qnap Vulnerability Advisory Catalog

Total 633 security vulnerabilities recorded for qnap software and firmware.

← Back to All Vendors
Component: qsync_central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an adminis...

📅 2026-02-11
CVSS 4.9 Dossier →
Component: qsync_central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnera...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: qsync_central

A relative path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit th...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: qts

A use of uninitialized variable vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an admini...

📅 2026-02-11
CVSS 4.9 Dossier →
Component: file_station

A weak authentication vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to gain sensit...

📅 2026-02-11
CVSS 7.5 Dossier →
Component: qsync_central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an adminis...

📅 2026-02-11
CVSS 4.9 Dossier →
Component: qsync_central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an adminis...

📅 2026-02-11
CVSS 4.9 Dossier →
Component: qsync_central

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner...

📅 2026-02-11
CVSS 8.1 Dossier →
Component: qsync_central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user acc...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: file_station

An improper neutralization of directives in statically saved code ('Static Code Injection') vulnerability has been reported to affect File Station 5. ...

📅 2026-02-11
CVSS 8.8 Dossier →
Component: qsync_central

An out-of-bounds read vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vu...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: file_station

An out-of-bounds read vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the v...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: file_station

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can the...

📅 2026-02-11
CVSS 4.9 Dossier →
Component: file_station

A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit ...

📅 2026-02-11
CVSS 4.9 Dossier →
Component: file_station

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an admini...

📅 2026-02-11
CVSS 4.9 Dossier →
Component: file_station

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an admini...

📅 2026-02-11
CVSS 4.9 Dossier →
Component: qsync_central

A use of out-of-range pointer offset vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: qsync_central

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then ...

📅 2026-02-11
CVSS 5.5 Dossier →
Component: qsync_central

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then ...

📅 2026-02-11
CVSS 5.5 Dossier →
Component: qsync_central

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then ...

📅 2026-02-11
CVSS 5.5 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2026-02-11
CVSS 6.5 Dossier →
Page 3 of 27 (633 Total Records)