qnap Vulnerability Advisory Catalog

Total 633 security vulnerabilities recorded for qnap software and firmware.

← Back to All Vendors
CVE-2021-34351 CRITICAL
Component: qvr

A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers t...

📅 2021-09-27
CVSS 9.8 Dossier →
Component: qvr

A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers t...

📅 2021-09-27
CVSS 7.2 Dossier →
CVE-2021-34348 CRITICAL
Component: qvr

A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers t...

📅 2021-09-27
CVSS 9.8 Dossier →
CVE-2021-34346 CRITICAL
Component: nvr_storage_expansion_firmware

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows a...

📅 2021-09-10
CVSS 9.8 Dossier →
CVE-2021-34345 CRITICAL
Component: ej1600_firmware

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows a...

📅 2021-09-10
CVSS 9.8 Dossier →
CVE-2021-34344 CRITICAL
Component: qusbcam2

A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to e...

📅 2021-09-10
CVSS 9.8 Dossier →
Component: qts

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allo...

📅 2021-09-10
CVSS 6.0 Dossier →
Component: qts

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allo...

📅 2021-09-10
CVSS 7.6 Dossier →
CVE-2021-28813 CRITICAL
Component: qsw-m2116p-2t2s_firmware

A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch....

📅 2021-09-10
CVSS 9.6 Dossier →
Component: qts

A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerab...

📅 2021-09-10
CVSS 6.1 Dossier →
CVE-2013-6276 CRITICAL
Component: viocard-30_firmware

QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in authorized_keys files. NOTE: 1. All active models are not affected. The last affected...

📅 2021-08-09
CVSS 9.8 Dossier →
CVE-2021-28809 CRITICAL
Component: hybrid_backup_sync

An improper access control vulnerability has been reported to affect certain legacy versions of HBS 3. If exploited, this vulnerability allows attacke...

📅 2021-07-08
CVSS 9.8 Dossier →
CVE-2021-28804 CRITICAL
Component: qts

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbit...

📅 2021-07-01
CVSS 9.8 Dossier →
Component: q\'center

This issue affects: QNAP Systems Inc. Q'center versions prior to 1.11.1004....

📅 2021-07-01
CVSS 5.4 Dossier →
CVE-2021-28802 CRITICAL
Component: qts

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbit...

📅 2021-07-01
CVSS 9.8 Dossier →
Component: qulog_center

A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability allows attackers to inject mali...

📅 2021-07-01
CVSS 6.1 Dossier →
Component: qts

An XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malic...

📅 2021-07-01
CVSS 6.1 Dossier →
Component: qts

A command injection vulnerability has been reported to affect QNAP NAS running legacy versions of QTS. If exploited, this vulnerability allows attacke...

📅 2021-06-24
CVSS 8.1 Dossier →
Component: myqnapcloud_link

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remot...

📅 2021-06-16
CVSS 6.0 Dossier →
Component: helpdesk

An improper access control vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows remote attackers to compromise ...

📅 2021-06-11
CVSS 8.8 Dossier →
Component: qss

Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability ...

📅 2021-06-11
CVSS 7.8 Dossier →
Component: qss

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers t...

📅 2021-06-11
CVSS 3.1 Dossier →
Component: roon_server

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs ha...

📅 2021-06-08
CVSS 7.5 Dossier →
Component: video_station

A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attack...

📅 2021-06-03
CVSS 8.8 Dossier →
Page 21 of 27 (633 Total Records)