Firmware & Software

A stored cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Image2PDF. If exploited, this vulne ... More

A stored cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, this v ... More

Two stored cross-site scripting (XSS) vulnerabilities have been reported to affect QNAP NAS running Photo Station. If exploited, t ... More

A command injection vulnerability has been reported to affect certain QNAP EOL devices running QVR. If exploited, this vulnerabili ... More

Two command injection vulnerabilities have been reported to affect certain QNAP EOL devices running QVR. If exploited, these vulne ... More

A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTS ... More

A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches ... More

Two stack-based buffer overflow vulnerabilities have been reported to affect QNAP NAS running NVR Storage Expansion. If exploited, ... More

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running QUSBCam2. If exploited, this vulnerability allo ... More

Two stack buffer overflow vulnerabilities have been reported to affect QNAP devices running QTS, QuTS hero, and QuTScloud. If expl ... More

Two out-of-bounds vulnerabilities in OpenSSL have been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync). If exploite ... More

An out-of-bounds read vulnerability in OpenSSL has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. If expl ... More

An improper access control vulnerability has been reported to affect certain legacy versions of HBS 3 (Hybrid Backup Sync). If exp ... More

An improper access control vulnerability has been reported to affect certain versions of HBS 3 (Hybrid Backup Sync). If exploited, ... More

DNSpooq vulnerabilities—including DNS cache poisoning and buffer overflow vulnerabilities—have been reported to affect certain ver ... More

An XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attac ... More

A stored XSS vulnerability has been reported to affect QNAP NAS running Q'center. If exploited, this vulnerability allows attacker ... More

A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability allows atta ... More

Multiple command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows ... More

A command injection vulnerability has been reported to affect QNAP NAS running legacy versions of QTS. If exploited, this vulnera ... More