qnap Vulnerability Advisory Catalog

Total 633 security vulnerabilities recorded for qnap software and firmware.

← Back to All Vendors
Component: qts

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the...

📅 2025-12-16
CVSS 7.5 Dossier →
Component: qts

An improper neutralization of argument delimiters in a command vulnerability has been reported to affect several QNAP operating system versions. The r...

📅 2025-12-16
CVSS 7.5 Dossier →
CVE-2025-59385 CRITICAL
Component: qts

An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then e...

📅 2025-12-16
CVSS 9.8 Dossier →
CVE-2017-20210 CRITICAL
Component: photo_station

Photo Station 5.4.1 & 5.2.7 include the security fix for the vulnerability related to the XMR mining programs identified by internal research....

📅 2025-11-11
CVSS 9.8 Dossier →
Component: qulog_center

A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The remote attackers can then exploit the vulnerability to...

📅 2025-11-07
CVSS 8.8 Dossier →
Component: download_station

A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then expl...

📅 2025-11-07
CVSS 5.4 Dossier →
Component: qumagie

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can then exploit the vulnerability to read the...

📅 2025-11-07
CVSS 7.5 Dossier →
Component: download_station

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can th...

📅 2025-11-07
CVSS 4.9 Dossier →
Component: qsync_central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnera...

📅 2025-11-07
CVSS 6.5 Dossier →
Component: file_station

A cross-site scripting (XSS) vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploi...

📅 2025-11-07
CVSS 5.4 Dossier →
Component: qulog_center

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If a remote attacker gains an administrator account, they can the...

📅 2025-11-07
CVSS 4.8 Dossier →
Component: file_station

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user ac...

📅 2025-11-07
CVSS 6.5 Dossier →
Component: file_station

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit ...

📅 2025-11-07
CVSS 6.5 Dossier →
Component: file_station

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an admini...

📅 2025-11-07
CVSS 4.9 Dossier →
Component: file_station

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user ac...

📅 2025-11-07
CVSS 6.5 Dossier →
Component: file_station

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user ac...

📅 2025-11-07
CVSS 6.5 Dossier →
Component: file_station

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit ...

📅 2025-11-07
CVSS 6.5 Dossier →
Component: file_station

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit ...

📅 2025-11-07
CVSS 6.5 Dossier →
CVE-2025-52425 CRITICAL
Component: qumagie

An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or co...

📅 2025-11-07
CVSS 9.8 Dossier →
Component: file_station

A NULL pointer dereference vulnerability has been reported to affect several product versions. If a remote attacker gains a user account, they can the...

📅 2025-11-07
CVSS 6.5 Dossier →
Component: netbak_replicator

An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can the...

📅 2025-10-03
CVSS 7.8 Dossier →
Component: authenticator

An improper authentication vulnerability has been reported to affect QNAP Authenticator. If an attacker gains physical access, they can then exploit t...

📅 2025-10-03
CVSS 6.8 Dossier →
Component: qsync_central

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnera...

📅 2025-10-03
CVSS 8.8 Dossier →
Component: qsync_central

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnera...

📅 2025-10-03
CVSS 8.8 Dossier →
Page 6 of 27 (633 Total Records)