Lucene search
+L

623 matches found

CNNVD
CNNVD
•added 2026/02/11 12:00 a.m.•23 views

QNAP Qsync Central 代码问题漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a code vulnerability caused by a null pointer dereferencing, which could lead to a denial-of-service attack...

6.5CVSS5.9AI score0.00416EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•17 views

PT-2026-7545

Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.4 Description A flaw exists in Qsync Central that, if exploited by a remote attacker with a user account, could lead to a denial-of-service DoS attack. The issue is a NULL pointer dereference...

6.5CVSS5.5AI score0.00416EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•20 views

PT-2026-7564

A relative path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync...

5.3CVSS5.5AI score0.00442EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/11 12:00 a.m.•17 views

QNAP Qsync Central 代码问题漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of Qsync Central prior to 5.0.0.4 contained a code vulnerability caused by a null pointer dereferencing, which could allow remote attackers to launch a denial-of-service...

6.5CVSS5.9AI score0.00416EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•20 views

PT-2026-7531

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4...

2.3CVSS5.5AI score0.00416EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•27 views

PT-2026-7544

Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.4 Description A flaw exists in Qsync Central that, if exploited by a remote attacker with a user account, could lead to a denial-of-service DoS attack. The issue is due to a NULL pointer dereference...

6.5CVSS5.5AI score0.00496EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/11 12:00 a.m.•21 views

QNAP Qsync Central 代码问题漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a code vulnerability caused by a null pointer dereferencing, which could allow remote attackers to launch a...

6.5CVSS5.9AI score0.00416EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•1 views

CVE-2025-52868: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 2026/01/20 and...

8.1CVSS6AI score0.00317EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•2 views

CVE-2025-30276: Out-of-bounds Write

An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 2026/01/20 and la...

8.8CVSS5.8AI score0.00535EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•4 views

CVE-2025-48724: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 2026/01/20 and...

8.1CVSS6AI score0.00401EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•36 views

PT-2026-7548

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central...

7.1CVSS5.5AI score0.00257EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•3 views

CVE-2025-54147: NULL Pointer Dereference

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4...

6.5CVSS5.6AI score0.00416EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•2 views

CVE-2025-54150: Uncontrolled Resource Consumption

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central...

7.1CVSS5.7AI score0.00257EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/12/17 12:00 a.m.•14 views

The vulnerability of the Qsync Central file synchronization application, related to unlimited distribution of resources, allows a hacker to cause a service failure.

The vulnerability of the Qsync Central file synchronization application is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a remote attacker to cause service failures...

6.8CVSS5.8AI score0.00494EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/17 12:00 a.m.•16 views

The vulnerability of the synchronization application for Qsync Central files relates to the lack of security measures for the SQL query structure, allowing a hacker to execute arbitrary code.

The vulnerability of the Qsync Central file synchronization application is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS6.1AI score0.00422EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/17 12:00 a.m.•14 views

The vulnerability of the synchronization application for Qsync Central files relates to the lack of security measures for the SQL query structure, allowing a hacker to execute arbitrary code.

The vulnerability of the Qsync Central file synchronization application is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS6.1AI score0.00422EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/17 12:00 a.m.•21 views

The vulnerability of the Qsync Central file synchronization application, related to unlimited distribution of resources, allows a hacker to cause a service failure.

The vulnerability of the Qsync Central file synchronization application is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a remote attacker to cause service failures...

6.8CVSS5.8AI score0.00415EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/11/08 3:57 p.m.•27 views

CVE-2025-57712

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

7.1CVSS6.7AI score0.00445EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/07 6:30 p.m.•15 views

EUVD-2025-38270

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

7.1CVSS6.3AI score0.00445EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/07 4:15 p.m.•14 views

CVE-2025-57712

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

7.1CVSS0.00445EPSS
SaveExploits0References1
Rows per page
Query Builder