Approved changes feed: RSS · Atom

cpe:2.3:a:qnap_systems_inc.:video_station:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQnap Systems Inc. (1f66ac1e-0889-51bf-b27f-24c7175e5920)
ProductVideo Station (249a157d-d8d1-51e7-ab90-8ac86a2a5b9d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-56804 vulnerable 2026-06-08 06:56:13.163291 Video Station
An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later
Published: 2025-10-03T18:08:19.010Z
Updated: 2025-10-03T18:35:12.788Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-14025 vulnerable 2026-06-08 06:25:38.905631 Video Station
An SQL injection vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later
Published: 2026-03-11T08:02:09.214Z
Updated: 2026-03-11T13:52:24.375Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-14024 vulnerable 2026-06-08 06:25:38.903979 Video Station
An improper certificate validation vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later
Published: 2026-03-11T08:02:03.876Z
Updated: 2026-03-11T14:12:35.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50360 vulnerable 2026-06-08 06:16:16.026551 Video Station
HIGH (8.8)
A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.1 ( 2024/02/26 ) and later
Published: 2024-09-06T16:26:55.405Z
Updated: 2024-09-06T17:46:27.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47563 vulnerable 2026-06-08 06:14:24.999865 Video Station
HIGH (7.4)
An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later
Published: 2024-09-06T16:26:50.074Z
Updated: 2024-09-06T17:47:03.791Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41288 vulnerable 2026-06-08 06:11:05.838291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41287 vulnerable 2026-06-08 06:11:05.836783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34977 vulnerable 2026-06-08 06:06:26.302033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34976 vulnerable 2026-06-08 06:06:26.301422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44056 vulnerable 2026-06-08 05:36:44.857094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44055 vulnerable 2026-06-08 05:36:44.851786 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28812 not_vulnerable 2026-06-08 05:31:24.926439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28812 vulnerable 2026-06-08 05:31:24.926383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.