Vulnerabilidades do Qnap Qsync Central

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Qnap Qsync Central: 29 registro(s), com versões afetadas e correções.
cpe:2.3:a:qnap:qsync_central

CVE-2025-30276 Alta · 8.8 CWE-787 11/02/2026

An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVE-2025-30269 Alta · 8.1 CWE-134 11/02/2026

A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVE-2025-30266 Média · 6.5 CWE-476 11/02/2026

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVE-2025-57712 Média · 6.5 CWE-22 07/11/2025

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.3 ( 2025/08/28 ) and later