Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: QNAP Systems Music Station 5.1.13, 5.2.9, 5.3.11 Clear all filters
TI-2018-14140 CVE-2018-19952 · GHSA-6jgx-cv2x-9pwj

Improper input validation in QNAP Music Station

Priority LOW 35

If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01267 Published 2020-11-02 Fixed in 5.1.13, 5.2.9 +1 CWE-20
TI-2018-14139 CVE-2018-19951 · GHSA-4v82-25rx-c86g

Cross-site scripting in QNAP Music Station

Priority LOW 29

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00765 Published 2020-11-02 Fixed in 5.1.13, 5.2.9 +1 CWE-79
TI-2018-14138 CVE-2018-19950 · GHSA-rc96-pxf6-73c4

Command injection in QNAP Music Station

Priority MEDIUM 46

If exploited, this command injection vulnerability could allow remote attackers to execute arbitrary commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02063 Published 2020-11-02 Fixed in 5.1.13, 5.2.9 +1 CWE-77