Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

4035 matches found

NVD
NVD•added 2022/05/05 5:15 p.m.•28 views

CVE-2021-44057

An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station...

10CVSS0.00913EPSS
SaveExploits0References1
NVD
NVD•added 2022/05/05 5:15 p.m.•32 views

CVE-2021-44053

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QTS, QuTS hero and...

6.1CVSS0.00745EPSS
SaveExploits0References1
NVD
NVD•added 2022/05/05 5:15 p.m.•23 views

CVE-2021-44055

An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote attackers to access data or perform actions that they should not be allowed to perform. We have already fixed this vulnerability in the following...

9.8CVSS0.01043EPSS
SaveExploits0References1
NVD
NVD•added 2022/05/05 5:15 p.m.•31 views

CVE-2021-44051

A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero and QTS:...

8.8CVSS0.01675EPSS
SaveExploits0References1
OSV
OSV•added 2022/05/05 5:15 p.m.•10 views

CVE-2021-44057

An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station...

9.8CVSS7.5AI score0.00913EPSS
SaveExploits0References1
OSV
OSV•added 2022/05/05 5:15 p.m.•8 views

CVE-2021-44053

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QTS, QuTS hero and...

6.1CVSS5.7AI score0.00745EPSS
SaveExploits0References1
OSV
OSV•added 2022/05/05 5:15 p.m.•9 views

CVE-2021-44055

An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote attackers to access data or perform actions that they should not be allowed to perform. We have already fixed this vulnerability in the following...

9.8CVSS7.5AI score0.01043EPSS
SaveExploits0References1
NVD
NVD•added 2022/05/05 5:15 p.m.•18 views

CVE-2021-44056

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station...

10CVSS0.00913EPSS
SaveExploits0References1
OSV
OSV•added 2022/05/05 5:15 p.m.•10 views

CVE-2021-44056

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station...

9.8CVSS5.7AI score0.00913EPSS
SaveExploits0References1
NVD
NVD•added 2022/05/05 5:15 p.m.•28 views

CVE-2021-38693

A path traversal vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, QTS, QVR Pro Appliance. If exploited, this vulnerability allows attackers to read the contents of unexpected files and expose sensitive data. We have already fixed this vulnerability in the...

5.3CVSS0.00937EPSS
SaveExploits0References1
OSV
OSV•added 2022/05/05 5:15 p.m.•6 views

CVE-2021-38693

A path traversal vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, QTS, QVR Pro Appliance. If exploited, this vulnerability allows attackers to read the contents of unexpected files and expose sensitive data. We have already fixed this vulnerability in the...

5.3CVSS5.7AI score0.00937EPSS
SaveExploits0References1
Prion
Prion•added 2022/05/05 5:15 p.m.•30 views

Cross site scripting

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QTS, QuTS hero and...

4.3CVSS6AI score0.00745EPSS
SaveExploits0References1Affected Software3
Prion
Prion•added 2022/05/05 5:15 p.m.•26 views

Authorization

An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote attackers to access data or perform actions that they should not be allowed to perform. We have already fixed this vulnerability in the following...

7.5CVSS9.3AI score0.01043EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2022/05/05 5:15 p.m.•26 views

Path traversal

A path traversal vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, QTS, QVR Pro Appliance. If exploited, this vulnerability allows attackers to read the contents of unexpected files and expose sensitive data. We have already fixed this vulnerability in the...

5CVSS5.2AI score0.00937EPSS
SaveExploits0References1Affected Software3
Prion
Prion•added 2022/05/05 5:15 p.m.•25 views

Authentication flaw

An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station...

10CVSS9.4AI score0.00913EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2022/05/05 5:15 p.m.•26 views

Design/Logic Flaw

An improper link resolution before file access 'Link Following' vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, and QTS. If exploited, this vulnerability allows remote attackers to traverse the file system to unintended locations and read or overwrite the...

5.5CVSS7.9AI score0.01566EPSS
SaveExploits0References1Affected Software3
Prion
Prion•added 2022/05/05 5:15 p.m.•24 views

Command injection

A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero and QTS:...

6.5CVSS8.8AI score0.01675EPSS
SaveExploits0References1Affected Software3
Prion
Prion•added 2022/05/05 5:15 p.m.•30 views

Authentication flaw

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station...

10CVSS9.4AI score0.00913EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2022/05/05 5:15 p.m.•25 views

Open redirect

An open redirect vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of...

5.8CVSS6.2AI score0.00573EPSS
SaveExploits0References1Affected Software3
CVE
CVE•added 2022/05/05 4:50 p.m.•127 views

CVE-2021-44057

CVE-2021-44057 describes an improper authentication vulnerability in QNAP Photo Station. Connected sources confirm affected product: QNAP Photo Station on NAS devices, with root cause in authentication handling that allows system compromise. Remediation shown in connected documents includes fixes...

10CVSS8.4AI score0.00913EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder