CVE-2021-38677 Reflected XSS Vulnerability in QcalAgent

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later...

Qnap Qvr Elite 缓冲区错误漏洞

Qnap Qvr Elite is a subscription-based intelligent monitoring solution from China's Weilian Technology Qnap. A security vulnerability exists in the QNAP device, which stems from a stack-based buffer overflow vulnerability in the software that can be exploited by an attacker to execute arbitrary...

Qnap Qvr缓冲区错误漏洞

Qnap Qvr is a Qnap monitoring system control center from China Welllink Technology Qnap, Inc. A buffer overflow vulnerability exists in several QVR products, which stems from a stack buffer overflow vulnerability that affects QNAP devices running QVR Elite, QVR Pro, and QVR Guard. An attacker cou...

CVE-2021-38689

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: Qu...

CVE-2021-38691

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: Qu...

Qnap Qvr缓冲区错误漏洞

Qnap Qvr is a Qnap Surveillance System Control Center from China Weilian Technology Qnap. A buffer error vulnerability exists in multiple QVR products that stems from a stack buffer overflow vulnerability affecting QNAP devices running QVR Elite, QVR Pro, and QVR Guard. If exploited, this...

Qnap QcalAgent 输入验证错误漏洞

Qnap QcalAgent is a time management center from China Weilian Technology Qnap. It is used to manage personal schedules, share calendars with others, and share each other's schedules. An input validation error vulnerability exists in QNAP QcalAgent that stems from not properly handling user input...

Qnap QcalAgent 跨站脚本漏洞

Qnap QcalAgent is a time management center from China Weilian Technology Qnap. It is used to manage personal schedules, share calendars with others, and share each other's schedules. QNAP QcalAgent suffers from a cross-site scripting vulnerability that stems from insufficient cleaning of...

Qnap Qvr缓冲区错误漏洞

Qnap Qvr is a Qnap monitoring system control center from China Welllink Technology Qnap, Inc. A security vulnerability exists in several QVR products, stemming from a stack buffer overflow vulnerability that affects QNAP devices running QVR Elite, QVR Pro, and QVR Guard. An attacker could exploit...

Qnap Qvr缓冲区错误漏洞

Qnap Qvr is a Qnap monitoring system control center from China Weilian Technology Qnap. A security vulnerability exists in multiple QVR products that stems from a stack buffer overflow vulnerability affecting QNAP devices running QVR Elite, QVR Pro, and QVR Guard. If exploited, the vulnerability...

CVE-2021-38677

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later...

CVE-2021-38678

An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1....

QNAP QTS XSS Vulnerability (QSA-21-63)

QNAP QTS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...

QNAP QTS Surveillance Station Buffer Overflow Vulnerability (QSA-21-46)

QNAP QTS Surveillance Station is prone to a stack buffer overflow vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

QNAP: Get NAS Devices Off the Internet Now

Get your internet-exposed, network-attached storage NAS devices off the internet now, Taiwanese manufacturer QNAP warns: Ransomware and brute-force attacks are widely targeting all network devices. “The most vulnerable victims will be those devices exposed to the Internet without any protection,”...

QNAP Systems QUTS Hero 跨站脚本漏洞

QNAP Systems QUTS Hero is a NAS operating system for file management from China Waylink QNAP Systems. The system retains the QTS application ecosystem and integrates a more powerful 128-bit ZFS file system to provide enterprises with a more stable and reliable NAS storage solution.QNAP Systems QU...

QNAP Systems QUTS Hero Cross-Site Scripting Vulnerability

QNAP Systems QUTS Hero is a NAS operating system for file management from China Waylink QNAP Systems. The system retains the QTS application ecosystem and integrates a more powerful 128-bit ZFS file system to provide enterprises with a more stable and reliable NAS storage solution.QNAP Systems QU...

QNAP NAS Buffer Overflow Vulnerability

QNAP NAS is an accessible and fast storage solution from China Weilian Technology QNAP. The QNAP NAS Surveillance Station suffers from a buffer overflow vulnerability that originates from a boundary error in the software's handling of requests, which can be exploited by an unauthenticated, remote...

CVE-2021-38687

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Surveillance Station: QTS 5.0.0 64 bit:...

CVE-2021-38687

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Surveillance Station: QTS 5.0.0 64 bit:...