Browse CVEs

HIGH 8.1 CVE-2025-22482 A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow rem… Qsync Central 4.5.0.6+ Fix from $1,9502025-06-06 HIGH 7.5 CVE-2025-22490 A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploi… File Station 5.5.6.4847+ Fix from $1,9502025-06-06 HIGH 7.5 CVE-2025-29872 An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user … File Station 5.5.6.4847+ Fix from $1,9502025-06-06 HIGH 7.5 CVE-2025-29873 A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploi… File Station 5.5.6.4847+ Fix from $1,9502025-06-06 MEDIUM 5.5 CVE-2025-29871 An out-of-bounds read vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, they can then ex… File Station 5.5.6.4847+ Fix from $1,6002025-06-06 HIGH 8.8 CVE-2025-22481 A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow rem… Qts Mitigation only Fix from $1,9502025-06-06 HIGH 7.8 CVE-2024-13088 An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vuln… Qurouter Mitigation only Fix from $1,9502025-06-06 MEDIUM 5.4 CVE-2024-50406 A cross-site scripting (XSS) vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers w… License Center 1.9.49+ Fix from $1,6002025-06-06 MEDIUM 5.4 CVE-2024-56805 A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remot… Qts Mitigation only Fix from $1,6002025-06-06 MEDIUM 6.7 CVE-2024-13087 A command injection vulnerability has been reported to affect QHora. If an attacker gains local network access who have also gained an administrator … Qurouter Mitigation only Fix from $1,6002025-06-06 CRITICAL 9.1 CVE-2024-53695 A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to… Hybrid Backup Sync 25.1.4.952+ Fix from $2,3002025-03-07 HIGH 7.2 CVE-2024-53697 An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow … Quts Hero Mitigation only Fix from $1,9502025-03-07 HIGH 7.2 CVE-2024-53699 An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow … Qts Mitigation only Fix from $1,9502025-03-07 HIGH 7.2 CVE-2024-53700 A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers who have gained adm… Qurouter Mitigation only Fix from $1,9502025-03-07 CRITICAL 9.8 CVE-2024-50390 A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers to execute arbitrar… Qurouter Mitigation only Fix from $2,3002025-03-07 HIGH 8.8 CVE-2024-50394 An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow remote attackers t… Helpdesk 3.3.3+ Fix from $1,9502025-03-07 HIGH 7.1 CVE-2024-53693 An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If … Qts Mitigation only Fix from $1,9502025-03-07 MEDIUM 5.5 CVE-2024-50405 An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If … Qts Mitigation only Fix from $1,6002025-03-07 CRITICAL 9.1 CVE-2024-48864 A files or directories accessible to external parties vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could… File Station 5.5.6.4741+ Fix from $2,3002025-03-07 HIGH 7.5 CVE-2024-13086 An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers … Qts 5.2.0.2851+ Fix from $1,9502025-03-07 HIGH 7.2 CVE-2024-38638 An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow … Qts Mitigation only Fix from $1,9502025-03-07 HIGH 8.7 CVE-2023-23354 A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could … Qulog Center 1.3.1.645 / 1.4.1.691+ Fix from $1,9502024-12-19 HIGH 7.8 CVE-2022-27595 An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local attackers… Qvpn 2.0.0.1316+ Fix from $1,9502024-12-19 HIGH 7.5 CVE-2022-27600 An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerabilit… Qts 4.5.4.2280 / 5.0.1.2277+ Fix from $1,9502024-12-19 HIGH 7.2 CVE-2023-23356 A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow rem… Qufirewall 2.3.3+ Fix from $1,9502024-12-19 HIGH 8.8 CVE-2024-50404 A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gaine… Qsync Central 4.4.0.16+ Fix from $1,9502024-12-06 HIGH 8.8 CVE-2024-53691EPSS 20% A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote… Qts Mitigation only Fix from $1,9502024-12-06 CRITICAL 9.8 CVE-2024-50387EPSS 10% A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote … Smb Service Mitigation only Fix from $2,3002024-12-06 CRITICAL 9.8 CVE-2024-50388 An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attack… Hybrid Backup Sync Mitigation only Fix from $2,3002024-12-06 CRITICAL 9.8 CVE-2024-50389 A SQL injection vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to inject malicious … Qurouter Mitigation only Fix from $2,3002024-12-06