Browse CVEs

CRITICAL 9.8 CVE-2021-44056 An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attac… Video Station 5.1.8 / 5.3.13+ Fix from $2,3002022-05-05 CRITICAL 9.8 CVE-2021-44057 An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attac… Photo Station 5.4.13 / 5.7.16+ Fix from $2,3002022-05-05 HIGH 8.8 CVE-2021-44051 A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows … Qts 4.3.3.1945 / 4.3.4.1976+ Fix from $1,9502022-05-05 HIGH 8.1 CVE-2021-44052 An improper link resolution before file access ('Link Following') vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero,… Qts 4.3.3.1945 / 4.3.4.1976+ Fix from $1,9502022-05-05 MEDIUM 6.1 CVE-2021-44053 A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QTS, QuTS hero and QuTScloud. If exploited, this vulnerabi… Qts 4.3.3.1945 / 4.3.4.1976+ Fix from $1,6002022-05-05 MEDIUM 6.1 CVE-2021-44054 An open redirect vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows … Qts 4.3.3.1945 / 4.3.4.1976+ Fix from $1,6002022-05-05 MEDIUM 5.3 CVE-2021-38693 A path traversal vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, QTS, QVR Pro Appliance. If exploited, this vulne… Qts 4.5.4.1991 / 5.0.0.1986+ Fix from $1,6002022-05-05 MEDIUM 6.1 CVE-2021-34361 A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remo… Nas Proxy Server 1.4.2+ Fix from $1,6002022-02-25 MEDIUM 5.4 CVE-2021-34359 A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remo… Nas Proxy Server 1.4.2+ Fix from $1,6002022-02-25 CRITICAL 9.8 CVE-2021-38679 An improper authentication vulnerability has been reported to affect QNAP NAS running Kazoo Server. If exploited, this vulnerability allows attackers… Kazoo Server 4.11.22+ Fix from $2,3002022-02-11 CRITICAL 9.8 CVE-2021-38682 A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability… Qvr Elite 2.1.3.0 / 2.1.4.0+ Fix from $2,3002022-01-14 CRITICAL 9.8 CVE-2021-38689 A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability… Qvr Elite 2.1.3.0 / 2.1.4.0+ Fix from $2,3002022-01-14 CRITICAL 9.8 CVE-2021-38690 A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability… Qvr Elite 2.1.3.0 / 2.1.4.0+ Fix from $2,3002022-01-14 CRITICAL 9.8 CVE-2021-38691 A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability… Qvr Elite 2.1.3.0 / 2.1.4.0+ Fix from $2,3002022-01-14 CRITICAL 9.8 CVE-2021-38692 A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability… Qvr Elite 2.1.3.0 / 2.1.4.0+ Fix from $2,3002022-01-14 MEDIUM 6.1 CVE-2021-38677 A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows remote … Qcalagent 1.1.7+ Fix from $1,6002022-01-14 MEDIUM 6.1 CVE-2021-38678 An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows attackers to redire… Qcalagent 1.1.7+ Fix from $1,6002022-01-14 MEDIUM 6.1 CVE-2021-38674 A cross-site scripting (XSS) vulnerability has been reported to affect QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote a… Qts 4.5.4.1787+ Fix from $1,6002022-01-07 CRITICAL 9.8 CVE-2021-38687 A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station. If exploited, this vulnerability allows atta… Surveillance Station 5.1.5.3.6 / 5.1.5.4.6+ Fix from $2,3002021-12-29 HIGH 7.5 CVE-2021-38688 An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromi… Qfile 3.0.0.1105+ Fix from $1,9502021-12-29 MEDIUM 6.1 CVE-2021-38680 A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Kazoo Server. If exploited, this vulnerability allows remo… Kazoo Server 4.11.20+ Fix from $1,6002021-12-29 CRITICAL 9.8 CVE-2021-38685 A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run a… Qvr 5.1.6+ Fix from $2,3002021-11-26 HIGH 8.8 CVE-2021-38686 An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compr… Qvr 5.1.6+ Fix from $1,9502021-11-26 HIGH 8.8 CVE-2021-34358 We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 ( 2021/08/25 ) and later Qmailagent 3.0.2+ Fix from $1,9502021-11-20 MEDIUM 5.4 CVE-2021-38681 A reflected cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exploited, this vulnerability al… Ragic Cloud Db after 3.7.0.1 Fix from $1,6002021-11-20 CRITICAL 9.8 CVE-2021-38684 A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attack… Multimedia Console 1.4.3+ Fix from $2,3002021-11-13 MEDIUM 6.1 CVE-2021-34357 A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QmailAgent. If exploited, this vulnerability allows remote… Qmailagent 3.0.2+ Fix from $1,6002021-11-13 HIGH 7.2 CVE-2021-34362 A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remo… Media Streaming Add On 430.1.8.12 / 500.0.0.3+ Fix from $1,9502021-10-22 CRITICAL 9.8 CVE-2021-34352 A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers … Qvr 5.1.5+ Fix from $2,3002021-10-01 MEDIUM 5.4 CVE-2021-34354 A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows rem… Photo Station 6.0.18+ Fix from $1,6002021-10-01