qnap Vulnerability Advisory Catalog

Total 633 security vulnerabilities recorded for qnap software and firmware.

← Back to All Vendors
Component: qsync_central

A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remo...

📅 2025-06-06
CVSS 8.1 Dossier →
Component: qts

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remo...

📅 2025-06-06
CVSS 8.8 Dossier →
Component: qts

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote...

📅 2025-06-06
CVSS 5.4 Dossier →
Component: license_center

A cross-site scripting (XSS) vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers wh...

📅 2025-06-06
CVSS 5.4 Dossier →
Component: qurouter

An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulne...

📅 2025-06-06
CVSS 7.8 Dossier →
Component: qurouter

A command injection vulnerability has been reported to affect QHora. If an attacker gains local network access who have also gained an administrator a...

📅 2025-06-06
CVSS 6.7 Dossier →
Component: qurouter

A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers who have gained admi...

📅 2025-03-07
CVSS 7.2 Dossier →
Component: qts

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow r...

📅 2025-03-07
CVSS 7.2 Dossier →
Component: qts

A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote att...

📅 2025-03-07
CVSS 4.9 Dossier →
Component: quts_hero

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow r...

📅 2025-03-07
CVSS 7.2 Dossier →
Component: qulog_center

A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attack...

📅 2025-03-07
CVSS 4.9 Dossier →
CVE-2024-53695 CRITICAL
Component: hybrid_backup_sync

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to ...

📅 2025-03-07
CVSS 9.1 Dossier →
Component: qts

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If e...

📅 2025-03-07
CVSS 7.1 Dossier →
Component: qts

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remo...

📅 2025-03-07
CVSS 4.7 Dossier →
Component: qts

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If e...

📅 2025-03-07
CVSS 5.5 Dossier →
Component: helpdesk

An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow remote attackers to...

📅 2025-03-07
CVSS 8.8 Dossier →
CVE-2024-50390 CRITICAL
Component: qurouter

A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers to execute arbitrary...

📅 2025-03-07
CVSS 9.8 Dossier →
CVE-2024-48864 CRITICAL
Component: file_station

A files or directories accessible to external parties vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could ...

📅 2025-03-07
CVSS 9.1 Dossier →
Component: qts

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow r...

📅 2025-03-07
CVSS 7.2 Dossier →
Component: qts

An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers t...

📅 2025-03-07
CVSS 5.3 Dossier →
Component: qulog_center

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could a...

📅 2024-12-19
CVSS 4.8 Dossier →
Component: qufirewall

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remo...

📅 2024-12-19
CVSS 5.5 Dossier →
Component: qulog_center

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could a...

📅 2024-12-19
CVSS 7.3 Dossier →
Component: qts

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability...

📅 2024-12-19
CVSS 6.8 Dossier →
Page 11 of 27 (633 Total Records)