2.0, and earlier Description The issue is related to improper authentication of requests in the Media Streaming add-on. This could allow for unauthorized changes to Media...

PT-2018-1127

Name of the Vulnerable Software and Affected Versions Media Streaming add-on versions 421.1.0.2, 430.1.2.0, and earlier Description The issue is related to the Media Streaming add-on's failure to neutralize special elements used in operating system commands. This can be exploited by a remote...

CVE-2017-7634: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to inject arbitrary web script or HTML. The injected code will only be triggered by a crafted link, not the normal page...

CVE-2017-7640: Improper Neutralization of Special Elements used in an OS Command

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges...

CVE-2017-7641: Cross-Site Request Forgery (CSRF)

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections...

CVE-2017-7638: Improper Authentication

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly. Successful exploitation could lead to change of the Media Streaming settings, and leakage of sensitive information of the QNAP NAS...

PT-2018-8419

Name of the Vulnerable Software and Affected Versions QNAP NAS application Media Streaming add-on versions 421.1.0.2, 430.1.2.0, and earlier Description The issue concerns the lack of CSRF protections in the Media Streaming add-on, which could potentially allow for unauthorized actions...

PT-2018-8413

Name of the Vulnerable Software and Affected Versions QNAP NAS application Media Streaming add-on versions 421.1.0.2, 430.1.2.0, and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML into the Media Streaming add-on. The injected co...