← Back

Qnap

qnap

645 CVEs • 144 products

Products (144)

Click to collapse
Toggle
Qts
qts
Quts Hero
quts_hero
Qutscloud
qutscloud
Qsync Central
qsync_central
File Station
file_station
Photo Station
photo_station
Video Station
video_station
Music Station
music_station
Qumagie
qumagie
Qurouter
qurouter
Helpdesk
helpdesk
Qvr
qvr
Qulog Center
qulog_center
Q'center
q'center
Qvr Pro
qvr_pro
Qunetswitch
qunetswitch
Qvr Elite
qvr_elite
Qvr Guard
qvr_guard
Qes
qes
Qcalagent
qcalagent
Qvpn
qvpn
Qufirewall
qufirewall
Nas
nas
Iartist Lite
iartist_lite
Myqnapcloud
myqnapcloud
Qss
qss
Qusbcam2
qusbcam2
Qmailagent
qmailagent
Kazoo Server
kazoo_server
Ts 469u
ts-469u
Ts Ec1679u Rp
ts-ec1679u-rp
Ts 459u
ts-459u
Ss 839
ss-839
Sinage Station
sinage_station
Qts Helpdesk
qts_helpdesk
Qsync
qsync
Qfinder Pro
qfinder_pro
Roon Server
roon_server
Image2pdf
image2pdf
Ragic Cloud Db
ragic_cloud_db
Qfile
qfile
Qvr Pro Client
qvr_pro_client
Qvr Firmware
qvr_firmware
Ai Core
ai_core

CVEs (645)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Qnap
1Notes Station 3
Jun 17, 2026
Nov 22, 2024
8.4 HIGH· v4
6.0 MEDIUM· v3
N/A· v2
An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow local authenticated attackers who have gained administrator...Show more
An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow local authenticated attackers who have gained administrator access to read or modify the resource. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.7 and laterShow less
1Qnap
1Notes Station 3
Jun 17, 2026
Nov 22, 2024
9.4 CRITICAL· v4
6.5 MEDIUM· v3
N/A· v2
A server-side request forgery (SSRF) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote authenticated attackers to read application data. We have already fixed...Show more
A server-side request forgery (SSRF) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote authenticated attackers to read application data. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.7 and laterShow less
1Qnap
1Notes Station 3
Jun 17, 2026
Nov 22, 2024
8.7 HIGH· v4
8.8 HIGH· v3
N/A· v2
An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote authenticated attackers to execute commands. We have already fixed the vulnerability...Show more
An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote authenticated attackers to execute commands. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.7 and laterShow less
1Qnap
1Notes Station 3
Jun 17, 2026
Nov 22, 2024
9.3 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
A missing authentication for critical function vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to gain access to and execute certain functions. We...Show more
A missing authentication for critical function vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to gain access to and execute certain functions. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.7 and laterShow less
1Qnap
2Qts
Quts Hero
Jun 17, 2026
Nov 22, 2024
5.1 MEDIUM· v4
6.5 MEDIUM· v3
N/A· v2
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator ac...Show more
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and laterShow less
1Qnap
2Qts
Quts Hero
Jun 17, 2026
Nov 22, 2024
5.1 MEDIUM· v4
6.5 MEDIUM· v3
N/A· v2
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator ac...Show more
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and laterShow less
1Qnap
2Qts
Quts Hero
Jun 17, 2026
Nov 22, 2024
5.1 MEDIUM· v4
4.9 MEDIUM· v3
N/A· v2
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a d...Show more
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and laterShow less
1Qnap
2Qts
Quts Hero
Jun 17, 2026
Nov 22, 2024
5.1 MEDIUM· v4
6.5 MEDIUM· v3
N/A· v2
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator ac...Show more
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and laterShow less
1Qnap
2Qts
Quts Hero
Jun 17, 2026
Nov 22, 2024
2.1 LOW· v4
4.9 MEDIUM· v3
N/A· v2
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read the contents of...Show more
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read the contents of unexpected files and expose sensitive data. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and laterShow less
1Qnap
2Qts
Quts Hero
Jun 17, 2026
Nov 22, 2024
5.1 MEDIUM· v4
4.9 MEDIUM· v3
N/A· v2
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a d...Show more
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and laterShow less
1Qnap
2Qts
Quts Hero
Jun 17, 2026
Nov 22, 2024
5.1 MEDIUM· v4
7.2 HIGH· v3
N/A· v2
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator ac...Show more
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and laterShow less
1Qnap
2Qts
Quts Hero
Jun 17, 2026
Nov 22, 2024
5.1 MEDIUM· v4
4.9 MEDIUM· v3
N/A· v2
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read the contents of...Show more
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read the contents of unexpected files and expose sensitive data. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and laterShow less
1Qnap
2Qts
Quts Hero
Jun 17, 2026
Nov 22, 2024
5.1 MEDIUM· v4
4.9 MEDIUM· v3
N/A· v2
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a d...Show more
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and laterShow less
1Qnap
2Qts
Quts Hero
Jun 17, 2026
Nov 22, 2024
5.1 MEDIUM· v4
7.2 HIGH· v3
N/A· v2
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator ac...Show more
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and laterShow less
1Qnap
1Photo Station
Jun 17, 2026
Nov 22, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. We have already fi...Show more
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. We have already fixed the vulnerability in the following version: Photo Station 6.4.3 ( 2024/07/12 ) and laterShow less
1Qnap
1Photo Station
Jun 17, 2026
Nov 22, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. We have already fi...Show more
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. We have already fixed the vulnerability in the following version: Photo Station 6.4.3 ( 2024/07/12 ) and laterShow less
1Qnap
1Photo Station
Jun 17, 2026
Nov 22, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. We have already fi...Show more
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. We have already fixed the vulnerability in the following version: Photo Station 6.4.3 ( 2024/07/12 ) and laterShow less
1Qnap
1Photo Station
Jun 17, 2026
Nov 22, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. We have already fi...Show more
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. We have already fixed the vulnerability in the following version: Photo Station 6.4.3 ( 2024/07/12 ) and laterShow less
1Qnap
1Qumagie
Jun 17, 2026
Sep 6, 2024
1.0 LOW· v4
7.8 HIGH· v3
N/A· v2
An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to compromise the security of the system via unspecified vectors. We...Show more
An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to compromise the security of the system via unspecified vectors. We have already fixed the vulnerability in the following version: QuMagie 2.3.1 and laterShow less
1Qnap
2Qts
Quts Hero
Jun 17, 2026
Sep 6, 2024
7.3 HIGH· v4
7.8 HIGH· v3
N/A· v2
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local network users to execute commands via unspecified vectors. We h...Show more
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local network users to execute commands via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.1.8.2823 build 20240712 and later QuTS hero h5.1.8.2823 build 20240712 and laterShow less