[ Vendor · 13 CVEs ]
QNAP
CVEs affecting QNAP published in the last 30 days, plus any QNAP CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2023-47565 | 8 Dec 2023 | CVSS 8.8 | QNAP VioStor NVR OS Command InjectionAn OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the… | Exploited |
| CVE-2022-27593 | 8 Sep 2022 | CVSS 9.1 | QNAP Photo Station Externally Controlled ReferenceAn externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could… | Exploited |
| CVE-2021-28799 | 13 May 2021 | CVSS 9.8 | QNAP NAS Improper AuthorizationAn improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability… | Exploited |
| CVE-2020-2509 | 17 Apr 2021 | CVSS 9.8 | QNAP Network-Attached Storage (NAS) Command InjectionA command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute… | Exploited |
| CVE-2018-19943 | 28 Oct 2020 | CVSS 5.4 | QNAP NAS File Station Cross-Site ScriptingIf exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in… | Exploited |
| CVE-2018-19949 | 28 Oct 2020 | CVSS 9.8 | QNAP NAS File Station Command InjectionIf exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the… | Exploited |
| CVE-2018-19953 | 28 Oct 2020 | CVSS 6.1 | QNAP NAS File Station Cross-Site ScriptingIf exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed the issue in the… | Exploited |
| CVE-2019-7193 | 5 Dec 2019 | CVSS 9.8 | QNAP QTS Improper Input ValidationThis improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend… | Exploited |
| CVE-2019-7194 | 5 Dec 2019 | CVSS 9.8 | QNAP Photo Station Path TraversalThis external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP… | Exploited |
| CVE-2019-7195 | 5 Dec 2019 | CVSS 9.8 | QNAP Photo Station Path TraversalThis external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP… | Exploited |
| CVE-2019-7192 | 5 Dec 2019 | CVSS 9.8 | QNAP Photo Station Improper Access ControlThis improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP… | Exploited |
| CVE-2014-7169 | 25 Sep 2014 | CVSS 9.8 | GNU Bourne-Again Shell (Bash) Arbitrary Code ExecutionGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which… | ExploitedFix |
| CVE-2014-6271 | 24 Sep 2014 | CVSS 9.8 | GNU Bourne-Again Shell (Bash) Arbitrary Code ExecutionGNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to… | ExploitedFix |