qnap Vulnerability Advisory Catalog

Total 633 security vulnerabilities recorded for qnap software and firmware.

← Back to All Vendors
Component: qsync_central

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner...

📅 2026-02-11
CVSS 8.1 Dossier →
Component: qsync_central

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner...

📅 2026-02-11
CVSS 8.1 Dossier →
Component: qsync_central

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner...

📅 2026-02-11
CVSS 8.1 Dossier →
Component: qts

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they ca...

📅 2026-02-11
CVSS 8.1 Dossier →
Component: qsync_central

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner...

📅 2026-02-11
CVSS 8.1 Dossier →
Component: qsync_central

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner...

📅 2026-02-11
CVSS 8.1 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: qts

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...

📅 2026-02-11
CVSS 4.9 Dossier →
Component: qsync_central

An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the v...

📅 2026-02-11
CVSS 8.8 Dossier →
Component: qsync_central

A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they ...

📅 2026-02-11
CVSS 8.1 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2026-02-11
CVSS 6.5 Dossier →
Component: media_streaming_add-on

A command injection vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access who have also gained a...

📅 2026-02-11
CVSS 7.8 Dossier →
Component: media_streaming_add-on

An out-of-bounds read vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access, they can then explo...

📅 2026-02-11
CVSS 5.5 Dossier →
Component: qts

An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system ...

📅 2026-01-02
CVSS 7.5 Dossier →
Component: qts

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun...

📅 2026-01-02
CVSS 6.5 Dossier →
Component: hybrid_backup_sync

An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access...

📅 2026-01-02
CVSS 7.8 Dossier →
Component: hybrid_backup_sync

A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gain...

📅 2026-01-02
CVSS 3.3 Dossier →
CVE-2025-59389 CRITICAL
Component: hyper_data_protector

An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute un...

📅 2026-01-02
CVSS 9.8 Dossier →
Component: qfiling

A path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerability to read the contents of un...

📅 2026-01-02
CVSS 7.5 Dossier →
Component: qts

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account...

📅 2026-01-02
CVSS 4.9 Dossier →
Component: qts

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account...

📅 2026-01-02
CVSS 4.9 Dossier →
Component: license_center

A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit...

📅 2026-01-02
CVSS 6.5 Dossier →
Component: license_center

An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the v...

📅 2026-01-02
CVSS 6.5 Dossier →
Page 4 of 27 (633 Total Records)