Advisories · Technology

QNAP Systems Inc. Multimedia Console.

Every CVE that names QNAP Systems Inc. Multimedia Console among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-23369 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

QTS, Multimedia Console, and Media Streaming add-on
- QNAP Systems Inc. Multimedia Console
- QNAP Systems Inc. QTS
- Command injection
Not analysed yet 3 Nov 2023
CVE-2023-23364 CVE record

CVSS 8.1 High

Multimedia Console
- QNAP Systems Inc. Multimedia Console
- Memory corruption
Not analysed yet 22 Sept 2023
CVE-2021-38684 CVE record

CVSS 8.1 High

Buffer Overflow Vulnerability in Multimedia Console
- QNAP Systems Inc. Multimedia Console
- Memory corruption
Not analysed yet 13 Nov 2021
CVE-2020-36195 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On
- QNAP Systems Inc. QTS
- QNAP Systems Inc. Media Streaming add-on
- SQL injection
- Other injection
Not analysed yet 17 Apr 2021
CVE-2020-2493 CVE record

Cross-site Scripting Vulnerability in Multimedia Console
- QNAP Systems Inc. Multimedia Console
- Cross-site scripting (XSS)
Not analysed yet 10 Dec 2020