← Back

Qnap

qnap

645 CVEs • 144 products

Products (144)

Click to collapse
Toggle
Qts
qts
283 CVEs
Quts Hero
quts_hero
234 CVEs
Qutscloud
qutscloud
62 CVEs
Qsync Central
qsync_central
62 CVEs
File Station
file_station
57 CVEs
Photo Station
photo_station
26 CVEs
Video Station
video_station
21 CVEs
Music Station
music_station
13 CVEs
Media Streaming Add On
media_streaming_add-on
13 CVEs
Qumagie
qumagie
13 CVEs
Qurouter
qurouter
12 CVEs
Helpdesk
helpdesk
11 CVEs
Qvr
qvr
10 CVEs
Qulog Center
qulog_center
8 CVEs
Nas Proxy Server
nas_proxy_server
7 CVEs
Q'center
q'center
7 CVEs
Hybrid Backup Sync
hybrid_backup_sync
6 CVEs
Qvr Pro
qvr_pro
6 CVEs
Notes Station 3
notes_station_3
6 CVEs
License Center
license_center
6 CVEs
Multimedia Console
multimedia_console
5 CVEs
Qunetswitch
qunetswitch
5 CVEs
Qvr Elite
qvr_elite
5 CVEs
Qvr Guard
qvr_guard
5 CVEs
Qes
qes
4 CVEs
Viostor Network Video Recorder
viostor_network_video_recorder
3 CVEs
Signage Station
signage_station
3 CVEs
Surveillance Station
surveillance_station
3 CVEs
Qcalagent
qcalagent
3 CVEs
Qvp 41b Firmware
qvp-41b_firmware
3 CVEs
Qvp 63b Firmware
qvp-63b_firmware
3 CVEs
Qvp 85b Firmware
qvp-85b_firmware
3 CVEs
Qvp 21a Firmware
qvp-21a_firmware
3 CVEs
Qvp 41a Firmware
qvp-41a_firmware
3 CVEs
Qvp 63a Firmware
qvp-63a_firmware
3 CVEs
Qvp 85a Firmware
qvp-85a_firmware
3 CVEs
Qvpn
qvpn
3 CVEs
Qufirewall
qufirewall
3 CVEs
Download Station
download_station
3 CVEs
Ts 239 Pro Turbo Nas
ts-239_pro_turbo_nas
2 CVEs
Ts 639 Pro Turbo Nas
ts-639_pro_turbo_nas
2 CVEs
Surveillance Station Pro
surveillance_station_pro
2 CVEs
Nas
nas
2 CVEs
Iartist Lite
iartist_lite
2 CVEs
Q'center Virtual Appliance
q'center_virtual_appliance
2 CVEs
Myqnapcloud
myqnapcloud
2 CVEs
Netbak Replicator
netbak_replicator
2 CVEs
Viocard 300 Firmware
viocard_300_firmware
2 CVEs
Malware Remover
malware_remover
2 CVEs
Qss
qss
2 CVEs
Myqnapcloud Link
myqnapcloud_link
2 CVEs
Qusbcam2
qusbcam2
2 CVEs
Qmailagent
qmailagent
2 CVEs
Kazoo Server
kazoo_server
2 CVEs
Hyper Data Protector
hyper_data_protector
2 CVEs
Ts 239 Pro Firmware
ts-239_pro_firmware
1 CVE
Ts 639 Pro Firmware
ts-639_pro_firmware
1 CVE
Photo Station Firmware
photo_station_firmware
1 CVE
Ts 469u Firmware
ts-469u_firmware
1 CVE
Ts 469u
ts-469u
1 CVE
Ts Ec1679u Rp Firmware
ts-ec1679u-rp_firmware
1 CVE
Ts Ec1679u Rp
ts-ec1679u-rp
1 CVE
Ts 459u Firmware
ts-459u_firmware
1 CVE
Ts 459u
ts-459u
1 CVE
Ss 839 Firmware
ss-839_firmware
1 CVE
Ss 839
ss-839
1 CVE
Sinage Station
sinage_station
1 CVE
Ts 212p Firmware
ts-212p_firmware
1 CVE
Qts Helpdesk
qts_helpdesk
1 CVE
Qsync
qsync
1 CVE
Qfinder Pro
qfinder_pro
1 CVE
Roon Server
roon_server
1 CVE
Viocard 30 Firmware
viocard-30_firmware
1 CVE
Viocard 100 Firmware
viocard-100_firmware
1 CVE
Viogate 340a Firmware
viogate-340a_firmware
1 CVE
Viogate 340 Firmware
viogate-340_firmware
1 CVE
Qsw M2116p 2t2s Firmware
qsw-m2116p-2t2s_firmware
1 CVE
Ej1600 Firmware
ej1600_firmware
1 CVE
Tl R1620sdc Firmware
tl-r1620sdc_firmware
1 CVE
Tl R1620sep Rp Firmware
tl-r1620sep-rp_firmware
1 CVE
Tl R1220sep Rp Firmware
tl-r1220sep-rp_firmware
1 CVE
Tl D1600s Firmware
tl-d1600s_firmware
1 CVE
Tl D800s Firmware
tl-d800s_firmware
1 CVE
Tl D400s Firmware
tl-d400s_firmware
1 CVE
Tl R1200s Rp Firmware
tl-r1200s-rp_firmware
1 CVE
Tl R400s Firmware
tl-r400s_firmware
1 CVE
Tl R1200c Rp Firmware
tl-r1200c-rp_firmware
1 CVE
Tl D800c Firmware
tl-d800c_firmware
1 CVE
Tr 004 Firmware
tr-004_firmware
1 CVE
Tr 002 Firmware
tr-002_firmware
1 CVE
Tr 004u Firmware
tr-004u_firmware
1 CVE
Nvr Storage Expansion Firmware
nvr_storage_expansion_firmware
1 CVE
Image2pdf
image2pdf
1 CVE
Ragic Cloud Db
ragic_cloud_db
1 CVE
Qfile
qfile
1 CVE
Qvr Pro Client
qvr_pro_client
1 CVE
Container Station
container_station
1 CVE
Qvr Firmware
qvr_firmware
1 CVE
Qvr Smart Client
qvr_smart_client
1 CVE
Ai Core
ai_core
1 CVE

