Vulnerabilities > Qnap > Multimedia Console

DATE CVE VULNERABILITY TITLE RISK
2023-11-03 CVE-2023-23369 OS Command Injection vulnerability in Qnap QTS
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
network
low complexity
qnap CWE-78
critical
9.8
2023-09-22 CVE-2023-23364 Classic Buffer Overflow vulnerability in Qnap Multimedia Console
A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems.
network
low complexity
qnap CWE-120
critical
9.8
2021-11-13 CVE-2021-38684 Out-of-bounds Write vulnerability in Qnap Multimedia Console
A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console.
network
low complexity
qnap CWE-787
critical
9.8
2021-04-17 CVE-2020-36195 SQL Injection vulnerability in Qnap QTS
An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on.
network
low complexity
qnap CWE-89
critical
9.8
2020-12-10 CVE-2020-2493 Cross-site Scripting vulnerability in Qnap Multimedia Console
This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code.
network
low complexity
qnap CWE-79
6.1