qnap Vulnerability Advisory Catalog

Total 633 security vulnerabilities recorded for qnap software and firmware.

← Back to All Vendors
Component: qts

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun...

📅 2026-01-02
CVSS 6.5 Dossier →
CVE-2025-11837 CRITICAL
Component: malware_remover

An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnera...

📅 2026-01-02
CVSS 9.8 Dossier →
Component: qumagie

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass secu...

📅 2026-01-02
CVSS 6.1 Dossier →
Component: quts_hero

An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote ...

📅 2026-01-02
CVSS 4.9 Dossier →
Component: quts_hero

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator ac...

📅 2026-01-02
CVSS 4.9 Dossier →
Component: quts_hero

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator ac...

📅 2026-01-02
CVSS 4.9 Dossier →
Component: quts_hero

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator ac...

📅 2026-01-02
CVSS 4.9 Dossier →
Component: qts

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...

📅 2026-01-02
CVSS 4.9 Dossier →
Component: quts_hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun...

📅 2026-01-02
CVSS 6.5 Dossier →
Component: quts_hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account...

📅 2026-01-02
CVSS 6.5 Dossier →
Component: quts_hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker ga...

📅 2026-01-02
CVSS 6.5 Dossier →
Component: quts_hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...

📅 2026-01-02
CVSS 4.9 Dossier →
Component: quts_hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...

📅 2026-01-02
CVSS 4.9 Dossier →
Component: quts_hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...

📅 2026-01-02
CVSS 4.9 Dossier →
Component: quts_hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...

📅 2026-01-02
CVSS 4.9 Dossier →
Component: quts_hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they ca...

📅 2026-01-02
CVSS 8.1 Dossier →
Component: quts_hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they ca...

📅 2026-01-02
CVSS 8.1 Dossier →
Component: quts_hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they ca...

📅 2026-01-02
CVSS 8.1 Dossier →
Component: quts_hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...

📅 2026-01-02
CVSS 4.9 Dossier →
Component: quts_hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...

📅 2026-01-02
CVSS 4.9 Dossier →
Component: quts_hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...

📅 2026-01-02
CVSS 4.9 Dossier →
Component: quts_hero

An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote ...

📅 2026-01-02
CVSS 6.5 Dossier →
Component: quts_hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account...

📅 2026-01-02
CVSS 6.5 Dossier →
CVE-2025-62849 CRITICAL
Component: qts

An SQL injection vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerabi...

📅 2025-12-16
CVSS 9.8 Dossier →
Page 5 of 27 (633 Total Records)