qnap Vulnerability Advisory Catalog

Total 633 security vulnerabilities recorded for qnap software and firmware.

← Back to All Vendors
Component: kazoo_server

An improper authentication vulnerability has been reported to affect QNAP NAS running Kazoo Server. If exploited, this vulnerability allows attackers ...

📅 2022-02-11
CVSS 6.5 Dossier →
Component: qvr_elite

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability ...

📅 2022-01-14
CVSS 8.1 Dossier →
Component: qvr_elite

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability ...

📅 2022-01-14
CVSS 8.1 Dossier →
Component: qvr_elite

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability ...

📅 2022-01-14
CVSS 8.1 Dossier →
Component: qvr_elite

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability ...

📅 2022-01-14
CVSS 8.1 Dossier →
Component: qvr_elite

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability ...

📅 2022-01-14
CVSS 8.1 Dossier →
Component: qcalagent

An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows attackers to redirec...

📅 2022-01-14
CVSS 6.1 Dossier →
Component: qcalagent

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows remote a...

📅 2022-01-14
CVSS 5.3 Dossier →
Component: qts

A cross-site scripting (XSS) vulnerability has been reported to affect QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote at...

📅 2022-01-07
CVSS 4.2 Dossier →
Component: qfile

An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromis...

📅 2021-12-29
CVSS 7.1 Dossier →
Component: surveillance_station

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station. If exploited, this vulnerability allows attac...

📅 2021-12-29
CVSS 8.1 Dossier →
Component: kazoo_server

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Kazoo Server. If exploited, this vulnerability allows remot...

📅 2021-12-29
CVSS 5.3 Dossier →
Component: qvr

An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compro...

📅 2021-11-26
CVSS 8.8 Dossier →
CVE-2021-38685 CRITICAL
Component: qvr

A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run ar...

📅 2021-11-26
CVSS 9.8 Dossier →
Component: ragic_cloud_db

A reflected cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exploited, this vulnerability all...

📅 2021-11-20
CVSS 5.3 Dossier →
Component: qmailagent

We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 ( 2021/08/25 ) and later...

📅 2021-11-20
CVSS 6.8 Dossier →
Component: multimedia_console

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attacke...

📅 2021-11-13
CVSS 8.1 Dossier →
Component: qmailagent

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QmailAgent. If exploited, this vulnerability allows remote ...

📅 2021-11-13
CVSS 6.9 Dossier →
Component: media_streaming_add-on

A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remot...

📅 2021-10-22
CVSS 8.7 Dossier →
Component: image2pdf

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Image2PDF. If exploited, this vulnerability allows remote a...

📅 2021-10-01
CVSS 5.4 Dossier →
Component: photo_station

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows remo...

📅 2021-10-01
CVSS 7.6 Dossier →
Component: photo_station

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, this vulnerability allows remote ...

📅 2021-10-01
CVSS 7.6 Dossier →
Component: photo_station

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows remo...

📅 2021-10-01
CVSS 7.6 Dossier →
Component: qvr

A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers t...

📅 2021-10-01
CVSS 7.2 Dossier →
Page 20 of 27 (633 Total Records)