Login Request a demo
MS
Product
Media Streaming Add-on
by Qnap · last CVE Mar 20, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 5High 4Medium 4Low 0
Severity
All severities13Critical5High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Media Streaming Add-on to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-47222
9.8
1%
Apr 26
An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on
Affected: 500.1.1.0 before 500.1.1.5
CVE-2023-23369
9.8
14%
Nov 3
An OS command injection vulnerability has been reported to affect several QNAP operating system versions
Affected: 500.1.1.0; 500.1.1.1; 500.0.0.0; 500.0.0.1; 500.0.0.3; 500.0.0.4; +6 more
CVE-2020-36195
9.8
2%
Apr 17
An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on
Affected: before 430.1.8.10; before 430.1.8.8
CVE-2017-7640
9.8
3%
Mar 8
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges
Affected: through 430.1.2.0; through 421.1.0.2
CVE-2025-59383
9.1
0%
Mar 20
A buffer overflow vulnerability has been reported to affect Media Streaming Add-On
Affected: before 500.1.1.0
CVE-2024-50395
8.8
1%
Nov 22
An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on
Affected: 500.1.1.0 before 500.1.1.6
CVE-2017-7641
8.8
0%
Mar 8
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections
Affected: through 430.1.2.0; through 421.1.0.2
CVE-2024-56808
7.8
1%
Feb 11
A command injection vulnerability has been reported to affect Media Streaming add-on
Affected: 500.1.1.0 before 500.1.1.6
CVE-2021-34362
7.2
1%
Oct 22
A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on
Affected: before 500.0.0.3; before 430.1.8.12; before 500.0.0.3
CVE-2023-47220
6.6
1%
May 3
An OS command injection vulnerability has been reported to affect Media Streaming add-on
Affected: 500.1.1.0 before 500.1.1.5
CVE-2017-7638
6.5
1%
Mar 8
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly
Affected: through 430.1.2.0; through 421.1.0.2
CVE-2017-7634
6.1
1%
Mar 8
Cross-site scripting (XSS) vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to inject arbitrary web…
Affected: through 430.1.2.0; through 421.1.0.2
CVE-2024-56807
5.5
0%
Feb 11
An out-of-bounds read vulnerability has been reported to affect Media Streaming add-on
Affected: 500.1.1.0 before 500.1.1.6
Showing 13