CVE-2024-21901 myQNAPcloud

A SQL injection vulnerability has been reported to affect myQNAPcloud. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following versions: myQNAPcloud 1.0.52 2023/11/24 and later QTS...

QNAP Systems SQL Injection Vulnerability in Multiple Products

QNAP Systems myQNAPcloud Connect and QNAP Systems QTS are both products of China's Weilian Technology QNAP Systems.QNAP Systems myQNAPcloud Connect is an application for connecting, sharing and managing QNAP NAS files. QNAP Systems QTS is an operating system for entry to mid-level QNAP NAS use. A...

PT-2024-2013 · Qnap · Qts +1

Name of the Vulnerable Software and Affected Versions: myQNAPcloud versions prior to 1.0.52 QTS versions prior to 4.5.4.2627 build 20231225 Description: A SQL injection vulnerability has been reported, which could allow authenticated administrators to inject malicious code via a network. The...

CVE-2024-21901: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been reported to affect myQNAPcloud. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following versions: myQNAPcloud 1.0.52 2023/11/24 and later QTS...

CVE-2021-28815

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

CVE-2021-28815

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

Code injection

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

CVE-2021-28815 Insecure Storage of Sensitive Information in myQNAPcloud Link

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

CVE-2021-28815

CVE-2021-28815: Affected product is QNAP Systems Inc. myQNAPcloud Link running on QTS 4.5.3 (and QuTS hero h4.5.2; QuTScloud c4.5.4). The root cause is insecure storage of sensitive information, allowing remote attackers to read sensitive data through an unrestricted storage mechanism. CVSS detai...

CVE-2021-28815

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

CVE-2021-28815: Insecure Storage of Sensitive Information

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

PT-2021-17937

Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. myQNAPcloud Link versions prior to 2.2.21 on QTS 4.5.3 QNAP Systems Inc. myQNAPcloud Link versions prior to 2.2.21 on QuTS hero h4.5.2 QNAP Systems Inc. myQNAPcloud Link versions prior to 2.2.21 on QuTScloud c4.5.4...

CVE-2019-7181

Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program...

CVE-2019-7181

Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program...

CVE-2019-7181

Buffer overflow in QNAP myQNAPcloud Connect before or equal to 1.3.3.0925 allows remote attackers to crash the program (denial of service). CVSSv3 base 7.5 HIGH (Network, no auth, no user interaction). Affected product: myQNAPcloud Connect; vulnerable component/flow not detailed in initial docs b...

CVE-2019-7181: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program...

PT-2019-18457

Name of the Vulnerable Software and Affected Versions myQNAPcloud Connect versions 1.3.3.0925 and earlier Description The issue allows remote attackers to crash the program due to a Buffer Overflow. Recommendations For myQNAPcloud Connect versions 1.3.3.0925 and earlier, update to a version later...

QNAP Systems QNAP myQNAPcloud Connect Denial of Service Vulnerability

QNAP Systems QNAP myQNAPcloud Connect is an application for connecting, sharing and managing QNAP NAS files from China Weilian QNAP Systems. A security vulnerability exists in QNAP Systems QNAP myQNAPcloud Connect version 1.3.4.0317. An attacker could exploit the vulnerability to cause a denial o...

QNAP myQNAPcloud Connect 1.3.4.0317 - UsernamePassword Denial of Service

QNAP myQNAPcloud Connect 1.3.4.0317 - UsernamePassword Denial of Service !/usr/bin/python Exploit Title: QNAP myQNAPcloud Connect "Username/Password" DOS Date: 19/04/2019 Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: https://www.qnap.com Version: 1.3.4.0317 and below are...

QNAP myQNAPcloud Connect 1.3.4.0317 - 'Username/Password' Denial of Service

!/usr/bin/python Exploit Title: QNAP myQNAPcloud Connect "Username/Password" DOS Date: 19/04/2019 Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: https://www.qnap.com Version: 1.3.4.0317 and below are vulnerable Software Link: https://www.qnap.com/en/utilities/essentials Contact...