Firmware & Software

A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploite ... More

The Qualys research team has reported a heap-based buffer overflow vulnerability in sudo, an important utility for Unix-like and L ... More

A vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows an attacker to access sensitive info ... More

A vulnerability has been reported to affect QNAP devices. If exploited, this vulnerability allows a remote attacker to gain access ... More

A vulnerability has been reported to affect earlier QNAP devices running QTS 4.3.4 to 4.3.6. Caused by improper limitations of a p ... More

A hard-coded password vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerability could al ... More

A command injection vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerability could allo ... More

Three vulnerabilities have been reported to affect earlier versions of QES.  CVE-2020-2503: If exploited, this stored cross-site ... More

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application.  We have already ... More

This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code.  We have already f ... More

This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code.  We have already f ... More

This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code.  We have already fixed ... More

Four vulnerabilities have been reported to affect earlier versions of QTS and QuTS hero.  CVE-2020-2495: If exploited, this cross ... More

Three cross-site scripting vulnerabilities (CVE-2018-19954, CVE-2018-19955, CVE-2018-19956) have been reported to affect earlier v ... More

Three vulnerabilities have been reported to affect earlier versions of Music Station. CVE-2018-19950: If exploited, this command ... More

Two vulnerabilities have been reported to affect earlier versions of QTS.  CVE-2020-2490 ＆ CVE-2020-2492: If exploited, these two ... More

The Zerologon vulnerability has been reported to affect some versions of QTS. If exploited, this elevation of privilege vulnerabil ... More

The AgeLocker Ransomware has been reported to target QNAP NAS, Linux, and macOS devices. This new ransomware attempts to encrypt t ... More

The AgeLocker Ransomware (MR1907) has been reported to target QNAP NAS, Linux, and macOS devices. This new ransomware attempts to ... More

Three vulnerabilities have been reported to affect earlier versions of Helpdesk.  CVE-2018-19946: If exploited, this improper cer ... More