Qnap Multimedia Console — known CVE vulnerabilities

Every CVE whose affected-product data names Qnap Multimedia Console, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2020-36195 — CVSS 9.8 (critical): An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited…
• CVE-2023-23369 — CVSS 9.0 (critical): An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…
• CVE-2021-38684 — CVSS 8.1 (high): A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability…
• CVE-2023-23364 — CVSS 8.1 (high): A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the…
• CVE-2020-2493 — CVSS 6.1 (medium): This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP have already fixed…