Lucene search
+L

37 matches found

CNNVD
CNNVD
•added 2023/09/08 12:00 a.m.•20 views

QNAP Systems Qvr Pro Log Information Disclosure Vulnerability

QNAP Systems Qvr Pro is an Ip video surveillance system from QNAP Systems. It is used to manage Ip cameras, monitor live view and playback previous recordings using a mobile device. A security vulnerability exists in QNAP Systems Qvr Pro versions prior to 2.3.0.0420, which originates from inserti...

6.7CVSS6.6AI score0.0018EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/10/20 12:00 a.m.•17 views

QNAP QVR Elite Plugin Heap Buffer Overflow

The vulnerability of QNAP QVR Elite, QVR Pro, and the QVR Guard application, which is used for managing emergency switching of video surveillance systems, lies in data recording beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

8.1CVSS8.4AI score0.01296EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/10/20 12:00 a.m.•16 views

QNAP QVR Elite Plugin Heap Buffer Overflow

The vulnerability of QNAP QVR Elite, QVR Pro, and the QVR Guard emergency switching management application relates to data recording beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

8.1CVSS8.4AI score0.01296EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2022/10/20 12:00 a.m.•16 views

QNAP QVR Elite Plugin Heap Buffer Overflow

The vulnerability of QNAP QVR Elite, QVR Pro, and the QVR Guard application, which is used for managing emergency switching of video surveillance systems, lies in data recording beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

8.1CVSS8.4AI score0.01296EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/05/05 12:00 a.m.•6 views

PT-2022-3432

Name of the Vulnerable Software and Affected Versions QNAP QVR versions prior to 5.1.6 build 20220401 Description The issue is related to the QNAP QVR video surveillance system management, where it fails to neutralize special elements used in an OS command. This could allow a remote attacker to...

10CVSS0.01362EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/01/18 12:00 a.m.•84 views

Qnap Qvr has an unspecified vulnerability

Qnap Qvr is a Qnap monitoring system control center from China Welllink Technology Qnap, Inc. A security vulnerability exists in several QVR products, stemming from a stack buffer overflow vulnerability that affects QNAP devices running QVR Elite, QVR Pro, and QVR Guard. An attacker could exploit...

9.8CVSS2.8AI score0.01296EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/01/14 1:15 a.m.•19 views

CVE-2021-38692

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: Qu...

9.8CVSS6.3AI score0.01296EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/01/14 1:15 a.m.•24 views

CVE-2021-38689

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: Qu...

9.8CVSS7.8AI score0.01296EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/01/14 1:15 a.m.•17 views

CVE-2021-38682

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: Qu...

9.8CVSS7.8AI score0.01296EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/01/14 12:00 a.m.•14 views

Qnap Qvr Elite 缓冲区错误漏洞

Qnap Qvr Elite is a subscription-based intelligent monitoring solution from China's Weilian Technology Qnap. A security vulnerability exists in the QNAP device, which stems from a stack-based buffer overflow vulnerability in the software that can be exploited by an attacker to execute arbitrary...

9.8CVSS9AI score0.01296EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/01/13 1:49 a.m.•10 views

CVE-2021-38691

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: Qu...

9.8CVSS7.5AI score0.01296EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/01/13 12:00 a.m.•6 views

PT-2022-5120

Name of the Vulnerable Software and Affected Versions QNAP QVR Elite versions prior to 2.1.4.0 QNAP QVR Pro versions prior to 2.1.3.0 QNAP QVR Guard versions prior to 2.1.3.0 Description The issue is related to a stack buffer overflow vulnerability in the memory, which can be exploited by a remot...

9.8CVSS0.01296EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/01/13 12:00 a.m.•3 views

PT-2022-5119

Name of the Vulnerable Software and Affected Versions QNAP QVR Elite versions prior to 2.1.4.0 QNAP QVR Pro versions prior to 2.1.3.0 QNAP QVR Guard versions prior to 2.1.3.0 Description The issue is related to a stack buffer overflow in the memory, which can be exploited by a remote attacker to...

9.8CVSS0.01296EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2021/12/20 12:00 a.m.•18 views

QNAP QVR Command Injection

The vulnerability of the QNAP QVR video surveillance system is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

9.8CVSS8.1AI score0.01471EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/11/26 12:00 a.m.•3 views

PT-2021-5431

Name of the Vulnerable Software and Affected Versions QNAP QVR versions prior to 5.1.6 build 20211109 Description A command injection issue affects QNAP QVR, related to the failure to neutralize special elements used in an OS command. This allows a remote attacker to execute arbitrary commands. T...

9.8CVSS0.01471EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/01 12:00 a.m.•9 views

CVE-2021-34352: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210902 and later...

9.8CVSS5.9AI score0.01477EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/09/30 12:00 a.m.•19 views

Qnap Qvr 命令注入漏洞

Qnap Qvr is a Qnap monitoring system control center from China Weilian Technology Qnap. A command injection vulnerability exists in versions prior to Qnap Qvr 5.1.5 build 20210902, which can be exploited by a remote attacker to run arbitrary commands...

9.8CVSS8.5AI score0.01477EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/09/27 9:11 a.m.•12 views

CVE-2021-34351

A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later...

9.8CVSS7.2AI score0.01471EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/09/27 1:15 a.m.•15 views

CVE-2021-34348

A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later...

9.8CVSS5.9AI score0.01471EPSS
SaveExploits0References1
NVD
NVD
•added 2021/09/27 1:15 a.m.•27 views

CVE-2021-34349

A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later...

7.2CVSS0.0145EPSS
SaveExploits0References1
Rows per page
Query Builder