qnap Vulnerability Advisory Catalog

Total 633 security vulnerabilities recorded for qnap software and firmware.

← Back to All Vendors
Component: multimedia_console

A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibl...

📅 2023-09-22
CVSS 8.1 Dossier →
Component: qts

A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating system. If exploited, the vulnerability possibly...

📅 2023-09-22
CVSS 8.1 Dossier →
Component: qts

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated ...

📅 2023-09-22
CVSS 8.8 Dossier →
Component: qvr_pro_client

An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possibly provid...

📅 2023-09-08
CVSS 6.7 Dossier →
Component: qts

An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users...

📅 2023-08-24
CVSS 3.1 Dossier →
Component: qts

A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability po...

📅 2023-08-24
CVSS 3.5 Dossier →
Component: qts

An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows lo...

📅 2023-08-24
CVSS 7.1 Dossier →
Component: qts

A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated adm...

📅 2023-03-29
CVSS 2.7 Dossier →
Component: qvr

A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated adm...

📅 2023-03-29
CVSS 2.7 Dossier →
Component: qvr

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote authe...

📅 2023-03-29
CVSS 6.6 Dossier →
CVE-2022-27596 CRITICAL
Component: qts

A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to inject mal...

📅 2023-01-30
CVSS 9.8 Dossier →
CVE-2022-27593 CRITICAL
Component: photo_station

An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could al...

📅 2022-09-08
CVSS 10.0 Dossier →
Component: nas_proxy_server

A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allow...

📅 2022-05-26
CVSS 5.3 Dossier →
CVE-2022-27588 CRITICAL
Component: qvr

We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later...

📅 2022-05-05
CVSS 9.8 Dossier →
Component: photo_station

An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attack...

📅 2022-05-05
CVSS 7.1 Dossier →
Component: video_station

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attack...

📅 2022-05-05
CVSS 7.1 Dossier →
Component: video_station

An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote a...

📅 2022-05-05
CVSS 5.3 Dossier →
Component: qts

An open redirect vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows a...

📅 2022-05-05
CVSS 4.3 Dossier →
Component: qts

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QTS, QuTS hero and QuTScloud. If exploited, this vulnerabil...

📅 2022-05-05
CVSS 5.7 Dossier →
Component: qts

An improper link resolution before file access ('Link Following') vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, ...

📅 2022-05-05
CVSS 6.5 Dossier →
Component: qts

A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows r...

📅 2022-05-05
CVSS 8.8 Dossier →
Component: qts

A path traversal vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, QTS, QVR Pro Appliance. If exploited, this vulner...

📅 2022-05-05
CVSS 5.3 Dossier →
Component: nas_proxy_server

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remot...

📅 2022-02-25
CVSS 5.3 Dossier →
Component: nas_proxy_server

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remot...

📅 2022-02-25
CVSS 6.9 Dossier →
Page 19 of 27 (633 Total Records)