Browse CVEs

CRITICAL 9.8 CVE-2024-50393 A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow rem… Qts Mitigation only Fix from $2,3002024-12-06 HIGH 7.5 CVE-2024-48868 An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If … Qts Mitigation only Fix from $1,9502024-12-06 HIGH 7.2 CVE-2024-50402 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-12-06 HIGH 7.2 CVE-2024-50403 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-12-06 CRITICAL 9.8 CVE-2024-48863 A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers to execute… License Center 1.9.43+ Fix from $2,3002024-12-06 CRITICAL 9.1 CVE-2024-48859 An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could al… Qts Mitigation only Fix from $2,3002024-12-06 HIGH 7.5 CVE-2024-48865 An improper certificate validation vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability … Qts Mitigation only Fix from $1,9502024-12-06 HIGH 7.5 CVE-2024-48867 An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If … Qts Mitigation only Fix from $1,9502024-12-06 MEDIUM 5.3 CVE-2024-48866 An improper handling of URL encoding (Hex Encoding) vulnerability has been reported to affect several QNAP operating system versions. If exploited, t… Qts Mitigation only Fix from $1,6002024-12-06 HIGH 7.2 CVE-2024-50399 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-11-22 HIGH 7.2 CVE-2024-50400 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-11-22 HIGH 7.2 CVE-2024-50401 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-11-22 HIGH 8.8 CVE-2024-50395 An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability… Media Streaming Add On 500.1.1.6+ Fix from $1,9502024-11-22 HIGH 8.8 CVE-2024-50396 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-11-22 HIGH 8.8 CVE-2024-50397 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-11-22 HIGH 7.2 CVE-2024-50398 A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-11-22 CRITICAL 9.8 CVE-2024-48860 An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remote attack… Qurouter Mitigation only Fix from $2,3002024-11-22 CRITICAL 9.8 CVE-2024-48862 A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the… Qulog Center 1.7.0.831 / 1.8.0.888+ Fix from $2,3002024-11-22 HIGH 7.8 CVE-2024-48861 An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network… Qurouter Mitigation only Fix from $1,9502024-11-22 HIGH 8.8 CVE-2024-38644 An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote authenticated a… Notes Station 3 3.9.7+ Fix from $1,9502024-11-22 HIGH 7.5 CVE-2024-38647 An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attac… Ai Core Mitigation only Fix from $1,9502024-11-22 MEDIUM 6.5 CVE-2024-38645 A server-side request forgery (SSRF) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote au… Notes Station 3 3.9.7+ Fix from $1,6002024-11-22 MEDIUM 6.0 CVE-2024-38646 An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability c… Notes Station 3 3.9.7+ Fix from $1,6002024-11-22 CRITICAL 9.8 CVE-2024-38643 A missing authentication for critical function vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow… Notes Station 3 3.9.7+ Fix from $2,3002024-11-22 MEDIUM 6.5 CVE-2024-37049 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,6002024-11-22 MEDIUM 6.5 CVE-2024-37050 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,6002024-11-22 HIGH 7.2 CVE-2024-37041 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-11-22 HIGH 7.2 CVE-2024-37044 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-11-22 MEDIUM 6.5 CVE-2024-37047 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,6002024-11-22 MEDIUM 5.4 CVE-2024-32767 A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers wh… Photo Station 6.4.3+ Fix from $1,6002024-11-22