Vulnerabilities > Qnap

DATE CVE VULNERABILITY TITLE RISK
2022-01-14 CVE-2021-38689 Out-of-bounds Write vulnerability in Qnap QVR Elite, QVR Guard and QVR PRO
A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard.
network
low complexity
qnap CWE-787
7.5
2022-01-14 CVE-2021-38690 Out-of-bounds Write vulnerability in Qnap QVR Elite, QVR Guard and QVR PRO
A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard.
network
low complexity
qnap CWE-787
7.5
2022-01-14 CVE-2021-38691 Out-of-bounds Write vulnerability in Qnap QVR Elite, QVR Guard and QVR PRO
A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard.
network
low complexity
qnap CWE-787
7.5
2022-01-14 CVE-2021-38692 Out-of-bounds Write vulnerability in Qnap QVR Elite, QVR Guard and QVR PRO
A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard.
network
low complexity
qnap CWE-787
7.5
2022-01-07 CVE-2021-38674 Cross-site Scripting vulnerability in Qnap QTS
A cross-site scripting (XSS) vulnerability has been reported to affect QTS, QuTS hero and QuTScloud.
network
qnap CWE-79
4.3
2021-12-29 CVE-2021-38680 Cross-site Scripting vulnerability in Qnap Kazoo Server 4.10.12/4.10.9
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Kazoo Server.
network
qnap CWE-79
4.3
2021-12-29 CVE-2021-38687 Classic Buffer Overflow vulnerability in Qnap Surveillance Station
A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station.
network
low complexity
qnap CWE-120
7.5
2021-12-29 CVE-2021-38688 Improper Authentication vulnerability in Qnap Qfile
An improper authentication vulnerability has been reported to affect Android App Qfile.
network
low complexity
qnap CWE-287
5.0
2021-11-26 CVE-2021-38685 OS Command Injection vulnerability in Qnap QVR 5.1.5
A command injection vulnerability has been reported to affect QNAP device, VioStor.
network
low complexity
qnap CWE-78
7.5
2021-11-26 CVE-2021-38686 Improper Authentication vulnerability in Qnap QVR 5.1.5
An improper authentication vulnerability has been reported to affect QNAP device, VioStor.
network
qnap CWE-287
6.8