Vulnerabilities > Qnap

DATE CVE VULNERABILITY TITLE RISK
2022-05-05 CVE-2021-44055 Missing Authorization vulnerability in Qnap Video Station
An missing authorization vulnerability has been reported to affect QNAP device running Video Station.
network
low complexity
qnap CWE-862
7.5
2022-05-05 CVE-2021-44056 Improper Authentication vulnerability in Qnap Video Station
An improper authentication vulnerability has been reported to affect QNAP device running Video Station.
network
low complexity
qnap CWE-287
critical
10.0
2022-05-05 CVE-2021-44057 Improper Authentication vulnerability in Qnap Photo Station
An improper authentication vulnerability has been reported to affect QNAP device running Photo Station.
network
low complexity
qnap CWE-287
critical
10.0
2022-05-05 CVE-2022-27588 Command Injection vulnerability in Qnap QVR
We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later
network
low complexity
qnap CWE-77
7.5
2022-02-25 CVE-2021-34359 Cross-site Scripting vulnerability in Qnap NAS Proxy Server 1.3.0
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server.
network
qnap CWE-79
3.5
2022-02-25 CVE-2021-34361 Cross-site Scripting vulnerability in Qnap NAS Proxy Server 1.3.0
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server.
network
qnap CWE-79
4.3
2022-02-11 CVE-2021-38679 Improper Authentication vulnerability in Qnap Kazoo Server 4.10.12/4.10.9/4.11.20
An improper authentication vulnerability has been reported to affect QNAP NAS running Kazoo Server.
network
low complexity
qnap CWE-287
7.5
2022-01-14 CVE-2021-38677 Cross-site Scripting vulnerability in Qnap Qcalagent
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QcalAgent.
network
qnap CWE-79
4.3
2022-01-14 CVE-2021-38678 Open Redirect vulnerability in Qnap Qcalagent
An open redirect vulnerability has been reported to affect QNAP device running QcalAgent.
network
qnap CWE-601
5.8
2022-01-14 CVE-2021-38682 Out-of-bounds Write vulnerability in Qnap QVR Elite, QVR Guard and QVR PRO
A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard.
network
low complexity
qnap CWE-787
7.5