CVE-2021-38685

A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later...

Authentication flaw

An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later...

Command injection

A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later...

CVE-2021-38686 Improper Authentication Vulnerability in VioStor

An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later...

CVE-2021-38686

CVE-2021-38686 is an improper authentication vulnerability impacting QNAP VioStor/NVR via QVR. The issue allows remote compromise; CVSSv3.1 base score 8.8 (HIGH) with network access and required user interaction. A fix is available in QVR FW 5.1.6 build 20211109 and later. Exploitation status is ...

CVE-2021-38685

CVE-2021-38685 is a remote command-injection vulnerability affecting QNAP VioStor/NVR software (QVR). The issue allows an unauthenticated remote attacker to execute arbitrary commands, with high impact on confidentiality, integrity, and availability (CVSS v3.1 base score 9.8). Affected fix: firmw...

CVE-2021-38685 Command Injection Vulnerability in VioStor

A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later...

CVE-2021-38685

A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later...

Qnap Qvr 授权问题漏洞

Qnap Qvr is a Qnap monitoring system control center from China Weilian Technology Qnap. An authorization issue vulnerability exists in the QNAP appliance VioStor, which allows an attacker to compromise the security of the system. We have fixed this vulnerability in the following QVR versions: QVR...

Qnap Qvr 操作系统命令注入漏洞

Qnap Qvr is a Qnap monitoring system control center from China Weilian Technology Qnap. An operating system command injection vulnerability exists in the QNAP appliance VioStor, which allows remote attackers to run arbitrary commands. We have fixed this vulnerability in the following QVR versions...

QNAP QTS RCE Vulnerability (QSA-21-50)

QNAP QTS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...

CVE-2021-38681

A reflected cross-site scripting XSS vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already disabled and removed Ragic Cloud DB from the QNAP App Center, pending a security pat...

CVE-2021-38681

A reflected cross-site scripting XSS vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already disabled and removed Ragic Cloud DB from the QNAP App Center, pending a security pat...

Cross site scripting

A reflected cross-site scripting XSS vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already disabled and removed Ragic Cloud DB from the QNAP App Center, pending a security pat...

CVE-2021-38681

CVE-2021-38681 describes a reflected cross-site scripting (XSS) vulnerability in QNAP NAS running the Ragic Cloud DB. Exploitation could allow remote attackers to inject malicious code via the affected web page. QNAP has disabled and removed Ragic Cloud DB from the App Center, with a security pat...

CVE-2021-38681 Reflected XSS Vulnerability in Ragic Cloud DB

A reflected cross-site scripting XSS vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already disabled and removed Ragic Cloud DB from the QNAP App Center, pending a security pat...

PT-2021-7638 · Qnap +1 · Qnap Nas +1

Name of the Vulnerable Software and Affected Versions: QNAP NAS running Ragic Cloud DB affected versions not specified Description: A reflected cross-site scripting XSS vulnerability has been reported, allowing remote attackers to inject malicious code if exploited. The vulnerability exists due t...

QNAP NAS 跨站脚本漏洞

QNAP NAS is an accessible and fast storage solution from QNAP China. A cross-site scripting vulnerability exists in QNAP NAS, which can be exploited by an attacker to inject malicious code...

CVE-2021-34357

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running QmailAgent. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 2021/08/25 and...

CVE-2021-38684

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3...