Approved changes feed: RSS · Atom

cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductMedia Streaming Add On (684adadd-d74f-5feb-89c4-b1678ba737b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59383 vulnerable 2026-06-08 07:35:21.809000 Media Streaming Add-on
A buffer overflow vulnerability has been reported to affect Media Streaming Add-On. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Media Streaming Add-on 500.1.1 and later
Published: 2026-03-20T16:22:07.367Z
Updated: 2026-03-25T14:00:24.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56808 vulnerable 2026-06-08 06:56:13.200336 Media Streaming add-on
A command injection vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access who have also gained a user account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.6 ( 2024/08/02 ) and later
Published: 2026-02-11T12:20:08.765Z
Updated: 2026-02-11T14:27:11.982Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56807 vulnerable 2026-06-08 06:56:13.199786 Media Streaming add-on
An out-of-bounds read vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.6 ( 2024/08/02 ) and later
Published: 2026-02-11T12:20:14.724Z
Updated: 2026-02-11T14:23:50.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50395 vulnerable 2026-06-08 06:52:09.940400 Media Streaming add-on
An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.6 ( 2024/08/02 ) and later
Published: 2024-11-22T15:31:47.697Z
Updated: 2024-11-22T16:48:42.193Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47222 vulnerable 2026-06-08 06:14:24.478463 Media Streaming add-on
CRITICAL (9.6)
An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.5 ( 2024/01/22 ) and later
Published: 2024-04-26T15:01:27.370Z
Updated: 2024-08-02T21:01:22.689Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47220 vulnerable 2026-06-08 06:14:24.473692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34362 vulnerable 2026-06-08 05:32:13.084142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36195 vulnerable 2026-06-08 05:25:02.738844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7641 vulnerable 2026-06-08 05:09:56.689869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7640 vulnerable 2026-06-08 05:09:56.689519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7638 vulnerable 2026-06-08 05:09:56.688859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7634 vulnerable 2026-06-08 05:09:56.686464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.