Vulnerabilities > Qnap > Music Station > High

DATE CVE VULNERABILITY TITLE RISK
2023-11-03 CVE-2023-39299 Path Traversal vulnerability in Qnap Music Station
A path traversal vulnerability has been reported to affect Music Station.
network
low complexity
qnap CWE-22
7.5
2019-12-04 CVE-2018-0729 Command Injection vulnerability in Qnap Music Station
This command injection vulnerability in Music Station allows attackers to execute commands on the affected device.
network
low complexity
qnap CWE-77
7.5
2018-09-14 CVE-2018-0718 Command Injection vulnerability in Qnap Music Station
Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands in the compromised application.
network
low complexity
qnap CWE-77
7.5
2017-10-06 CVE-2017-13069 Command Injection vulnerability in Qnap Music Station
QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier.
network
low complexity
qnap CWE-77
7.5