Vulnerabilities > Qnap

DATE CVE VULNERABILITY TITLE RISK
2023-12-08 CVE-2023-47565 OS Command Injection vulnerability in Qnap QVR Firmware
An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x.
network
low complexity
qnap CWE-78
8.8
2023-11-10 CVE-2023-39295 OS Command Injection vulnerability in Qnap Qumagie
An OS command injection vulnerability has been reported to affect QuMagie.
network
low complexity
qnap CWE-78
8.8
2023-11-10 CVE-2023-41284 SQL Injection vulnerability in Qnap Qumagie
A SQL injection vulnerability has been reported to affect QuMagie.
network
low complexity
qnap CWE-89
8.8
2023-11-10 CVE-2023-41285 SQL Injection vulnerability in Qnap Qumagie
A SQL injection vulnerability has been reported to affect QuMagie.
network
low complexity
qnap CWE-89
8.8
2023-11-10 CVE-2023-23367 OS Command Injection vulnerability in Qnap Qts, Quts Hero and Qutscloud
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
network
low complexity
qnap CWE-78
7.2
2023-11-03 CVE-2023-23368 OS Command Injection vulnerability in Qnap Qts, Quts Hero and Qutscloud
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
network
low complexity
qnap CWE-78
critical
9.8
2023-11-03 CVE-2023-23369 OS Command Injection vulnerability in Qnap QTS
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
network
low complexity
qnap CWE-78
critical
9.8
2023-11-03 CVE-2023-39299 Path Traversal vulnerability in Qnap Music Station
A path traversal vulnerability has been reported to affect Music Station.
network
low complexity
qnap CWE-22
7.5
2023-11-03 CVE-2023-39301 Server-Side Request Forgery (SSRF) vulnerability in Qnap QTS
A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions.
network
low complexity
qnap CWE-918
4.3
2023-10-20 CVE-2023-23373 OS Command Injection vulnerability in Qnap Qusbcam2 2.0.0
An OS command injection vulnerability has been reported to affect QUSBCam2.
network
low complexity
qnap CWE-78
8.8