CVE-2023-45039
Published Jan 5, 2024A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenti…
Vendor archive
qnap CVEs
Beta · best-effort635 CVEs tagged to vendor qnap — 80 Critical, 167 High, 264 Medium, 124 Low, 0 Unrated.
CVE-2023-41289
Published Jan 5, 2024An OS command injection vulnerability has been reported to affect QcalAgent. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We…
CVE-2023-41288
Published Jan 5, 2024An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to execute commands via a network. We have alre…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-41287
Published Jan 5, 2024A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-39296
Published Jan 5, 2024A prototype pollution vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to override existing attr…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-39294
Published Jan 5, 2024An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators…
CVE-2023-47565
Published Dec 8, 2023An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated u…
- evidence mentions
- 4
- Buzz score
- 49.1
CVE-2023-32975
Published Dec 8, 2023A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenti…
CVE-2023-32968
Published Dec 8, 2023A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenti…
CVE-2023-23372
Published Dec 8, 2023A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to inject maliciou…
CVE-2023-41285
Published Nov 10, 2023A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have…
CVE-2023-41284
Published Nov 10, 2023A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have…
CVE-2023-39295
Published Nov 10, 2023An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We h…
CVE-2023-23367
Published Nov 10, 2023An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators…
CVE-2023-39301
Published Nov 3, 2023A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated us…
CVE-2023-39299
Published Nov 3, 2023A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sen…
CVE-2023-23369
Published Nov 3, 2023An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2023-23368
Published Nov 3, 2023An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2023-23373
Published Oct 20, 2023An OS command injection vulnerability has been reported to affect QUSBCam2. If exploited, the vulnerability could allow users to execute commands via a network. We have already f…
CVE-2023-34977
Published Oct 13, 2023A cross-site scripting (XSS) vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via…
CVE-2023-34976
Published Oct 13, 2023A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. W…
CVE-2023-34975
Published Oct 13, 2023An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators…
CVE-2023-32976
Published Oct 13, 2023An OS command injection vulnerability has been reported to affect Container Station. If exploited, the vulnerability could allow authenticated administrators to execute commands v…
CVE-2023-32974
Published Oct 13, 2023A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpe…
CVE-2023-32973
Published Oct 13, 2023A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenti…
Showing 401-425 of 635 CVEsPage 17 of 26