CVE-2017-7635

QNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections...

CVE-2017-7637

QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to run arbitrary OS commands against the system with root privileges...

PT-2018-8415

Name of the Vulnerable Software and Affected Versions QNAP NAS application Proxy Server versions prior to 1.2.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.2.0, update to version 1.2.0 or late...

PT-2018-8416

Name of the Vulnerable Software and Affected Versions QNAP NAS application Proxy Server versions prior to 1.2.1 Description The issue allows remote attackers to run arbitrary OS commands against the system with root privileges. Recommendations For versions prior to 1.2.1, update to version 1.2.1 ...