Read the docs

QNAP

Records682All Threatist records
Exploited (KEV)14In CISA KEV
CVSS critical101CVSS 9.0–10.0
CVSS high234CVSS 7.0–8.9

Exploited now

QNAP records in CISA KEV
TI-2023-25733 QNAP VioStor NVR OS Command Injection Vulnerability Priority CRITICAL 97KEV 2023-12-21TI-2022-10581 QNAP Photo Station Externally Controlled Reference Vulnerability Priority CRITICAL 100KEV 2022-09-08TI-2019-05100 QNAP Photo Station Improper Access Control Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05101 QNAP QTS Improper Input Validation Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05102 QNAP Photo Station Path Traversal Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05103 QNAP Photo Station Path Traversal Vulnerability Priority CRITICAL 100KEV 2022-06-08

Components

Products in the NVD configurations · select one to filter the records
Qts 283 records CRITICAL Quts Hero 234 records CRITICAL Qsync Central 62 records MEDIUM Qutscloud 62 records HIGH File Station 57 records LOW Photo Station 26 records CRITICAL Video Station 21 records MEDIUM Media Streaming Add-on 13 records MEDIUM

Records

11 records in Helpdesk · all components

TI-2020-02218 CVE-2020-2506 · GHSA-vph4-5mf4-28v5

improper access control vulnerability in Helpdesk

Priority CRITICAL 99KEV

The vulnerability have been reported to affect earlier versions of QTS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02006 Published 2021-02-03 Fixed in 3.0.3 CWE-284
TI-2020-02219 CVE-2020-2507 · GHSA-7r29-w7vh-5p6q

command injection vulnerability in Helpdesk

Priority MEDIUM 48

The vulnerability have been reported to affect earlier versions of QTS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03079 Published 2021-02-03 Fixed in 3.0.3 CWE-77
TI-2018-00668 CVE-2018-0714 · GHSA-r8j4-9jg8-cj5q

Command injection in QNAP Helpdesk in QTS

Priority MEDIUM 46

Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528 and their earlier versions could allow remote attackers to run…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02251 Published 2018-08-13 No fix listed CWE-77
TI-2020-02212 CVE-2020-2500 · GHSA-v7p7-qff5-5j8w

Improper access control in QNAP Helpdesk

Priority MEDIUM 43

This improper access control vulnerability in Helpdesk allows attackers to get control of QNAP Kayako service.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00745 Published 2020-07-01 Fixed in 3.0.1 CWE-284
TI-2021-09805 CVE-2021-28814 · GHSA-c3j9-jwrq-h9fm

Improper Access Control Vulnerability in Helpdesk

Priority MEDIUM 41

An improper access control vulnerability has been reported to affect QNAP NAS.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01225 Published 2021-06-11 Fixed in 3.0.4 CWE-269
TI-2024-33827 CVE-2024-50394 · GHSA-9973-9x4h-pfgx

Improper certificate validation in QNAP Helpdesk

Priority LOW 35

An improper certificate validation vulnerability has been reported to affect Helpdesk.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00307 Published 2025-03-07 Fixed in 3.3.3 CWE-295
TI-2018-00677 CVE-2018-0728 · GHSA-x36q-229j-mv7q

Improper privilege management in QNAP NAS devices

Priority LOW 35

This improper access control vulnerability in Helpdesk allows attackers to access the system logs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01273 Published 2019-12-04 No fix listed CWE-269
TI-2018-14135 CVE-2018-19947 · GHSA-h4wq-q9hr-ffm6

Information disclosure in QNAP Helpdesk

Priority LOW 30

The vulnerability have been reported to affect earlier versions of Helpdesk.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00755 Published 2020-09-11 Fixed in 3.0.3 CWE-200
TI-2018-14136 CVE-2018-19948 · GHSA-m2q3-43wc-p9w4

Cross-site request forgery in QNAP Helpdesk

Priority LOW 29

The vulnerability have been reported to affect earlier versions of Helpdesk.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00296 Published 2020-09-11 Fixed in 3.0.3 CWE-352
TI-2018-14134 CVE-2018-19946 · GHSA-j6wf-jr95-r768

Improper certificate validation in QNAP Helpdesk

Priority LOW 26

The vulnerability have been reported to affect earlier versions of Helpdesk.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00315 Published 2020-09-11 Fixed in 3.0.3 CWE-295
TI-2024-17981 CVE-2024-27125 · GHSA-2g3g-3px6-gf3h

Cross-site scripting in QNAP Helpdesk

Priority LOW 22

A cross-site scripting (XSS) vulnerability has been reported to affect Helpdesk.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00247 Published 2024-09-06 Fixed in 3.3.1 CWE-79
Open these records in search →