CVE-2020-36195

CVE-2020-36195 is a SQL injection affecting QNAP NAS, specifically Multimedia Console and the Media Streaming Add-on. The vulnerability can lead to information disclosure without authentication over the network. Affected versions and fixes per sources: QTS 4.3.3: Media Streaming add-on 430.1.8.10...

CVE-2020-2493

CVE-2020-2493 is an XSS vulnerability in QNAP’s Multimedia Console that allows remote attackers to inject malicious code. The issue affects the Multimedia Console component and has been fixed in Multimedia Console 1.1.5 and later (per QNAP advisory QSA-20-14). The CVE is documented across multipl...

CVE-2023-23369

CVE-2023-23369 is an OS command injection affecting multiple QNAP platforms. The vulnerability impacts QTS and Multimedia components (Multimedia Console and Media Streaming add-on) and could allow an attacker to execute commands over the network if exploited. Affected/fixed versions include: Mult...

CVE-2021-38684

CVE-2021-38684 describes a stack buffer overflow in QNAP NAS Multimedia Console. The vulnerability enables arbitrary code execution on affected systems running the Multimedia Console component, with impact to confidentiality, integrity, and availability as indicated by CVSS metrics. The issue has...

CVE-2023-23364

CVE-2023-23364 is a buffer copy vulnerability in QNAP Multimedia Console where input size is not checked, allowing remote code execution via unspecified vectors. Affected products are QNAP Multimedia Console releases prior to fixes: version 2.1.1 (2023-03-29) and later, and 1.4.7 (2023-03-20) and...