Vulnerability index

Browse CVEs

539 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Qumagie HIGH 8.8
CVE-2023-39295

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute…

Fix: 2.1.4+
Fix from $1,950 2023-11-10
Qumagie HIGH 8.8
CVE-2023-41284

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject maliciou…

Fix: 2.1.4+
Fix from $1,950 2023-11-10
Qumagie HIGH 8.8
CVE-2023-41285

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject maliciou…

Fix: 2.1.4+
Fix from $1,950 2023-11-10
Qts HIGH 7.2
CVE-2023-23367

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…

Mitigation only
Fix from $1,950 2023-11-10
Qts CRITICAL 9.8
CVE-2023-23368EPSS 19%

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…

Mitigation only
Fix from $2,300 2023-11-03
Qts CRITICAL 9.8
CVE-2023-23369EPSS 15%

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…

Mitigation only
Fix from $2,300 2023-11-03
Music Station HIGH 7.5
CVE-2023-39299

A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to read the contents of u…

Fix: 4.8.11 / 5.1.16+
Fix from $1,950 2023-11-03
Qusbcam2 HIGH 8.8
CVE-2023-23373

An OS command injection vulnerability has been reported to affect QUSBCam2. If exploited, the vulnerability could allow users to execute commands via…

Fix: 2.0.3+
Fix from $1,950 2023-10-20
Video Station HIGH 8.8
CVE-2023-34975

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…

Fix: 5.7.0+
Fix from $1,950 2023-10-13
Video Station HIGH 8.8
CVE-2023-34976

A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject ma…

Fix: 5.7.0+
Fix from $1,950 2023-10-13
Qts HIGH 7.5
CVE-2023-32974

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users …

Fix: 5.1.0.2444+
Fix from $1,950 2023-10-13
Container Station HIGH 7.2
CVE-2023-32976

An OS command injection vulnerability has been reported to affect Container Station. If exploited, the vulnerability could allow authenticated admini…

Fix: 2.6.7.44+
Fix from $1,950 2023-10-13
Video Station MEDIUM 5.4
CVE-2023-34977

A cross-site scripting (XSS) vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users…

Fix: 2023.07.27+
Fix from $1,600 2023-10-13
Qts HIGH 7.2
CVE-2023-32973

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln…

Fix: 4.5.4.2467 / 5.0.1.2425+
Fix from $1,950 2023-10-13
Qts HIGH 7.2
CVE-2023-32971

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln…

Fix: 4.5.4.2467 / 5.0.1.2425+
Fix from $1,950 2023-10-06
Qts HIGH 7.2
CVE-2023-32972

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln…

Fix: 4.5.4.2467 / 5.0.1.2425+
Fix from $1,950 2023-10-06
Music Station MEDIUM 6.5
CVE-2023-23365

A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the…

Fix: 5.3.22+
Fix from $1,600 2023-10-06
Music Station MEDIUM 6.5
CVE-2023-23366

A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the…

Fix: 5.3.22+
Fix from $1,600 2023-10-06
Multimedia Console CRITICAL 9.8
CVE-2023-23364

A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possib…

Fix: 1.4.7 / 2.1.1+
Fix from $2,300 2023-09-22
Qts CRITICAL 9.8
CVE-2023-23363

A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating system. If exploited, the vulnerability possibl…

Fix: 4.3.3.2420 / 4.3.4.245+
Fix from $2,300 2023-09-22
Qts HIGH 8.8
CVE-2023-23362

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated…

Fix: 4.5.4.2374 / 5.0.1.2376+
Fix from $1,950 2023-09-22
Qts HIGH 8.8
CVE-2023-34971

An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows l…

Fix: 4.5.4.2467 / 5.0.1.2425+
Fix from $1,950 2023-08-24
Qts MEDIUM 6.5
CVE-2023-34972

A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability p…

Fix: 5.0.1.2425 / 5.1.0.2444+
Fix from $1,600 2023-08-24
Qts MEDIUM 5.3
CVE-2023-34973

An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote user…

Fix: 5.0.1.2425 / 5.1.0.2444+
Fix from $1,600 2023-08-24
Qvr HIGH 7.2
CVE-2023-23355

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote auth…

Fix: 5.0.1.2346+
Fix from $1,950 2023-03-29
Qts CRITICAL 9.8
CVE-2022-27596

A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to inject ma…

Fix: 5.0.1.2234+
Fix from $2,300 2023-01-30
Photo Station CRITICAL 9.1
CVE-2022-27593 KEVEPSS 88%

An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could a…

Fix: 5.2.14 / 5.4.15+
Fix from $2,300 2022-09-08
Nas Proxy Server HIGH 8.8
CVE-2021-34360

A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allo…

Fix: 1.4.2 / 1.4.3+
Fix from $1,950 2022-05-26
Qvr CRITICAL 9.8
CVE-2022-27588

We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later

Fix: after 5.1.6
Fix from $2,300 2022-05-05
Video Station CRITICAL 9.8
CVE-2021-44055

An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote …

Fix: 5.1.8 / 5.3.13+
Fix from $2,300 2022-05-05