Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Release: QNAP Systems Qsync Central 4.5.0.7 ( 2025/04/23 ) Clear all filters
TI-2025-24032 CVE-2025-33038 · GHSA-m3m8-r8xj-mxh4

Path traversal in QNAP Qsync Central

Priority LOW 32

A path traversal vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00488 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-22
TI-2025-24031 CVE-2025-33037 · GHSA-42qx-vp8w-pj32

Path traversal in QNAP Qsync Central

Priority LOW 32

A path traversal vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00488 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-22
TI-2025-24030 CVE-2025-33036 · GHSA-mvvg-wcqp-2mfp

Path traversal in QNAP Qsync Central

Priority LOW 32

A path traversal vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00488 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-22
TI-2025-24027 CVE-2025-33033 · GHSA-8f3w-54xp-w3h6

Path traversal in QNAP Qsync Central

Priority LOW 32

A path traversal vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00488 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-22
TI-2025-21597 CVE-2025-30278 · GHSA-cc9p-jmcf-87w4

Improper certificate validation in QNAP Qsync Central

Priority LOW 36

An improper certificate validation vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00234 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-295
TI-2025-21596 CVE-2025-30277 · GHSA-93vp-2j2q-f8fx

Improper certificate validation in QNAP Qsync Central

Priority LOW 36

An improper certificate validation vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00234 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-295
TI-2025-21594 CVE-2025-30275 · GHSA-666j-q553-89qq

NULL pointer dereference in QNAP Qsync Central

Priority LOW 24

A NULL pointer dereference vulnerability has been reported to affect Qsync Central.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00373 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-476
TI-2025-21579 CVE-2025-30260 · GHSA-289v-8gxr-c564

Resource allocation without limits in QNAP Qsync Central

Priority LOW 32

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0046 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-770
TI-2025-21283 CVE-2025-29898 · GHSA-x5m8-7fvv-vcvj

Uncontrolled resource consumption in QNAP Qsync Central

Priority LOW 27

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.0046 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-400
TI-2025-21282 CVE-2025-29894 · GHSA-v458-39f3-x6wh

SQL injection in QNAP Qsync Central

Priority LOW 35

An SQL injection vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.5 Network Low privileges User interaction EPSS 0.00468 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-89
TI-2025-21281 CVE-2025-29893 · GHSA-r5f3-m4c7-2994

SQL injection in QNAP Qsync Central

Priority LOW 35

An SQL injection vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.5 Network Low privileges User interaction EPSS 0.00468 Published 2025-08-29 Fixed in 4.5.0.7 ( 2025/04/23 ) CWE-89