Browse CVEs

HIGH 8.8 CVE-2023-39295 An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute… Qumagie 2.1.4+ Fix from $1,9502023-11-10 HIGH 8.8 CVE-2023-41284 A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject maliciou… Qumagie 2.1.4+ Fix from $1,9502023-11-10 HIGH 8.8 CVE-2023-41285 A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject maliciou… Qumagie 2.1.4+ Fix from $1,9502023-11-10 HIGH 7.2 CVE-2023-23367 An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow… Qts Mitigation only Fix from $1,9502023-11-10 CRITICAL 9.8 CVE-2023-23368EPSS 19% An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow… Qts Mitigation only Fix from $2,3002023-11-03 CRITICAL 9.8 CVE-2023-23369EPSS 15% An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow… Qts Mitigation only Fix from $2,3002023-11-03 HIGH 7.5 CVE-2023-39299 A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to read the contents of u… Music Station 4.8.11 / 5.1.16+ Fix from $1,9502023-11-03 HIGH 8.8 CVE-2023-23373 An OS command injection vulnerability has been reported to affect QUSBCam2. If exploited, the vulnerability could allow users to execute commands via… Qusbcam2 2.0.3+ Fix from $1,9502023-10-20 HIGH 8.8 CVE-2023-34975 An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow… Video Station 5.7.0+ Fix from $1,9502023-10-13 HIGH 8.8 CVE-2023-34976 A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject ma… Video Station 5.7.0+ Fix from $1,9502023-10-13 HIGH 7.5 CVE-2023-32974 A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users … Qts 5.1.0.2444+ Fix from $1,9502023-10-13 HIGH 7.2 CVE-2023-32976 An OS command injection vulnerability has been reported to affect Container Station. If exploited, the vulnerability could allow authenticated admini… Container Station 2.6.7.44+ Fix from $1,9502023-10-13 MEDIUM 5.4 CVE-2023-34977 A cross-site scripting (XSS) vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users… Video Station 2023.07.27+ Fix from $1,6002023-10-13 HIGH 7.2 CVE-2023-32973 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts 4.5.4.2467 / 5.0.1.2425+ Fix from $1,9502023-10-13 HIGH 7.2 CVE-2023-32971 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts 4.5.4.2467 / 5.0.1.2425+ Fix from $1,9502023-10-06 HIGH 7.2 CVE-2023-32972 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts 4.5.4.2467 / 5.0.1.2425+ Fix from $1,9502023-10-06 MEDIUM 6.5 CVE-2023-23365 A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the… Music Station 5.3.22+ Fix from $1,6002023-10-06 MEDIUM 6.5 CVE-2023-23366 A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the… Music Station 5.3.22+ Fix from $1,6002023-10-06 CRITICAL 9.8 CVE-2023-23364 A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possib… Multimedia Console 1.4.7 / 2.1.1+ Fix from $2,3002023-09-22 CRITICAL 9.8 CVE-2023-23363 A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating system. If exploited, the vulnerability possibl… Qts 4.3.3.2420 / 4.3.4.245+ Fix from $2,3002023-09-22 HIGH 8.8 CVE-2023-23362 An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated… Qts 4.5.4.2374 / 5.0.1.2376+ Fix from $1,9502023-09-22 HIGH 8.8 CVE-2023-34971 An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows l… Qts 4.5.4.2467 / 5.0.1.2425+ Fix from $1,9502023-08-24 MEDIUM 6.5 CVE-2023-34972 A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability p… Qts 5.0.1.2425 / 5.1.0.2444+ Fix from $1,6002023-08-24 MEDIUM 5.3 CVE-2023-34973 An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote user… Qts 5.0.1.2425 / 5.1.0.2444+ Fix from $1,6002023-08-24 HIGH 7.2 CVE-2023-23355 An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote auth… Qvr 5.0.1.2346+ Fix from $1,9502023-03-29 CRITICAL 9.8 CVE-2022-27596 A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to inject ma… Qts 5.0.1.2234+ Fix from $2,3002023-01-30 CRITICAL 9.1 CVE-2022-27593 KEVEPSS 88% An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could a… Photo Station 5.2.14 / 5.4.15+ Fix from $2,3002022-09-08 HIGH 8.8 CVE-2021-34360 A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allo… Nas Proxy Server 1.4.2 / 1.4.3+ Fix from $1,9502022-05-26 CRITICAL 9.8 CVE-2022-27588 We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later Qvr after 5.1.6 Fix from $2,3002022-05-05 CRITICAL 9.8 CVE-2021-44055 An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote … Video Station 5.1.8 / 5.3.13+ Fix from $2,3002022-05-05