CVE-2020-2495 Cross-site scripting vulnerability in QTS and QuTS hero

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 a...

CVE-2020-2494

The CVE-2020-2494 entry concerns a cross-site scripting (XSS) vulnerability in QNAP Music Station. The issue allows remote attackers to inject malicious code through Music Station components, with exploitation tied to specific versions of QNAP firmware: QuTS hero h4.5.1: Music Station 5.3.13 and ...

CVE-2020-2494 Cross-site Scripting Vulnerability in Music Station

This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in the following versions of Music Station. QuTS hero h4.5.1: Music Station 5.3.13 and later QTS 4.5.1: Music Station 5.3.12 and later QTS 4.4.3:...

CVE-2020-2491

CVE-2020-2491 is a cross-site scripting (XSS) vulnerability in QNAP Photo Station . The CVE applies to QTS/QuTS installations that include Photo Station and can allow remote attackers to inject malicious code via Photo Station components. The included connected documents confirm affected products...

CVE-2020-2491 Cross-site Scripting Vulnerability in Photo Station

This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions of Photo Station. QTS 4.5.1: Photo Station 6.0.12 and later QTS 4.4.3: Photo Station 6.0.12 and later QTS 4.3.6: Photo...

PT-2020-15862 · Synology · Music Station

Name of the Vulnerable Software and Affected Versions: Music Station versions prior to 5.3.12 Music Station versions prior to 5.3.13 Description: This issue allows remote attackers to inject malicious code through a cross-site scripting vulnerability in Music Station. Recommendations: For Music...

Cross-Site Scripting Vulnerability in Multiple Qnap Systems Products

Qnap Systems QNAP Systems Photo Station is a photo management and viewing application. QNAP QTS is a data storage device with a SAN-like storage architecture. Systems QUTS Hero and others are products of China Weilian Tong QNAP Systems.QNAP Systems QUTS Hero is a NAS operating system for managing...

QANP Cross-Site Scripting Vulnerability

QNAP Systems QNAP QTS and others are products of Qnap Systems.QNAP QTS is a Turbo NAS operating system.QNAP Music Station is a music playback and management application.QNAP Systems QUTS Hero and others are products of Qnap Systems.QNAP Systems QUTS Hero is a NAS operating system for managing...

QNAP High-Severity Flaws Plague NAS Systems

QNAP Systems is warning of high-severity flaws that plague its top-selling network attached storage NAS devices. If exploited, the most severe of the flaws could allow attackers to remotely take over NAS devices. NAS devices are systems that consist of one or more hard drives that are constantly...

QNAP Photo Station Remote Code Execution (CVE-2019-7192; CVE-2019-7193; CVE-2019-7194; CVE-2019-7195)

A remote code execution vulnerability exists in QNAP NAS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

QNAP Systems TS-870 Cross-Site Scripting Vulnerability

QNAP Systems TS-870 is a NAS Network Attached Storage appliance from China Weilian QNAP Systems. A cross-site scripting vulnerability exists in the File Name of Music Station in the QNAP Systems TS-870 using firmware version 4.3.4.0486. The vulnerability stems from a lack of proper validation of...

QNAP Systems TS-870 Command Injection Vulnerability (CNVD-2020-62934)

QNAP Systems TS-870 is a NAS Network Attached Storage appliance from China Weilian QNAP Systems. A command injection vulnerability exists in the UserName of the Music Station for the file upload feature in the QNAP Systems TS-870 using firmware version 4.3.4.0486. An attacker could exploit this...

Inner Mongolia open enterprise science and technology limited company station building system there are logical flaws vulnerability

Inner Mongolia Open Enterprise Technology Co., Ltd. utilizes the core technology of Internet intelligent marketing, is committed to serving local head brand customers as well as medium and small enterprises, providing professional one-stop Internet marketing solutions for enterprises. Inner...

Cisco Unified IP Conference Station 7937G Denial of Service (CVE-2020-16139)

A denial-of-service vulnerability exists in Cisco Unified IP Conference Station 7937G. Successful exploitation of this vulnerability could cause a denial-of-service condition...

Unspecified Vulnerability in Apple AirPort Base Station

The Apple AirPort Base Station is a wireless router from Apple USA. A security vulnerability exists in the Apple AirPort Base Station using firmware versions prior to 7.9.1, which restores the device to factory settings and does not delete all user data. No details of the vulnerability are...

Cisco Unified IP Conference Station Privilege Escalation (CVE-2020-16137)

A Privilege Escalation vulnerability exists in Cisco Unified IP Conference Station. Successful exploitation of this vulnerability could allow a remote attacker to create new users with elevated privileges and by that damage the affected system...

Apple AirPort Base Station Denial of Service Vulnerability (CNVD-2020-65931)

The Apple AirPort Base Station is a wireless router from Apple USA. A security vulnerability exists in Apple AirPort Base Station using firmware versions prior to 7.9.1. An attacker could exploit this vulnerability to cause a denial of service...

Apple AirPort Base Station Code Issue Vulnerability (CNVD-2020-60818)

The Apple AirPort Base Station is a wireless router from Apple USA. A security vulnerability exists in Apple AirPort Base Station using firmware versions prior to 7.9.1. An attacker could exploit this vulnerability to cause a denial of service...

Apple AirPort Base Station Code Issue Vulnerability

The Apple AirPort Base Station is a wireless router from Apple USA. A code issue vulnerability exists in Apple AirPort Base Station using firmware versions prior to 7.9.1. The vulnerability stems from an improper design or implementation during code development for a network system or product. No...

Apple AirPort Base Station Denial of Service Vulnerability

The Apple AirPort Base Station is a wireless router from Apple USA. A security vulnerability exists in Apple AirPort Base Station using firmware versions prior to 7.9.1. An attacker could exploit this vulnerability to cause a denial of service...