Known vulnerabilities in Video Station

Software: Video Station
Software CPE: cpe:2.3:a:qnap_systems:video_station:*:*:*:*:*:*:*:*
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Video Station Video Station is affected by 11 known vulnerabilities: 1 high, 9 medium, 1 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116653 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-56804
CWE-89 Medium
No
No
5.8.4 07.10.2025 SB2025100717
#VU96951 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-50360
CWE-89 Medium
No
No
5.8.2 09.09.2024 SB2024090928
#VU96950 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-47563
CWE-78 Medium
No
No
5.8.2 09.09.2024 SB2024090928
#VU85050 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-41288
CWE-78 Medium
No
No
5.7.2 08.01.2024 SB2024010804
#VU85049 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-41287
CWE-89 Medium
No
No
5.7.2 08.01.2024 SB2024010804
#VU82015 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-34977
CWE-79 Low
No
No
5.7.0 16.10.2023 SB2023101604
#VU82012 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-34976
CWE-89 Medium
No
No
5.7.0 16.10.2023 SB2023101604
#VU82011 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-34975
CWE-89 Medium
No
No
5.7.0 16.10.2023 SB2023101604
SB2024031114
#VU62834 - Improper Authorization
CVE-2021-44056
CWE-285 Medium
No
No
5.1.8, 5.3.13, 5.5.9 06.05.2022 SB2022050601
#VU62833 - Improper Authorization
CVE-2021-44055
CWE-285 Medium
No
No
5.1.8, 5.3.13, 5.5.9 06.05.2022 SB2022050601
#VU53763 - Command injection
CVE-2021-28812
CWE-77 High
No
No
5.5.4 03.06.2021 SB2021060311