qnap Vulnerability Advisory Catalog

Total 633 security vulnerabilities recorded for qnap software and firmware.

← Back to All Vendors
CVE-2024-48860 CRITICAL
Component: qurouter

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remote attacke...

📅 2024-11-22
CVSS 9.8 Dossier →
Component: ai_core

An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attack...

📅 2024-11-22
CVSS 7.5 Dossier →
Component: notes_station_3

An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability co...

📅 2024-11-22
CVSS 6.0 Dossier →
Component: notes_station_3

A server-side request forgery (SSRF) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote aut...

📅 2024-11-22
CVSS 6.5 Dossier →
Component: notes_station_3

An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote authenticated at...

📅 2024-11-22
CVSS 8.8 Dossier →
CVE-2024-38643 CRITICAL
Component: notes_station_3

A missing authentication for critical function vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow ...

📅 2024-11-22
CVSS 9.8 Dossier →
Component: qts

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulne...

📅 2024-11-22
CVSS 6.5 Dossier →
Component: qts

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulne...

📅 2024-11-22
CVSS 6.5 Dossier →
Component: qts

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could all...

📅 2024-11-22
CVSS 4.9 Dossier →
Component: qts

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulne...

📅 2024-11-22
CVSS 6.5 Dossier →
Component: qts

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote ...

📅 2024-11-22
CVSS 4.9 Dossier →
Component: qts

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could all...

📅 2024-11-22
CVSS 4.9 Dossier →
Component: qts

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulne...

📅 2024-11-22
CVSS 7.2 Dossier →
Component: qts

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote ...

📅 2024-11-22
CVSS 4.9 Dossier →
Component: qts

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could all...

📅 2024-11-22
CVSS 4.9 Dossier →
Component: qts

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulne...

📅 2024-11-22
CVSS 7.2 Dossier →
Component: photo_station

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who...

📅 2024-11-22
CVSS 6.3 Dossier →
Component: photo_station

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who...

📅 2024-11-22
CVSS 6.3 Dossier →
Component: photo_station

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who...

📅 2024-11-22
CVSS 6.3 Dossier →
Component: photo_station

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who...

📅 2024-11-22
CVSS 6.3 Dossier →
Component: qumagie

An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users ...

📅 2024-09-06
CVSS 7.8 Dossier →
Component: qts

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow ...

📅 2024-09-06
CVSS 7.8 Dossier →
Component: download_station

A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If exploited, the vulnerability could allow authenticated use...

📅 2024-09-06
CVSS 5.4 Dossier →
Component: qts

An improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP operating system versions. If expl...

📅 2024-09-06
CVSS 2.6 Dossier →
Page 13 of 27 (633 Total Records)