Read the docs

QNAP

Records682All Threatist records
Exploited (KEV)14In CISA KEV
CVSS critical101CVSS 9.0–10.0
CVSS high234CVSS 7.0–8.9

Exploited now

QNAP records in CISA KEV
TI-2023-25733 QNAP VioStor NVR OS Command Injection Vulnerability Priority CRITICAL 97KEV 2023-12-21TI-2022-10581 QNAP Photo Station Externally Controlled Reference Vulnerability Priority CRITICAL 100KEV 2022-09-08TI-2019-05100 QNAP Photo Station Improper Access Control Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05101 QNAP QTS Improper Input Validation Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05102 QNAP Photo Station Path Traversal Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05103 QNAP Photo Station Path Traversal Vulnerability Priority CRITICAL 100KEV 2022-06-08

Components

Products in the NVD configurations · select one to filter the records
Qts 283 records CRITICAL Quts Hero 234 records CRITICAL Qsync Central 62 records MEDIUM Qutscloud 62 records HIGH File Station 57 records LOW Photo Station 26 records CRITICAL Video Station 21 records MEDIUM Media Streaming Add-on 13 records MEDIUM

Records

62 records in Qsync Central · all components

TI-2025-33996 CVE-2025-54153 · GHSA-qhcx-jj2j-r8r2

SQL injection in QNAP Qsync Central

Priority MEDIUM 40

An SQL injection vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00432 Published 2025-10-03 Fixed in 5.0.0.2 ( 2025/07/31 ) CWE-89
TI-2025-33532 CVE-2025-53595 · GHSA-64gm-jp56-cmqq

SQL injection in QNAP Qsync Central

Priority MEDIUM 40

An SQL injection vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00432 Published 2025-10-03 Fixed in 5.0.0.2 ( 2025/07/31 ) CWE-89
TI-2025-21280 CVE-2025-29892 · GHSA-7pjj-5xf2-pmpg

SQL injection in QNAP Qsync Central

Priority MEDIUM 40

An SQL injection vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.005 Published 2025-06-06 Fixed in 4.5.0.6 ( 2025/03/20 ) CWE-89
TI-2023-25732 CVE-2023-47564 · GHSA-q9h2-7m5w-75p4

Incorrect permission assignment in QNAP Qsync Central

Priority LOW 39

An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01014 Published 2024-02-02 Fixed in 4.4.0.15 ( 2024/01/04 ), 4.3.0.11 ( 2024/01/11 ) CWE-732
TI-2025-21597 CVE-2025-30278 · GHSA-cc9p-jmcf-87w4

Improper certificate validation in QNAP Qsync Central

Priority LOW 36

An improper certificate validation vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00234 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-295
TI-2025-21596 CVE-2025-30277 · GHSA-93vp-2j2q-f8fx

Improper certificate validation in QNAP Qsync Central

Priority LOW 36

An improper certificate validation vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00234 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-295
TI-2025-21282 CVE-2025-29894 · GHSA-v458-39f3-x6wh

SQL injection in QNAP Qsync Central

Priority LOW 35

An SQL injection vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.5 Network Low privileges User interaction EPSS 0.00468 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-89
TI-2025-21281 CVE-2025-29893 · GHSA-r5f3-m4c7-2994

SQL injection in QNAP Qsync Central

Priority LOW 35

An SQL injection vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.5 Network Low privileges User interaction EPSS 0.00468 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-89
TI-2024-33837 CVE-2024-50404 · GHSA-f4rv-5346-m4jx

Link following in QNAP Qsync Central

Priority LOW 33

A link following vulnerability has been reported to affect Qsync Central.

