qnap Vulnerability Advisory Catalog

Total 633 security vulnerabilities recorded for qnap software and firmware.

← Back to All Vendors
Component: qts

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...

📅 2025-10-03
CVSS 4.9 Dossier →
Component: qts

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator acco...

📅 2025-10-03
CVSS 7.2 Dossier →
Component: qts

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account...

📅 2025-10-03
CVSS 4.9 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2025-10-03
CVSS 6.5 Dossier →
Component: qsync_central

An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the v...

📅 2025-10-03
CVSS 8.8 Dossier →
Component: qsync_central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user acc...

📅 2025-10-03
CVSS 6.5 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2025-10-03
CVSS 6.5 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2025-10-03
CVSS 6.5 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2025-10-03
CVSS 6.5 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2025-10-03
CVSS 6.5 Dossier →
Component: qsync_central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user acc...

📅 2025-10-03
CVSS 6.5 Dossier →
Component: qsync_central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user acc...

📅 2025-10-03
CVSS 6.5 Dossier →
Component: qsync_central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user acc...

📅 2025-10-03
CVSS 6.5 Dossier →
Component: qsync_central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user acc...

📅 2025-10-03
CVSS 6.5 Dossier →
Component: qsync_central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnera...

📅 2025-10-03
CVSS 6.5 Dossier →
Component: video_station

An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnera...

📅 2025-10-03
CVSS 8.8 Dossier →
CVE-2025-52856 CRITICAL
Component: qvr

An improper authentication vulnerability has been reported to affect VioStor. If a remote attacker, they can then exploit the vulnerability to comprom...

📅 2025-08-29
CVSS 9.8 Dossier →
Component: hybriddesk_station

A command injection vulnerability has been reported to affect HybridDesk Station. If an attacker gains local network access, they can then exploit the...

📅 2025-08-29
CVSS 8.4 Dossier →
Component: qsync_central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnera...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qsync_central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnera...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qsync_central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnera...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qsync_central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnera...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qts

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account...

📅 2025-08-29
CVSS 4.9 Dossier →
Component: qsync_central

An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then e...

📅 2025-08-29
CVSS 8.8 Dossier →
Page 8 of 27 (633 Total Records)