Qnap Media Streaming Add On
Approved changes feed: RSS · Atom
cpe:2.3:a:qnap:qnap_media_streaming_add-on:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Qnap (a402dda4-b7da-50eb-b0f8-700e564ee87d) |
|---|---|
| Product | Qnap Media Streaming Add On (e5357b11-e77a-54d2-9f09-0510f00b02e4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-7641 |
vulnerable | 2026-06-08 05:09:56.689836 |
Details available
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections.
Published: 2018-03-08T14:00:00.000Z
Updated: 2024-09-17T03:23:51.133Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7640 |
vulnerable | 2026-06-08 05:09:56.689489 |
Details available
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges.
Published: 2018-03-08T14:00:00.000Z
Updated: 2024-09-17T01:51:04.002Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7638 |
vulnerable | 2026-06-08 05:09:56.688830 |
Details available
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly. Successful exploitation could lead to change of the Media Streaming settings, and leakage of sensitive information of the QNAP NAS.
Published: 2018-03-08T14:00:00.000Z
Updated: 2024-09-17T02:36:29.376Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7634 |
vulnerable | 2026-06-08 05:09:56.685939 |
Details available
Cross-site scripting (XSS) vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to inject arbitrary web script or HTML. The injected code will only be triggered by a crafted link, not the normal page.
Published: 2018-03-08T14:00:00.000Z
Updated: 2024-09-16T20:11:44.263Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.