CVSS 4.0MEDIUM 6.8 Network Low privileges User interaction EPSS 0.01434 Published 2024-12-06 Fixed in 4.4.0.16_20240819 ( 2024/08/19 ) CWE-59
TI-2025-28563 CVE-2025-44014 · GHSA-r4j6-m7xp-m9w5

Out-of-bounds write in QNAP Qsync Central

Priority LOW 32

An out-of-bounds write vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00522 Published 2025-10-03 Fixed in 5.0.0.1 ( 2025/07/09 ) CWE-787
TI-2025-28561 CVE-2025-44012 · GHSA-7rx7-vccv-7r68

Resource allocation without limits in QNAP Qsync Central

Priority LOW 32

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00505 Published 2025-10-03 Fixed in 5.0.0.2 ( 2025/07/31 ) CWE-770
TI-2025-24032 CVE-2025-33038 · GHSA-m3m8-r8xj-mxh4

Path traversal in QNAP Qsync Central

Priority LOW 32

A path traversal vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00488 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-22
TI-2025-24031 CVE-2025-33037 · GHSA-42qx-vp8w-pj32

Path traversal in QNAP Qsync Central

Priority LOW 32

A path traversal vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00488 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-22
TI-2025-24030 CVE-2025-33036 · GHSA-mvvg-wcqp-2mfp

Path traversal in QNAP Qsync Central

Priority LOW 32

A path traversal vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00488 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-22
TI-2025-24027 CVE-2025-33033 · GHSA-8f3w-54xp-w3h6

Path traversal in QNAP Qsync Central

Priority LOW 32

A path traversal vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00488 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-22
TI-2025-21580 CVE-2025-30261 · GHSA-5rwx-hq82-h65h

Resource allocation without limits in QNAP Qsync Central

Priority LOW 32

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0046 Published 2025-08-29 Fixed in 5.0.0.0 ( 2025/06/13 ) CWE-770
TI-2025-21579 CVE-2025-30260 · GHSA-289v-8gxr-c564

Resource allocation without limits in QNAP Qsync Central

Priority LOW 32

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0046 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-770
TI-2025-28556 CVE-2025-44007 · GHSA-qwr8-2wpc-h593

Resource allocation without limits in QNAP Qsync Central

Priority LOW 31

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00373 Published 2025-10-03 Fixed in 5.0.0.1 ( 2025/07/09 ) CWE-770
TI-2025-28555 CVE-2025-44006 · GHSA-h8xp-c5vh-gq8x

Resource allocation without limits in QNAP Qsync Central

Priority LOW 31

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00373 Published 2025-10-03 Fixed in 5.0.0.1 ( 2025/07/09 ) CWE-770
TI-2025-24034 CVE-2025-33040 · GHSA-rrf3-xq62-qpxc

Resource allocation without limits in QNAP Qsync Central

Priority LOW 31

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00373 Published 2025-10-03 Fixed in 5.0.0.1 ( 2025/07/09 ) CWE-770
TI-2025-24033 CVE-2025-33039 · GHSA-q4mg-7vfq-wq79

Resource allocation without limits in QNAP Qsync Central

Priority LOW 31

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00373 Published 2025-10-03 Fixed in 5.0.0.1 ( 2025/07/09 ) CWE-770
TI-2025-32904 CVE-2025-52867 · GHSA-ph3c-mrwq-rqjw

Uncontrolled resource consumption in QNAP Qsync Central

Priority LOW 27

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00424 Published 2025-10-03 Fixed in 5.0.0.2 ( 2025/07/31 ) CWE-400
TI-2025-21283 CVE-2025-29898 · GHSA-x5m8-7fvv-vcvj

Uncontrolled resource consumption in QNAP Qsync Central

Priority LOW 27

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.0046 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-400
TI-2025-29781 CVE-2025-47210 · GHSA-hqxr-mrp6-5m6q

NULL pointer dereference in QNAP Qsync Central

Priority LOW 25

A NULL pointer dereference vulnerability has been reported to affect Qsync Central.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00505 Published 2025-10-03 Fixed in 5.0.0.2 ( 2025/07/31 ) CWE-476
TI-2025-24028 CVE-2025-33034 · GHSA-m5h8-cchv-fjgv

Path traversal in QNAP Qsync Central

Priority LOW 25

A path traversal vulnerability has been reported to affect Qsync Central.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00488 Published 2025-10-03 Fixed in 5.0.0.1 ( 2025/07/09 ) CWE-22
Load more
Open these records in search →