CVE-2024-38640 Download Station

A cross-site scripting XSS vulnerability has been reported to affect Download Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Download Station 5.8.6.283 2024/06/21 an...

CVE-2023-45038 Music Station

An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later...

CVE-2023-45038 Music Station

An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later...

CVE-2023-45038

CVE-2023-45038 affects QNAP Music Station prior to version 5.4.0. The Nuclei template confirms an improper authentication vulnerability leading to an authentication bypass, allowing an unauthenticated attacker to read files (e.g., /etc/passwd) over the network. The issue is fixed in Music Station...

CVE-2023-50360 Video Station

A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.1 2024/02/26 and later...

CVE-2023-50360

The CVE-2023-50360 issue is a SQL injection affecting QNAP Video Station. Verified reports show the vulnerability could allow authenticated users to inject code over the network, with CVSS v3.1 metrics indicating high impact on confidentiality, integrity, and availability (C:H, I:H, A:H) and netw...

CVE-2023-50360 Video Station

A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.1 2024/02/26 and later...

CVE-2023-47563 Video Station

An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later...

CVE-2023-47563

The CVE-2023-47563 entry concerns QNAP Video Station. Affected software: Video Station prior to version 5.8.2. Issue: OS command injection allowing authenticated users to execute commands over the network. Root cause and impact are consistent with an OS command injection affecting the application...

CVE-2023-47563 Video Station

An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later...

CVE-2024-27126 Notes Station 3

A cross-site scripting XSS vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: Notes Station 3 3.9.6 and later...

CVE-2024-27126 Notes Station 3

A cross-site scripting XSS vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: Notes Station 3 3.9.6 and later...

CVE-2024-27126

CVE-2024-27126 affects QNAP Notes Station 3 with a cross‑site scripting (XSS) vulnerability. The issue could allow authenticated users to inject malicious code over the network. Affected versions are prior to 3.9.6; remediation is to upgrade to Notes Station 3 version 3.9.6 or later. The CVE entr...

CVE-2024-27122

CVE-2024-27122 affects QNAP Notes Station 3. The vulnerability is a cross-site scripting (XSS) flaw that could allow authenticated users to inject malicious code via the network. Affected versions: Notes Station 3 prior to 3.9.6. Mitigation: upgrade to Notes Station 3 version 3.9.6 or later, whic...

CVE-2024-27122 Notes Station 3

A cross-site scripting XSS vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: Notes Station 3 3.9.6 and later...

PT-2024-13460 · Synology · Video Station

Name of the Vulnerable Software and Affected Versions: Video Station versions prior to 5.8.2 Description: An OS command injection issue has been reported, allowing authenticated users to execute commands via a network. Recommendations: For versions prior to 5.8.2, update to Video Station 5.8.2 or...

PT-2024-13211

Name of the Vulnerable Software and Affected Versions Music Station versions prior to 5.4.0 Description An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network...

QNAP Notes Station 安全漏洞

QNAP Systems QNAP Notes Station is a note-taking application from China Weilian Technology QNAP Systems. It allows users to create, edit and synchronize notes on QNAP NAS devices. The application is often tightly integrated with QNAP's NAS systems, providing users with a convenient way to record...

QNAP Systems Video Station 命令注入漏洞

QNAP Systems Video Station is a video management and playback application from QNAP Systems. A command injection vulnerability exists in QNAP Video Station version 5.8.2 and prior versions, which stems from the inclusion of an operating system command injection vulnerability. An attacker could...

PT-2024-13925

Name of the Vulnerable Software and Affected Versions Video Station versions prior to 5.8.1 Description A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. Recommendations...