CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2023-23364 – Multimedia Console
https://notcve.org/view.php?id=CVE-2023-23364
22 Sep 2023 — A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1.1 ( 2023/03/29 ) and later Multimedia Console 1.4.7 ( 2023/03/20 ) and later Se ha informado que una copia del búfer sin verificar el tamaño de la vulnerabilidad de entrada afecta los sistemas operativos de QN... • https://www.qnap.com/en/security-advisory/qsa-23-29 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2021-38684 – Buffer Overflow Vulnerability in Multimedia Console
https://notcve.org/view.php?id=CVE-2021-38684
13 Nov 2021 — A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3 ( 2021/10/05 ) and later Multimedia Console 1.5.3 ( 2021/10/05 ) and later Se ha informado de una vulnerabilidad de desbordamiento del búfer de la pila que afecta al NAS de QNAP que ejecuta la consola multimedia. Si s... • https://www.qnap.com/en/security-advisory/qsa-21-45 • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 60EXPL: 0CVE-2020-36195 – SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On
https://notcve.org/view.php?id=CVE-2020-36195
17 Apr 2021 — An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedia Console and the Media Streaming add-on. QTS 4.3.3: Media Streaming add-on 430.1.8.10 and later QTS 4.3.6: Media Streaming add-on 430.1.8.8 and later QTS 4.4.x and later: Multimedia Console 1.3.4 and later We have ... • https://www.qnap.com/en/security-advisory/qsa-21-11 • CWE-20: Improper Input Validation CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CWE-943: Improper Neutralization of Special Elements in Data Query Logic •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2020-2493 – Cross-site Scripting Vulnerability in Multimedia Console
https://notcve.org/view.php?id=CVE-2020-2493
10 Dec 2020 — This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in Multimedia Console 1.1.5 and later. Esta vulnerabilidad de tipo cross-site scripting en Multimedia Console permite a atacantes remotos inyectar código malicioso. QNAP ya ha corregido esta vulnerabilidad en Multimedia Console versión 1.1.5 y posterior. • https://www.qnap.com/en/security-advisory/qsa-20-14 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) •