CVE-2021-28803

CVE-2021-28803 is a Stored XSS vulnerability in QNAP QCenter, affecting versions prior to 1.11.1004. The issue stems from insufficient protection of user data, enabling an attacker to inject and execute client-side script within QCenter. The connected CNVD/CNNVD/CCE-style records describe the sam...

CVE-2021-28802 Command Injection Vulnerabilities in QTS and QuTS hero

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.1.1540 build 20210107. QNAP Systems Inc...

CVE-2021-28802

CVE-2021-28802 is a remote command-injection vulnerability affecting QNAP QTS and QuTS hero. Affected versions: QTS < 4.5.1.1540 build 20210107 and QuTS hero

CVE-2021-28802

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.1.1540 build 20210107. QNAP Systems Inc...

Qnap Systems QuLog Center 跨站脚本漏洞

Qnap Systems QuLog Center is a report field for China Unicom Qnap Systems that records events reported by the system. QuLog Center suffers from a cross-site scripting vulnerability that stems from a stored XSS vulnerability affecting QNAP NAS running QuLog Center, which can be exploited by an...

Qnap Systems QuLog Center 跨站脚本漏洞

Qnap Systems QuLog Center is a report field at Qnap Systems that records events reported by the system. A cross-site scripting vulnerability exists in QuLog Center, which stems from an XSS vulnerability that affects QNAP NASes running QTS and QuTS hero. An attacker could use this vulnerability to...

CVE-2021-28801

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C;...

CVE-2021-28801

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C;...

CVE-2021-28805 Inclusion of Sensitive Information in QSS

Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versio...

PT-2021-17936 · Qnap Systems · Qnap Helpdesk +1

Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. Helpdesk versions prior to 3.0.4 Description: An improper access control issue has been reported, affecting QNAP NAS. This issue allows remote attackers to compromise the security of the software. Recommendations: For versio...

PT-2021-17929 · Qnap Systems · Qsw-M408 +3

Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2S QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108R-2C QNAP Syste...

CVE-2021-28812

A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Video Station versions prior to 5.5.4 on QTS 4.5.2; versions prior to 5.5....

Design/Logic Flaw

A DOM-based XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.3.1652 Build 20210428. QNAP Systems Inc. QuTS hero versions pri...

Command injection

A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Video Station versions prior to 5.5.4 on QTS 4.5.2; versions prior to 5.5....

CVE-2021-28812

CVE-2021-28812 is a command-injection vulnerability affecting QNAP Video Station prior to 5.5.4 on QTS 4.5.2, QuTS hero h4.5.2, and QuTScloud c4.5.4. The issue allows remote attackers to execute arbitrary commands and is exploitable over the network with low attack complexity and no authenticatio...

CVE-2021-28812 Command Injection Vulnerability in Video Station

A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Video Station versions prior to 5.5.4 on QTS 4.5.2; versions prior to 5.5....

CVE-2021-28806 DOM-Based XSS Vulnerability in QTS and QuTS hero

A DOM-based XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.3.1652 Build 20210428. QNAP Systems Inc. QuTS hero versions pri...

CVE-2021-28807

A post-authentication reflected XSS vulnerability has been reported to affect QNAP NAS running Q’center. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already fixed this vulnerability in the following versions of Q’center: QTS 4.5.3: Q’center...

PT-2021-17934 · Qnap Systems · Quts Hero +3

Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. Video Station versions prior to 5.5.4 on QTS 4.5.2 QNAP Systems Inc. Video Station versions prior to 5.5.4 on QuTS hero h4.5.2 QNAP Systems Inc. Video Station versions prior to 5.5.4 on QuTScloud c4.5.4 Description: A comman...

CVE-2020-36197

An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited, this vulnerability allows attackers to compromise the security of the software by gaining privileges, reading sensitive information, executing commands, evading detection, etc. Th...