Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2025-33996 CVE-2025-54153 · GHSA-qhcx-jj2j-r8r2

SQL injection in QNAP Qsync Central

Priority MEDIUM 40

An SQL injection vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00432 Published 2025-10-03 Fixed in 5.0.0.2 ( 2025/07/31 ) CWE-89
TI-2025-33532 CVE-2025-53595 · GHSA-64gm-jp56-cmqq

SQL injection in QNAP Qsync Central

Priority MEDIUM 40

An SQL injection vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00432 Published 2025-10-03 Fixed in 5.0.0.2 ( 2025/07/31 ) CWE-89
Priority LOW 27

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00424 Published 2025-10-03 Fixed in 5.0.0.2 ( 2025/07/31 ) CWE-400
Priority LOW 25

A NULL pointer dereference vulnerability has been reported to affect Qsync Central.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00505 Published 2025-10-03 Fixed in 5.0.0.2 ( 2025/07/31 ) CWE-476
Priority LOW 32

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00505 Published 2025-10-03 Fixed in 5.0.0.2 ( 2025/07/31 ) CWE-770