qnap Vulnerability Advisory Catalog

Total 633 security vulnerabilities recorded for qnap software and firmware.

← Back to All Vendors
Component: qsync_central

An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then e...

📅 2025-08-29
CVSS 8.8 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qts

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qts

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, th...

📅 2025-08-29
CVSS 8.1 Dossier →
Component: qts

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qts

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qts

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qts

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qts

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qts

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they ca...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qts

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they ...

📅 2025-08-29
CVSS 8.8 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qsync_central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit t...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qsync_central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user acc...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qsync_central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user acc...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: file_station

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user ac...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: file_station

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user ac...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qsync_central

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qsync_central

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnera...

📅 2025-08-29
CVSS 8.8 Dossier →
Component: qsync_central

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnera...

📅 2025-08-29
CVSS 8.8 Dossier →
Component: file_station

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user ac...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: file_station

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit ...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: file_station

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit ...

📅 2025-08-29
CVSS 6.5 Dossier →
Component: qurouter

A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then explo...

📅 2025-08-29
CVSS 7.2 Dossier →
Page 9 of 27 (633 Total Records)