Lucene search
K

92 matches found

Vulnrichment
Vulnrichment
added 2025/08/29 5:14 p.m.2 views

CVE-2025-29887 QuRouter 2.5

A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.5.1.060 and later...

7.1CVSS7.5AI score0.00861EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/29 12:0 a.m.3 views

QNAP Systems QuRouter 安全漏洞

QNAP Systems QuRouter is a router management system from China Weilian Technology QNAP Systems. A security vulnerability exists in QNAP Systems QuRouter version 2.5.1 that originates from command injection and could lead to the execution of arbitrary commands...

7.2CVSS7.5AI score0.00861EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/08/29 12:0 a.m.3 views

PT-2025-35261

Name of the Vulnerable Software and Affected Versions: QuRouter version 2.5.1 Description: A command injection vulnerability exists in QuRouter. A remote attacker gaining administrator account access can exploit this issue to execute arbitrary commands. Recommendations: Update to QuRouter version...

7.1CVSS7.6AI score0.00861EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/06/08 4:1 p.m.15 views

CVE-2024-13087

A command injection vulnerability has been reported to affect QHora. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version:...

6.7CVSS7.4AI score0.00598EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/08 4:1 p.m.15 views

CVE-2024-13088

An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuRouter 2.5.0.140 and later...

7.8CVSS6.6AI score0.00224EPSS
Exploits0References1
OSV
OSV
added 2025/06/06 4:15 p.m.2 views

CVE-2024-13088

An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuRouter 2.5.0.140 and later...

7.8CVSS5.7AI score
Exploits0References1
NVD
NVD
added 2025/06/06 4:15 p.m.20 views

CVE-2024-13088

An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuRouter 2.5.0.140 and later...

7.8CVSS0.00224EPSS
Exploits0References1
OSV
OSV
added 2025/06/06 4:15 p.m.0 views

CVE-2024-13087

A command injection vulnerability has been reported to affect QHora. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version:...

6.7CVSS6AI score0.00598EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 3:53 p.m.15 views

CVE-2024-13088 QHora

An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuRouter 2.5.0.140 and later...

5.2CVSS7.2AI score0.00224EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/06 3:53 p.m.16 views

CVE-2024-13088 QHora

An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuRouter 2.5.0.140 and later...

5.2CVSS0.00224EPSS
Exploits0References1
CVE
CVE
added 2025/06/06 3:53 p.m.59 views

CVE-2024-13088

CVE-2024-13088 affects QNAP QHora/Qurouter devices and is caused by improper authentication. According to the provided details, exploitation requires local network access, allowing an attacker to compromise system security. The affected product is QuRouter, with a fix implemented in version 2.5.0...

7.8CVSS7AI score0.00224EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.3 views

PT-2025-24288 · Qurouter +1 · Qurouter +1

Name of the Vulnerable Software and Affected Versions: QuRouter versions prior to 2.4.6.028 Description: A command injection issue has been reported, affecting QHora. An attacker with local network access and an administrator account can exploit this to execute arbitrary commands. Recommendations...

2.4CVSS7.2AI score0.00598EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.3 views

PT-2025-24289

Name of the Vulnerable Software and Affected Versions QuRouter versions prior to 2.5.0.140 Description An improper authentication issue has been reported, affecting the security of the system if an attacker gains local network access. Recommendations For versions prior to 2.5.0.140, update to...

7.8CVSS5.8AI score0.00224EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/23 6:49 a.m.9 views

CVE-2024-50389

A SQL injection vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to inject malicious code. We have already fixed the vulnerability in the following version: QuRouter 2.4.5.032 and later...

9.5CVSS8AI score0.00816EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:41 a.m.6 views

CVE-2024-48860

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.3.103 and later...

9.5CVSS7.8AI score0.01472EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 6:41 a.m.6 views

CVE-2024-48861

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network attackers to execute commands. We have already fixed the vulnerability in the following versions: QuRouter 2.4.4.106 and later...

7.3CVSS7.5AI score0.00759EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/03/09 4:37 p.m.16 views

CVE-2024-53700

A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.6.028 and later...

7.2CVSS8AI score0.01247EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/09 4:28 p.m.17 views

CVE-2024-50390

A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.5.032 and later...

7.7CVSS8.1AI score0.0107EPSS
Exploits0
OSV
OSV
added 2025/03/07 5:15 p.m.5 views

CVE-2024-53700

A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.6.028 and later...

7.2CVSS6.1AI score0.01247EPSS
Exploits0References1
OSV
OSV
added 2025/03/07 5:15 p.m.2 views

CVE-2024-50390

A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.5.032 and later...

9.8CVSS6.1AI score0.0107EPSS
Exploits0References1
Rows per page
Query Builder