Browse CVEs

MEDIUM 6.1 CVE-2018-0716 Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Cent… Qts Mitigation only Fix from $1,6002018-11-30 CRITICAL 9.8 CVE-2018-14746 Command Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier… Qts Mitigation only Fix from $2,3002018-11-28 CRITICAL 9.8 CVE-2018-14749 Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier v… Qts Mitigation only Fix from $2,3002018-11-28 HIGH 7.5 CVE-2018-14747 NULL Pointer Dereference vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and … Qts Mitigation only Fix from $1,9502018-11-28 HIGH 7.5 CVE-2018-14748 Improper Authorization vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and ea… Qts Mitigation only Fix from $1,9502018-11-28 HIGH 7.7 CVE-2018-0721 Buffer Overflow vulnerability in NAS devices. QTS allows attackers to run arbitrary code. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and… Qts Mitigation only Fix from $1,9502018-11-27 MEDIUM 5.5 CVE-2018-0719 Cross-site Scripting (XSS) vulnerability in NAS devices of QNAP Systems Inc. QTS allows attackers to inject javascript. This issue affects: QNAP Syst… Qts Mitigation only Fix from $1,6002018-11-27 MEDIUM 6.1 CVE-2017-13072 Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and thei… Qts Mitigation only Fix from $1,6002018-06-21 MEDIUM 6.1 CVE-2018-0711 Cross-site scripting (XSS) vulnerability in QNAP QTS 4.3.3 build 20180126, QTS 4.3.4 build 20180315, and their earlier versions could allow remote at… Qts Mitigation only Fix from $1,6002018-04-30 MEDIUM 6.1 CVE-2017-7631 Cross-site scripting (XSS) vulnerability in the share link function of File Station of QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlie… Qts Mitigation only Fix from $1,6002018-03-27 MEDIUM 6.1 CVE-2017-7632 Cross-site scripting (XSS) vulnerability in File Station of QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attacke… Qts Mitigation only Fix from $1,6002018-03-27 MEDIUM 5.3 CVE-2017-7630 QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to obtain potentially sensitive information (firmware ver… Qts Mitigation only Fix from $1,6002018-03-27 CRITICAL 9.8 CVE-2017-13071 QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3… Video Station Mitigation only Fix from $2,3002017-11-22 CRITICAL 9.8 CVE-2017-10700 In the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can execute arbitrary system commands as the root user of … Qts Mitigation only Fix from $2,3002017-09-19 CRITICAL 9.8 CVE-2017-12582 Unprivileged user can access all functions in the Surveillance Station component in QNAP TS212P devices with firmware 4.2.1 build 20160601. Unprivile… Ts 212p Firmware Mitigation only Fix from $2,3002017-08-18 HIGH 7.5 CVE-2015-6036 QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, and consequently upload files, via a spoofed HTTP request. Sinage Station Mitigation only Fix from $1,9502016-02-27 MEDIUM 6.8 CVE-2013-0144 Cross-site request forgery (CSRF) vulnerability in cgi-bin/create_user.cgi on QNAP VioStor NVR devices with firmware 4.0.3 allows remote attackers to… Viostor Network Video Recorder Mitigation only Fix from $1,6002013-06-07 MEDIUM 6.5 CVE-2013-0143EPSS 7% cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authen… Viostor Network Video Recorder Mitigation only Fix from $1,6002013-06-07 MEDIUM 5.0 CVE-2013-0142 QNAP VioStor NVR devices with firmware 4.0.3, and the Surveillance Station Pro component in QNAP NAS, have a hardcoded guest account, which allows re… Viostor Network Video Recorder Mitigation only Fix from $1,6002013-06-07 MEDIUM 5.9 CVE-2009-3200 The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK … Ts 239 Pro Turbo Nas No fix yet Fix from $1,6002009-09-21 MEDIUM 5.5 CVE-2009-3278 The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery … Ts 239 Pro Firmware No fix yet Fix from $1,6002009-09-21