VS
Product
Video Station
21
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 3High 11Medium 7Low 0
Watch
Add Video Station to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-44056 | 9.8 | May 5 | An improper authentication vulnerability has been reported to affect QNAP device running Video Station Affected: before 5.1.8; 5.2.0 before 5.3.13; 5.4.0 before 5.5.9 |
| CVE-2021-44055 | 9.8 | May 5 | An missing authorization vulnerability has been reported to affect QNAP device running Video Station Affected: before 5.1.8; 5.2.0 before 5.3.13; 5.4.0 before 5.5.9 |
| CVE-2017-13071 | 9.8 | Nov 22 | QNAP has already patched this vulnerability Affected: 5.1.3; 5.2.0 |
| CVE-2026-26245 | 8.8 | Oct 15 | SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset Affected: 5.8.0 before 5.8.8 |
| CVE-2026-26244 | 8.8 | Oct 15 | SQLi#1 SQL Injection in class_videos.php _getFilters Affected: 5.8.0 before 5.8.8 |
| CVE-2024-56804 | 8.8 | Oct 3 | An SQL injection vulnerability has been reported to affect Video Station Affected: 5.8.0 before 5.8.4 |
| CVE-2023-50360 | 8.8 | Sep 6 | Video Station Affected: 5.0.0 before 5.8.2 |
| CVE-2023-47563 | 8.8 | Sep 6 | Video Station Affected: 5.0.0 before 5.8.2 |
| CVE-2023-41288 | 8.8 | Jan 5 | An OS command injection vulnerability has been reported to affect Video Station Affected: 5.7.0 before 5.7.2 |
| CVE-2023-41287 | 8.8 | Jan 5 | A SQL injection vulnerability has been reported to affect Video Station Affected: 5.7.0 before 5.7.2 |
| CVE-2023-34976 | 8.8 | Oct 13 | A SQL injection vulnerability has been reported to affect Video Station Affected: before 5.7.0 |
| CVE-2023-34975 | 8.8 | Oct 13 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: before 5.7.0 |
| CVE-2021-28812 | 8.8 | Jun 3 | A command injection vulnerability has been reported to affect certain versions of Video Station Affected: before 5.5.4; before 5.5.4; before 5.5.4 |
| CVE-2026-44084 | 7.5 | Oct 15 | Access Code Forgery in Video Station leading to unauthorized media access Affected: 5.8.0 before 5.8.8 |
| CVE-2024-14025 | 6.7 | Mar 11 | An SQL injection vulnerability has been reported to affect Video Station Affected: 5.0.0 before 5.8.2 |
| CVE-2024-14024 | 6.7 | Mar 11 | An improper certificate validation vulnerability has been reported to affect Video Station Affected: 5.0.0 before 5.8.2 |
| CVE-2026-34015 | 6.5 | Oct 15 | Remote Code Execution in upload.php of Video Station Affected: 5.8.0 before 5.8.8 |
| CVE-2025-66275 | 6.5 | Oct 15 | Remote code execution via command injection Affected: 5.8.0 before 5.8.5 |
| CVE-2025-66272 | 6.5 | Oct 15 | Arbitrary file deletion and remote code execution Affected: 5.8.0 before 5.8.5 |
| CVE-2023-34977 | 5.4 | Oct 13 | A cross-site scripting (XSS) vulnerability has been reported to affect Video Station Affected: before 2023.07.27 |
| CVE-2019-7184 | 4.8 | Dec 5 | This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console Affected: before 5.4.3; before 5.3.10 |
Showing 21