Browse CVEs

MEDIUM 5.4 CVE-2024-32768 A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers wh… Photo Station 6.4.3+ Fix from $1,6002024-11-22 MEDIUM 5.4 CVE-2024-32769 A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers wh… Photo Station 6.4.3+ Fix from $1,6002024-11-22 MEDIUM 5.4 CVE-2024-32770 A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers wh… Photo Station 6.4.3+ Fix from $1,6002024-11-22 HIGH 7.8 CVE-2024-38641 An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow… Qts Mitigation only Fix from $1,9502024-09-06 HIGH 7.8 CVE-2024-38642 An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users… Qumagie Mitigation only Fix from $1,9502024-09-06 MEDIUM 5.4 CVE-2024-38640 A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If exploited, the vulnerability could allow authenticated us… Download Station 5.8.6.283+ Fix from $1,6002024-09-06 HIGH 8.8 CVE-2024-32763 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-09-06 MEDIUM 6.1 CVE-2024-32762 A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow users to inject mali… Qulog Center 1.7.0.827 / 1.8.0.872+ Fix from $1,6002024-09-06 MEDIUM 5.4 CVE-2024-27126 A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated use… Notes Station 3 3.9.6+ Fix from $1,6002024-09-06 MEDIUM 6.5 CVE-2024-21904 A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users … Qts Mitigation only Fix from $1,6002024-09-06 MEDIUM 5.4 CVE-2024-27122 A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated use… Notes Station 3 3.9.6+ Fix from $1,6002024-09-06 HIGH 8.8 CVE-2023-51367 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-09-06 HIGH 8.8 CVE-2024-21898 An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow… Qts Mitigation only Fix from $1,9502024-09-06 MEDIUM 6.5 CVE-2023-51366 A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users … Qts Mitigation only Fix from $1,6002024-09-06 MEDIUM 6.5 CVE-2023-51368 A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could al… Qts Mitigation only Fix from $1,6002024-09-06 MEDIUM 5.4 CVE-2024-21897 A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could … Qts Mitigation only Fix from $1,6002024-09-06 HIGH 8.8 CVE-2023-45038 An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise t… Music Station 5.4.0+ Fix from $1,9502024-09-06 HIGH 8.8 CVE-2023-47563 An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to e… Video Station 5.8.2+ Fix from $1,9502024-09-06 HIGH 8.8 CVE-2023-50360 A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject ma… Video Station 5.8.2+ Fix from $1,9502024-09-06 HIGH 7.2 CVE-2023-39300 An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated administrator… Qts Mitigation only Fix from $1,9502024-09-06 HIGH 8.8 CVE-2023-34974 An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow… Qts Mitigation only Fix from $1,9502024-09-06 HIGH 7.8 CVE-2023-39298 A missing authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow… Qts Mitigation only Fix from $1,9502024-09-06 HIGH 7.2 CVE-2023-34979 An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow… Qts Mitigation only Fix from $1,9502024-09-06 MEDIUM 6.7 CVE-2022-27592 An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow local auth… Qvr Smart Client 2.4.0.0570+ Fix from $1,6002024-09-06 HIGH 8.8 CVE-2024-27128 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-05-21 HIGH 8.8 CVE-2024-27129 A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-05-21 HIGH 8.8 CVE-2024-27130EPSS 38% A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vuln… Qts Mitigation only Fix from $1,9502024-05-21 HIGH 8.8 CVE-2024-27127 A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authentic… Qts Mitigation only Fix from $1,9502024-05-21 HIGH 8.1 CVE-2024-21902 An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploit… Qts Mitigation only Fix from $1,9502024-05-21 MEDIUM 6.6 CVE-2023-47220 An OS command injection vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow authenticated a… Media Streaming Add On 500.1.1.5+ Fix from $1,6002024-05-03