MS
Product
Music Station
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 5Low 0
Watch
Add Music Station to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-19950 | 9.8 | Nov 2 | If exploited, this command injection vulnerability could allow remote attackers to execute arbitrary commands Affected: 5.3.0 before 5.3.11; before 5.1.13; 5.2.0 before 5.2.9; before 5.1.13 |
| CVE-2018-0729 | 9.8 | Dec 4 | This command injection vulnerability in Music Station allows attackers to execute commands on the affected device Affected: before 5.3.5; before 5.2.7; before 5.1.11; before 5.1.11; before 4.8.8 |
| CVE-2018-0718 | 9.8 | Sep 14 | Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands in the compromised… Affected: through 5.1.2 |
| CVE-2017-13069 | 9.8 | Oct 6 | QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier Affected: through 4.8.6; through 5.0.7 |
| CVE-2023-45038 | 8.8 | Sep 6 | Music Station Affected: 5.0.0 before 5.4.0 |
| CVE-2020-36197 | 8.8 | May 13 | An improper access control vulnerability has been reported to affect earlier versions of Music Station Affected: before 5.3.16; before 5.2.10; before 5.1.14; before 5.3.16; before 5.3.16 |
| CVE-2023-39299 | 7.5 | Nov 3 | A path traversal vulnerability has been reported to affect Music Station Affected: 4.8.0 before 4.8.11; 5.1.0 before 5.1.16; 5.3.0 before 5.3.23 |
| CVE-2018-19952 | 7.5 | Nov 2 | If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information Affected: 5.3.0 before 5.3.11; before 5.1.13; 5.2.0 before 5.2.9; before 5.1.13 |
| CVE-2023-23366 | 6.5 | Oct 6 | A path traversal vulnerability has been reported to affect Music Station Affected: 5.3.0 before 5.3.22 |
| CVE-2023-23365 | 6.5 | Oct 6 | A path traversal vulnerability has been reported to affect Music Station Affected: 5.3.0 before 5.3.22 |
| CVE-2020-2494 | 6.1 | Dec 10 | This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code Affected: before 5.3.13; before 5.3.12; before 5.3.12 |
| CVE-2018-19951 | 6.1 | Nov 2 | If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code Affected: 5.3.0 before 5.3.11; before 5.1.13; 5.2.0 before 5.2.9; before 5.1.13 |
| CVE-2019-7185 | 4.8 | Dec 5 | This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console Affected: before 5.3.5; before 5.2.7; before 5.1.11 |
Showing 13