CVE-2025-59383

< 500.1.1.0

A buffer overflow vulnerability has been reported to affect Media Streaming Add-On. The remote attackers can then exploit the vuln

9.1CRITICAL

CVE-2024-56808

>= 500.1.1.0 and < 500.1.1.6

A command injection vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access wh

7.8HIGH

CVE-2024-56807

>= 500.1.1.0 and < 500.1.1.6

An out-of-bounds read vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access,

5.5MEDIUM

CVE-2024-50395

>= 500.1.1.0 and < 500.1.1.6

An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited

8.8HIGH

CVE-2023-47220

>= 500.1.1.0 and < 500.1.1.5

An OS command injection vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could al

6.6MEDIUM

CVE-2023-47222

>= 500.1.1.0 and < 500.1.1.5

An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerabi

9.6CRITICAL

CVE-2023-23369

all versions

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulner

9.0CRITICAL

CVE-2021-34362

< 500.0.0.3

A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulne

8.7HIGH

CVE-2020-36195

< 430.1.8.10

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If e

9.8CRITICAL

CVE-2017-7641

<= 430.1.2.0

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections.

8.8HIGH

CVE-2017-7640

<= 430.1.2.0

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS

9.8CRITICAL

CVE-2017-7638

<= 430.1.2.0

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly. Suc

6.5MEDIUM

CVE-2017-7634

<= 430.1.2.0

Cross-site scripting (XSS) vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier

6.1MEDIUM