CVE Intelligence

Vulnerabilidades de QNAP Systems Inc.

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de QNAP Systems Inc.: 260 registro(s), com severidade, exploração e correções.

QTS 76QuTS hero 69Qsync Central 64File Station 5 41QuRouter 8Video Station 8QuMagie 8Download Station 5Notes Station 3 4License Center 4QuNetSwitch 4HybridDesk Station 3Media Streaming add-on 3Hyper Data Protector 2Photo Station 2QuFTP Service 2QuLog Center 2QcalAgent 2VioStor 2Notification Center 2HBS 3 Hybrid Backup Sync 2Network & Virtual Switch 1NetBak Replicator 1QNAP Authenticator 1VioStor NVR 1Virtualization Station 1Qsirch 1HBS 3 1Helpdesk 1sMedio DTCP MOVE 1QuTS cloud 1QVP 1Qfiling 1Qfinder Pro Mac 1Malware Remover 1Qsync for Mac 1QVPN Device Client for Mac 1MARS (Multi-Application Recovery Service) 1QVR Pro 1

Somente exploradas (KEV) →

CVE-2025-29874 Média · 6.5 CWE-476 29/08/2025
File Station 5
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4907 and later
CVE-2025-22483 Média · 4.8 CWE-79 29/08/2025
License Center
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: License Center 1.8.51 and later License Center 1.9.51 and later
CVE-2023-47565 Alta · 8.8 KEV Alta · 56 CWE-78 08/12/2023
QNAP VioStor NVR OS Command Injection Vulnerability
An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions: QVR Firmware 5.0.0 and later
CVE-2022-27593 Crítica · 9.1 KEV Urgente · 77 Exploit público Ransomware CWE-610 08/09/2022
QNAP Photo Station Externally Controlled Reference Vulnerability
An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later
CVE-2021-28799 Crítica · 9.8 KEV Urgente · 77 Exploit público Ransomware CWE-285 13/05/2021
QNAP NAS Improper Authorization Vulnerability
An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to v3.0.210412 on QTS 4.3.6; versions prior to v3.0.210411 on QTS 4.3.4; versions prior to v3.0.210411 on QTS 4.3.3; versions prior to v16.0.0419 on QuTS hero h4.5.1; versions prior to v16.0.0419 on QuTScloud c4.5.1~c4.5.4. This issue does not affect: QNAP Systems Inc. HBS 2 . QNAP Systems Inc. HBS 1.3 .
CVE-2020-2509 Crítica · 9.8 KEV Alta · 69 Exploit público CWE-77 17/04/2021
QNAP Network-Attached Storage (NAS) Command Injection Vulnerability
A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 Build 20210202 and later QTS 4.5.1.1495 Build 20201123 and later QTS 4.3.6.1620 Build 20210322 and later QTS 4.3.4.1632 Build 20210324 and later QTS 4.3.3.1624 Build 20210416 and later QTS 4.2.6 Build 20210327 and later QuTS hero h4.5.1.1491 build 20201119 and later
CVE-2020-2506 Crítica · 9.8 KEV Alta · 60 CWE-284 03/02/2021
QNAP Helpdesk Improper Access Control Vulnerability
The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compromise the security of the software by gaining privileges, or reading sensitive information. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.
CVE-2018-19943 Média · 5.4 KEV Alta · 63 Ransomware CWE-79 28/10/2020
QNAP NAS File Station Cross-Site Scripting Vulnerability
If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20200410 and later QTS 4.4.1.1261 build 20200330 and later QTS 4.3.6.1263 build 20200330 and later QTS 4.3.4.1282 build 20200408 and later QTS 4.3.3.1252 build 20200409 and later QTS 4.2.6 build 20200421 and later
CVE-2018-19949 Crítica · 9.8 KEV Urgente · 73 Ransomware CWE-77 28/10/2020
QNAP NAS File Station Command Injection Vulnerability
If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109.
CVE-2018-19953 Média · 6.1 KEV Alta · 63 Ransomware CWE-79 28/10/2020
QNAP NAS File Station Cross-Site Scripting Vulnerability
If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109.