Video Station vulnerabilities
10 known vulnerabilities in Video Station from QNAP. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Video Station: Authorization Bypass Through User-Controlled Key
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version
- 8.8 High severity
Video Station: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versi
- 8.8 High severity
Video Station: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versi
- 8.8 High severity
Video Station: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following vers
- 8.8 High severity
Video Station: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.8
- 8.8 High severity
Video Station: Improper Neutralization of Special Elements used in a Command
An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station
- 8.8 High severity
Video Station: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station 5.7.2 ( 2023/1
- 8.8 High severity
Video Station: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.7.2 ( 2023/11/2
- 8.8 High severity
Video Station: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.7
- 8.8 High severity
QuTS hero: Improper Neutralization of Special Elements used in an SQL Command
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. QuTScloud is not affected. We have already fix