Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: QNAP Component: Qvr Clear all filters
TI-2025-32893 CVE-2025-52856 · GHSA-fjh8-m5r5-9wrm

Improper authentication in QNAP VioStor

Priority MEDIUM 49

An improper authentication vulnerability has been reported to affect VioStor.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00656 Published 2025-08-29 Fixed in 5.1.6 build 20250621 CWE-287
TI-2023-09205 CVE-2023-23355 · GHSA-vf28-x3q6-9qg2

QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances), QVR

Priority LOW 34

An OS command injection vulnerability has been reported to affect QNAP operating systems.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01226 Published 2023-03-29 Fixed in 5.0.1.2346 build 20230322, 4.5.4.2374 build 20230416 +4 CWE-77
TI-2022-10584 CVE-2022-27597 · GHSA-gq7r-qxw5-w38c

QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)

Priority LOW 15

A vulnerability has been reported to affect QNAP operating systems.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00658 Published 2023-03-29 Fixed in 5.0.1.2346 build 20230322, h5.0.1.2348 build 20230324 CWE-125
TI-2022-10579 CVE-2022-27588 · GHSA-8cr8-x534-x73j

Vulnerability in QVR

Priority MEDIUM 45

We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01362 Published 2022-05-05 Fixed in 5.1.6 build 20220401 CWE-77
TI-2021-16257 CVE-2021-38686 · GHSA-8qv9-29c6-9v3g

Improper Authentication Vulnerability in VioStor

Priority MEDIUM 40

An improper authentication vulnerability has been reported to affect QNAP device, VioStor.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00974 Published 2021-11-26 Fixed in QVR FW 5.1.6 build 20211109 CWE-287
TI-2021-16256 CVE-2021-38685 · GHSA-5647-h66r-5vj6

Command Injection Vulnerability in VioStor

Priority MEDIUM 45

A command injection vulnerability has been reported to affect QNAP device, VioStor.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01471 Published 2021-11-26 Fixed in QVR FW 5.1.6 build 20211109 CWE-78
TI-2021-13392 CVE-2021-34352 · GHSA-w526-38c2-jc6q

Command Injection Vulnerability in QVR

Priority MEDIUM 45

A command injection vulnerability has been reported to affect QNAP device running QVR.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01477 Published 2021-10-01 Fixed in 5.1.5 build 20210902 CWE-78
TI-2021-13391 CVE-2021-34351 · GHSA-grvw-7h5x-qrx9

Command Injection Vulnerability in QVR

Priority MEDIUM 45

A command injection vulnerability has been reported to affect QNAP device running QVR.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01471 Published 2021-09-27 Fixed in 5.1.5 build 20210803 CWE-78
TI-2021-13390 CVE-2021-34349 · GHSA-gh92-qxhf-5994

Command Injection Vulnerability in QVR

Priority LOW 35

A command injection vulnerability has been reported to affect QNAP device running QVR.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0145 Published 2021-09-27 Fixed in 5.1.5 build 20210803 CWE-78
TI-2021-13389 CVE-2021-34348 · GHSA-j4j5-p5q3-mfr7

Command Injection Vulnerability in QVR

Priority MEDIUM 45

A command injection vulnerability has been reported to affect QNAP device running QVR.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01471 Published 2021-09-27 Fixed in 5.1.5 build 20210803 CWE-78