388359 matches found
EUVD-2026-101879
A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...
CVE-2026-39993
A relative path traversal vulnerability exists in Download Station (specifically mentioned in the context of the Addon/Search addon Parameter ). A remote attacker with a valid user account can exploit this flaw to read unexpected files or system data . The vulnerability has been addressed in Down...
CVE-2026-24718
A path traversal vulnerability affects Qsync Central in the qsyncsrv.cgi component. If a remote attacker obtains a user account, they can exploit this flaw to read unexpected files or system data . The vulnerability has been addressed in versions 5.0.0.7 , 5.1.0.3 , 5.2.0.5 , and 5.3.0.2 and late...
CVE-2026-24718 Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgi
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...
EUVD-2026-101875
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...
CVE-2026-24715 Lack of Reproducible Vulnerability Evidence in QNAP Report
An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later...
EUVD-2026-101873
An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later...
CVE-2026-24715
The QuRouter software is affected by an observable timing discrepancy vulnerability (CWE-208). If exploited, this flaw could allow remote attackers to obtain sensitive data . The issue has been resolved in QuRouter version 2.7.2.113 and later. No specific exploit details or in-the-wild exploitati...
EUVD-2025-211095
An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local attacker gains an administrator account, they can then exploit the vulnerability to modify data on the system. We have already fixed the vulnerability in the following version:...
CVE-2025-68403 Inadequate Steps to Confirm Vulnerability in QuRouter
An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local attacker gains an administrator account, they can then exploit the vulnerability to modify data on the system. We have already fixed the vulnerability in the following version:...
CVE-2025-68403
The QuRouter software is affected by an external control of system or configuration setting vulnerability (CWE-15). A local attacker who has obtained administrator privileges can exploit this flaw to modify data on the system. The vulnerability has been addressed in QuRouter version 2.7.2.113 and...
CVE-2025-66275
A path traversal vulnerability (CWE-22) affects Video Station . If a remote attacker obtains a user account, they can exploit this flaw to read the contents of unexpected files or system data. The vulnerability has been addressed in Video Station version 5.8.5 and later . Specific details regardi...
CVE-2025-66275 Remote code execution via command injection
A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8...
EUVD-2025-211094
A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8...
EUVD-2025-211093
A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8...
CVE-2025-66272
A path traversal vulnerability (CWE-22) exists in Video Station , allowing an authenticated remote attacker to read the contents of unexpected files or system data. The vulnerability is resolved in Video Station version 5.8.5 and later . No specific exploit details or in-the-wild exploitation are...
CVE-2026-110934
Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before be6e297b0c4836e20d73b2f8a40a561ea496ebaa...
EUVD-2026-101869
Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before be6e297b0c4836e20d73b2f8a40a561ea496ebaa...
CVE-2026-110934
The Samsung Open Source Vyond project contains an improper validation of array index vulnerability (CWE-129). This flaw allows for Input Data Manipulation . The vulnerability affects versions of Vyond prior to commit be6e297b0c4836e20d73b2f8a40a561ea496ebaa . According to the provided metrics, th...