qnap Vulnerability Advisory Catalog

Total 633 security vulnerabilities recorded for qnap software and firmware.

← Back to All Vendors
Component: qvpn

An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local attackers ...

📅 2024-12-19
CVSS 7.8 Dossier →
Component: qts

A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote ...

📅 2024-12-06
CVSS 8.8 Dossier →
Component: qsync_central

A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained...

📅 2024-12-06
CVSS 8.8 Dossier →
Component: qts

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulne...

📅 2024-12-06
CVSS 7.2 Dossier →
Component: qts

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulne...

📅 2024-12-06
CVSS 7.2 Dossier →
CVE-2024-50393 CRITICAL
Component: qts

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remo...

📅 2024-12-06
CVSS 9.8 Dossier →
CVE-2024-50389 CRITICAL
Component: qurouter

A SQL injection vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to inject malicious c...

📅 2024-12-06
CVSS 9.8 Dossier →
CVE-2024-50388 CRITICAL
Component: hybrid_backup_sync

An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attacke...

📅 2024-12-06
CVSS 9.8 Dossier →
CVE-2024-50387 CRITICAL
Component: smb_service

A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote a...

📅 2024-12-06
CVSS 9.8 Dossier →
Component: qts

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If e...

📅 2024-12-06
CVSS 7.5 Dossier →
Component: qts

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If e...

📅 2024-12-06
CVSS 7.5 Dossier →
Component: qts

An improper handling of URL encoding (Hex Encoding) vulnerability has been reported to affect several QNAP operating system versions. If exploited, th...

📅 2024-12-06
CVSS 5.3 Dossier →
Component: qts

An improper certificate validation vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability c...

📅 2024-12-06
CVSS 7.5 Dossier →
CVE-2024-48863 CRITICAL
Component: license_center

A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers to execute ...

📅 2024-12-06
CVSS 9.8 Dossier →
CVE-2024-48859 CRITICAL
Component: qts

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could all...

📅 2024-12-06
CVSS 9.1 Dossier →
Component: qts

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulne...

📅 2024-11-22
CVSS 7.2 Dossier →
Component: qts

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulne...

📅 2024-11-22
CVSS 7.2 Dossier →
Component: qts

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulne...

📅 2024-11-22
CVSS 7.2 Dossier →
Component: qts

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulne...

📅 2024-11-22
CVSS 7.2 Dossier →
Component: qts

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulne...

📅 2024-11-22
CVSS 8.8 Dossier →
Component: qts

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulne...

📅 2024-11-22
CVSS 8.8 Dossier →
Component: media_streaming_add-on

An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability ...

📅 2024-11-22
CVSS 8.8 Dossier →
CVE-2024-48862 CRITICAL
Component: qulog_center

A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the ...

📅 2024-11-22
CVSS 9.8 Dossier →
Component: qurouter

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network ...

📅 2024-11-22
CVSS 7.8 Dossier →
Page 12 of 27 (633 Total Records)