Browse CVEs

CRITICAL 9.8 CVE-2025-62849 An SQL injection vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerab… Qts Mitigation only Fix from $2,3002025-12-16 HIGH 7.5 CVE-2025-62847 An improper neutralization of argument delimiters in a command vulnerability has been reported to affect several QNAP operating system versions. The … Qts Mitigation only Fix from $1,9502025-12-16 HIGH 7.5 CVE-2025-62848 A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit th… Qts Mitigation only Fix from $1,9502025-12-16 CRITICAL 9.8 CVE-2017-20210 Photo Station 5.4.1 & 5.2.7 include the security fix for the vulnerability related to the XMR mining programs identified by internal research. Photo Station Mitigation only Fix from $2,3002025-11-11 HIGH 8.8 CVE-2025-58469 A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The remote attackers can then exploit the vulnerability t… Qulog Center 1.8.2.923+ Fix from $1,9502025-11-07 HIGH 7.5 CVE-2025-58464 A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can then exploit the vulnerability to read th… Qumagie 2.7.3+ Fix from $1,9502025-11-07 MEDIUM 5.4 CVE-2025-58465 A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exp… Download Station 5.10.0.305+ Fix from $1,6002025-11-07 MEDIUM 6.5 CVE-2025-57712 A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… Qsync Central 5.0.0.3+ Fix from $1,6002025-11-07 MEDIUM 5.4 CVE-2025-57706 A cross-site scripting (XSS) vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then explo… File Station 5.5.6.5018+ Fix from $1,6002025-11-07 MEDIUM 6.5 CVE-2025-53408 A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit… File Station 5.5.6.5018+ Fix from $1,6002025-11-07 MEDIUM 6.5 CVE-2025-53409 An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a… File Station 5.5.6.5018+ Fix from $1,6002025-11-07 MEDIUM 6.5 CVE-2025-53410 An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a… File Station 5.5.6.5018+ Fix from $1,6002025-11-07 MEDIUM 6.5 CVE-2025-53412 A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit… File Station 5.5.6.5018+ Fix from $1,6002025-11-07 MEDIUM 6.5 CVE-2025-53413 An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a… File Station 5.5.6.5018+ Fix from $1,6002025-11-07 CRITICAL 9.8 CVE-2025-52425 An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or c… Qumagie 2.7.0+ Fix from $2,3002025-11-07 MEDIUM 6.5 CVE-2025-47207 A NULL pointer dereference vulnerability has been reported to affect several product versions. If a remote attacker gains a user account, they can th… File Station 5.5.6.5018+ Fix from $1,6002025-11-07 MEDIUM 6.5 CVE-2025-52865 A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit… File Station 5.5.6.5018+ Fix from $1,6002025-11-07 HIGH 7.8 CVE-2025-57714 An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can th… Netbak Replicator 4.5.15.0807+ Fix from $1,9502025-10-03 MEDIUM 6.8 CVE-2025-54154 An improper authentication vulnerability has been reported to affect QNAP Authenticator. If an attacker gains physical access, they can then exploit … Authenticator 1.3.1.1227+ Fix from $1,6002025-10-03 HIGH 8.8 CVE-2025-53595 An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… Qsync Central 5.0.0.2+ Fix from $1,9502025-10-03 HIGH 8.8 CVE-2025-54153 An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… Qsync Central 5.0.0.2+ Fix from $1,9502025-10-03 MEDIUM 6.5 CVE-2025-52867 An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can the… Qsync Central 5.0.0.2+ Fix from $1,6002025-10-03 MEDIUM 6.5 CVE-2025-53406 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker g… Qts Mitigation only Fix from $1,6002025-10-03 MEDIUM 6.5 CVE-2025-53407 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker g… Qts Mitigation only Fix from $1,6002025-10-03 MEDIUM 6.5 CVE-2025-48730 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker g… Qts Mitigation only Fix from $1,6002025-10-03 MEDIUM 6.5 CVE-2025-52429 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker g… Qts Mitigation only Fix from $1,6002025-10-03 HIGH 8.8 CVE-2025-44014 An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the … Qsync Central 5.0.0.1+ Fix from $1,9502025-10-03 HIGH 7.2 CVE-2025-47212 A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator acc… Qts Mitigation only Fix from $1,9502025-10-03 MEDIUM 6.5 CVE-2025-47210 A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit … Qsync Central 5.0.0.2+ Fix from $1,6002025-10-03 MEDIUM 6.5 CVE-2025-44008 A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit … Qsync Central 5.0.0.1+ Fix from $1,6002025-10-03