CVE-2024-48867
Published Dec 6, 2024An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability c…
Vendor archive
qnap CVEs
Beta · best-effort636 CVEs tagged to vendor qnap — 80 Critical, 167 High, 265 Medium, 124 Low, 0 Unrated.
CVE-2024-48866
Published Dec 6, 2024An improper handling of URL encoding (Hex Encoding) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow r…
CVE-2024-48865
Published Dec 6, 2024An improper certificate validation vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow attackers with loc…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-48863
Published Dec 6, 2024A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-48859
Published Dec 6, 2024An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to compro…
CVE-2024-50401
Published Nov 22, 2024A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote a…
CVE-2024-50400
Published Nov 22, 2024A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote a…
CVE-2024-50399
Published Nov 22, 2024A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote a…
CVE-2024-50398
Published Nov 22, 2024A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote a…
CVE-2024-50397
Published Nov 22, 2024A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote a…
CVE-2024-50396
Published Nov 22, 2024A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote a…
CVE-2024-50395
Published Nov 22, 2024An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network att…
CVE-2024-48862
Published Nov 22, 2024A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended loc…
CVE-2024-48861
Published Nov 22, 2024An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network attackers to execute commands…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-48860
Published Nov 22, 2024An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remote attackers to execute commands. We h…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-38647
Published Nov 22, 2024An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the securit…
CVE-2024-38646
Published Nov 22, 2024An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow local authenticated…
CVE-2024-38645
Published Nov 22, 2024A server-side request forgery (SSRF) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote authenticated attackers to read…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-38644
Published Nov 22, 2024An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote authenticated attackers to execute commands.…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-38643
Published Nov 22, 2024A missing authentication for critical function vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to gain acce…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-37050
Published Nov 22, 2024A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote a…
CVE-2024-37049
Published Nov 22, 2024A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote a…
CVE-2024-37048
Published Nov 22, 2024A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have…
CVE-2024-37047
Published Nov 22, 2024A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote a…
CVE-2024-37046
Published Nov 22, 2024A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained adm…
Showing 276-300 of 636 CVEsPage 12 of 26