QNAP File Station 5 代码问题漏洞

QNAP Systems File Station 5威联通QNAP presents a file management application for browsing, uploading, downloading and managing files and folders stored on NAS devices, remote servers or external storage devices. A null pointer dereference vulnerability exists in QNAP Systems File Station 5, which ca...

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

QNAP QTS and QuTS hero OS command injection vulnerability (CNVD-2025-27829)

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

QNAP QTS and QuTS hero operating system command injection vulnerability

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

D-Link DNS-320 信息泄露漏洞

The D-Link DNS-320 is a two-drive networked storage device NAS from AUO, designed for home and small office scenarios, supporting up to 4TB of storage capacity. The D-Link DNS-320 suffers from an information disclosure vulnerability, which originates from the file /cgi-bin/discovery.cgi being...

PT-2022-16252 · Iptime · Iptime Nas

Name of the Vulnerable Software and Affected Versions: IPTIME NAS affected versions not specified Description: The issue occurs when a malicious POST request is sent to a specific page while logged in as a random user from some family of IPTIME NAS. This allows remote attackers to steal root...

CVE-2020-9054 ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi

Multiple ZyXEL network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS devices achieve authentication by using th...

PT-2020-1852

Name of the Vulnerable Software and Affected Versions ZyXEL NAS326 versions prior to V5.21AAZF.7C0 ZyXEL NAS520 versions prior to V5.21AASZ.3C0 ZyXEL NAS540 versions prior to V5.21AATB.4C0 ZyXEL NAS542 versions prior to V5.21ABAG.4C0 ZyXEL NSA210 affected versions not specified ZyXEL NSA220...

PT-2019-18007 · Lenovoemc +1 · Lenovoemc Nas +1

Name of the Vulnerable Software and Affected Versions: Iomega and LenovoEMC NAS products affected versions not specified Description: The issue is related to an information leakage vulnerability. It could allow disclosure of some device details, such as Share names, through the device API when...

Drobo 5N2 System Command Injection Vulnerability (CNVD-2019-05933)

The Drobo 5N2 NAS is a networked storage appliance NAS from Drobo, USA. The device features data sharing, data backup, remote access and disaster recovery. A command injection vulnerability exists in the /DroboAccess/enableuser endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115. An attacker can...

QNAP QTS Helpdesk Command Injection Vulnerability

QNAP QTS is a Turbo NAS operating system from QNAP Systems that provides file storage management, backup, multimedia applications and security monitoring. The system provides file storage, management, backup, multimedia applications and security monitoring, etc. Helpdesk is one of the helpdesk...

My Book World Edition NAS multiple vulnerability

Exploit for unknown platform in category web applications ================================================ My Book World Edition NAS multiple vulnerability ================================================ Exploit Title: My Book World Edition NAS multiple vulnerability Date: 20091230 Author:...