Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: QNAP Systems Notes Station 3 3.9.7 Clear all filters
TI-2024-25878 CVE-2024-38643 · GHSA-2g2v-h26j-4qfh

Missing authentication in QNAP Notes Station 3

Priority MEDIUM 50

A missing authentication for critical function vulnerability has been reported to affect Notes Station 3.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00934 Published 2024-11-22 Fixed in 3.9.7 CWE-306
TI-2024-25879 CVE-2024-38644 · GHSA-v94v-33c2-x5m5

Command injection in QNAP Notes Station 3

Priority MEDIUM 43

An OS command injection vulnerability has been reported to affect Notes Station 3.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01591 Published 2024-11-22 Fixed in 3.9.7 CWE-77
TI-2024-25880 CVE-2024-38645 · GHSA-7mv6-9483-r3cp

Server-side request forgery in QNAP Notes Station 3

Priority MEDIUM 43

A server-side request forgery (SSRF) vulnerability has been reported to affect Notes Station 3.

CVSS 4.0CRITICAL 9.4 Network Low privileges User interaction EPSS 0.00622 Published 2024-11-22 Fixed in 3.9.7 CWE-918
TI-2024-25881 CVE-2024-38646 · GHSA-4fhq-hj5g-3c47

Incorrect permission assignment in QNAP Notes Station 3

Priority LOW 38

An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3.

CVSS 4.0HIGH 8.4 Local High privileges No interaction EPSS 0.00178 Published 2024-11-22 Fixed in 3.9.7 CWE-732