Priority LOW 39
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync.
CVSS 4.0HIGH 8.7· Adjacent network · No auth · No interaction · EPSS 0.00245 · Published 2026-10-29 · Fixed in 26.4.0.521, 26.4.1.563 CWE-321
Priority LOW 39
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync.
CVSS 4.0HIGH 8.7· Adjacent network · No auth · No interaction · EPSS 0.00245 · Published 2026-10-29 · Fixed in 26.4.0.521, 26.4.1.563 CWE-321
Priority MEDIUM 48
A path traversal vulnerability has been reported to affect Qsirch.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00429 · Published 2026-10-15 · Fixed in 7.0.3.0 CWE-22
Priority LOW 28
A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service.
CVSS 4.0MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.0028 · Published 2026-10-15 · Fixed in 1.4.6, 1.5.5 +1 CWE-79
Priority MEDIUM 50
An OS command injection vulnerability has been reported to affect HybridDesk Station.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0107 · Published 2026-10-15 · Fixed in 4.2.23, 4.3.4 CWE-78
Priority MEDIUM 40
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station.
CVSS 4.0HIGH 8.9· Adjacent network · No auth · User interaction · EPSS 0.00242 · Published 2026-10-15 · Fixed in 4.2.22 CWE-306
Priority LOW 22
A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3.
CVSS 4.0MEDIUM 4.8· Network · Low privileges · User interaction · EPSS 0.00293 · Published 2026-10-15 · Fixed in 3.9.12 CWE-79
Priority LOW 37
An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3.
CVSS 4.0HIGH 8.4· Local · High privileges · No interaction · EPSS 0.00111 · Published 2026-10-15 · Fixed in 3.9.11 CWE-653
Priority LOW 37
An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00095 · Published 2026-10-15 · Fixed in 3.9.11 CWE-732
Priority LOW 39
An OS command injection vulnerability has been reported to affect Notes Station 3.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.01446 · Published 2026-10-15 · Fixed in 3.9.11 CWE-78
Priority MEDIUM 40
An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00362 · Published 2026-10-15 · Fixed in 4.1.1.130 CWE-59
Priority MEDIUM 43
An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie.
CVSS 4.0CRITICAL 9.4· Network · Low privileges · No interaction · EPSS 0.00378 · Published 2026-10-15 · Fixed in 2.9.2 CWE-61
Priority MEDIUM 43
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00313 · Published 2026-10-15 · Fixed in 5.8.8 CWE-639
Priority MEDIUM 40
A relative path traversal vulnerability has been reported to affect QuMagie.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.0042 · Published 2026-10-15 · Fixed in 2.9.1 CWE-23
Priority LOW 24
An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00378 · Published 2026-10-15 · Fixed in 5.0.0.7, 5.1.0.3 +2 CWE-61
Priority LOW 24
A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00263 · Published 2026-10-15 · Fixed in 5.10.1.312, 5.11.2.321 CWE-918
Priority MEDIUM 40
A path traversal vulnerability has been reported to affect Video Station.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00382 · Published 2026-10-15 · Fixed in 5.8.8 CWE-22
Priority LOW 37
An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station.
CVSS 4.0HIGH 8.4· Local · High privileges · No interaction · EPSS 0.00105 · Published 2026-10-15 · Fixed in 5.10.1.312, 5.11.2.321 CWE-732
Priority MEDIUM 48
A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00395 · Published 2026-10-15 · Fixed in 1.4.5 CWE-306
Priority LOW 31
A SQL injection vulnerability has been reported to affect Video Station.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00377 · Published 2026-10-15 · Fixed in 5.8.8 CWE-89
Priority LOW 31
A SQL injection vulnerability has been reported to affect Video Station.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00377 · Published 2026-10-15 · Fixed in 5.8.8 CWE-89
Priority LOW 32
A path traversal vulnerability has been reported to affect Qsync Central.
CVSS 4.0HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.00419 · Published 2026-10-15 · Fixed in 5.0.0.6, 5.1.0.2 +1 CWE-22
Priority MEDIUM 40
A path traversal vulnerability has been reported to affect QcalAgent.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00362 · Published 2026-10-15 · Fixed in 1.1.10 CWE-22
Priority MEDIUM 40
A relative path traversal vulnerability has been reported to affect Download Station.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00362 · Published 2026-10-15 · Fixed in 5.10.2.313, 5.11.3.322 CWE-23
Priority LOW 24
A NULL pointer dereference vulnerability has been reported to affect File Station 5.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0028 · Published 2026-10-15 · Fixed in 5.5.6.5243 CWE-476
Load more
THREATIST.IORead the docs