Cross site scripting

A reflected cross-site scripting XSS vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already disabled and removed Ragic Cloud DB from the QNAP App Center, pending a security pat...

CVE-2021-38681 Reflected XSS Vulnerability in Ragic Cloud DB

A reflected cross-site scripting XSS vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already disabled and removed Ragic Cloud DB from the QNAP App Center, pending a security pat...

CVE-2021-38681

CVE-2021-38681 describes a reflected cross-site scripting (XSS) vulnerability in QNAP NAS running the Ragic Cloud DB. Exploitation could allow remote attackers to inject malicious code via the affected web page. QNAP has disabled and removed Ragic Cloud DB from the App Center, with a security pat...

QNAP NAS 跨站脚本漏洞

QNAP NAS is an accessible and fast storage solution from QNAP China. A cross-site scripting vulnerability exists in QNAP NAS, which can be exploited by an attacker to inject malicious code...

CVE-2021-38684

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3...

CVE-2021-38684

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3...

Stack overflow

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3...

CVE-2021-38684 Buffer Overflow Vulnerability in Multimedia Console

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3...

CVE-2021-38684

CVE-2021-38684 describes a stack buffer overflow in QNAP NAS Multimedia Console. The vulnerability enables arbitrary code execution on affected systems running the Multimedia Console component, with impact to confidentiality, integrity, and availability as indicated by CVSS metrics. The issue has...

CVE-2021-1982

Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30284

Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,...

Input validation

Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30284

Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,...

CVE-2021-30284

CVE-2021-30284 affects Qualcomm closed‑source components on Qualcomm Snapdragon platforms (e.g., Snapdragon Auto/Compute/Connectivity and related IoT/mobile families). The issue arises when the NAS does not drop messages after a failed integrity check, leading to possible information exposure and...

CVE-2021-1982

Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

NAS Recycle Bin impact on Veeam Backup & Replication Repositories

Automatic Recycle Bin Exclusion Starting in Veeam Backup & Replication 12, the storage rescan operation will automatically exclude most recycle bin folders from being scanned. This improvement has reduced the occurrence of issues necessitating this KB article. However, some edge cases may exist...

QNAP NAS Photo Station XSS Vulnerability (QSA-21-42)

QNAP NAS Photo Station is prone to a stored cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

QNAP NAS Photo Station Multiple XSS Vulnerabilities (QSA-21-41)

QNAP NAS Photo Station is prone to two stored cross-site scripting XSS vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2021-34355

A cross-site scripting XSS vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 5.4.10...

Cross site scripting

A cross-site scripting XSS vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 5.4.10...