EUVD-2025-210101

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the...

Logic Flaw Vulnerability in DS-A80624S at Hangzhou Hikvision Digital Technology Co.

The DS-A80624S is a 24-drive network storage device from Hikvision. A logic flaw vulnerability exists in the DS-A80624S of Hangzhou Hikvision Digital Technology Co. that can be exploited by an attacker to obtain sensitive information...

QNAP Systems QTS Operating System Command Injection Vulnerability

QNAP Systems QTS is an operating system used by QNAP Systems, an entry to mid-level QNAP NAS. A security vulnerability exists in QNAP Systems QTS that stems from an operating system command injection vulnerability...

SUSE CVE-2017-10700

In the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can execute arbitrary system commands as the root user of the NAS application...

VulnCheck KEV: CVE-2019-7193

QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system...

QNAP NAS 缓冲区错误漏洞

QNAP NAS is an accessible and fast storage solution from QNAP China. A security vulnerability exists in QNAP NAS that stems from a stack buffer overflow vulnerability that affects QNAP NAS running the Multimedia Console and can be exploited by an attacker to execute arbitrary code...

Command Execution Vulnerability in D-Link ShareCenter DNS-320 and ShareCenter DNS-325

D-Link ShareCenter DNS-320 is a Gigabit network storage device from Taiwan AUO Group.D-Link ShareCenter DNS-325 is a network storage device from Taiwan AUO Group. A command execution vulnerability exists in the D-Link ShareCenter DNS-320 and ShareCenter DNS-325. An attacker can exploit the...

Drobo 5N2 Improper Access Control Vulnerability (CNVD-2019-05930)

The Drobo 5N2 NAS is a networked storage appliance NAS from Drobo, USA. The device features data sharing, data backup, remote access and disaster recovery. An access control error vulnerability exists in the /mysql/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115. An attacker cou...