CVEs (645)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2013-6277
1Qnap
1Viocard 300 Firmware
Nov 21, 2024
Feb 13, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
QNAP VioCard 300 has hardcoded RSA private keys.
CVE-2019-7195
1Qnap
1Photo Station
Jun 17, 2026
Dec 5, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
CVE-2019-7194
1Qnap
1Photo Station
Jun 17, 2026
Dec 5, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
CVE-2019-7193
1Qnap
1Qts
Jun 17, 2026
Dec 5, 2019
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.
CVE-2019-7192
1Qnap
1Photo Station
Jun 17, 2026
Dec 5, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.
CVE-2019-7185
1Qnap
1Music Station
Jun 17, 2026
Dec 5, 2019
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Sta...Show more
This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions.Show less
CVE-2019-7184
1Qnap
1Video Station
Jun 17, 2026
Dec 5, 2019
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Video Sta...Show more
This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Video Station to their latest versions.Show less
CVE-2019-7183
1Qnap
1Qts
Jun 17, 2026
Dec 5, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions.
CVE-2019-7201
1Qnap
1Netbak Replicator
Jun 17, 2026
Dec 4, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute arbitrary code with el...Show more
An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute arbitrary code with elevated system privileges. QNAP have already fixed this issue in QNAP NetBak Replicator 4.5.12.1108.Show less
CVE-2019-7197
1Qnap
1Qts
Jun 17, 2026
Dec 4, 2019
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. T...Show more
A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. To fix this vulnerability, QNAP recommend updating QTS to the latest version.Show less
CVE-2018-0730
1Qnap
1Qts
Nov 21, 2024
Dec 4, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.
CVE-2018-0729
1Qnap
1Music Station
Nov 21, 2024
Dec 4, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
This command injection vulnerability in Music Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating Music Station to their latest versions.
CVE-2018-0728
1Qnap
1Helpdesk
Nov 21, 2024
Dec 4, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
This improper access control vulnerability in Helpdesk allows attackers to access the system logs. To fix the vulnerability, QNAP recommend updating QTS and Helpdesk to their latest versions.
CVE-2019-7181
1Qnap
1Myqnapcloud
Jun 17, 2026
May 9, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program.
CVE-2018-0722
1Qnap
1Photo Station
Nov 21, 2024
Feb 1, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Path Traversal vulnerability in Photo Station versions: 5.7.2 and earlier in QTS 4.3.4, 5.4.4 and earlier in QTS 4.3.3, 5.2.8 and earlier in QTS 4.2.6 could allow remote attackers to access sensitive information on the d...Show more
Path Traversal vulnerability in Photo Station versions: 5.7.2 and earlier in QTS 4.3.4, 5.4.4 and earlier in QTS 4.3.3, 5.2.8 and earlier in QTS 4.2.6 could allow remote attackers to access sensitive information on the device.Show less
CVE-2018-0724
1Qnap
1Q'center Virtual Appliance
Nov 21, 2024
Dec 26, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than C...Show more
Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723.Show less
CVE-2018-0723
1Qnap
1Q'center Virtual Appliance
Nov 21, 2024
Dec 26, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than C...Show more
Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724.Show less
CVE-2018-0716
1Qnap
1Qts
Nov 21, 2024
Nov 30, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject J...Show more
Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject Javascript code in the compromised application.Show less
CVE-2018-14749
1Qnap
1Qts
Nov 21, 2024
Nov 28, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could have unspecified impact on the NAS.
CVE-2018-14748
1Qnap
1Qts
Nov 21, 2024
Nov 28, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Improper Authorization vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to power off the NAS.