EUVD-2018-1533

Malware in sbrugna...

EUVD-2021-15459

Malware in sbrugna...

EUVD-2018-1534

Malware in sbrugna...

EUVD-2021-15463

Malware in sbrugna...

CVE-2021-28803

This issue affects: QNAP Systems Inc. Q'center versions prior to 1.11.1004...

CVE-2021-28803

CVE-2021-28803 is a Stored XSS vulnerability in QNAP QCenter, affecting versions prior to 1.11.1004. The issue stems from insufficient protection of user data, enabling an attacker to inject and execute client-side script within QCenter. The connected CNVD/CNNVD/CCE-style records describe the sam...

CVE-2021-28807 Post-Authentication Reflected XSS Vulnerability in Q'center

A post-authentication reflected XSS vulnerability has been reported to affect QNAP NAS running Q’center. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already fixed this vulnerability in the following versions of Q’center: QTS 4.5.3: Q’center...

Cross site scripting

Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724...

Cross site scripting

Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723...

CVE-2018-0723

Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724...

CVE-2018-0724

Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723...

CVE-2018-0724

Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723...

CVE-2018-0724

CVE-2018-0724 is an XSS vulnerability in QNAP Q'center Virtual Appliance 1.8.1014 and earlier. The issue allows remote attackers to inject JavaScript into the vulnerable application. The affected product is QNAP Q'center Virtual Appliance; no root cause, impact, affected versions beyond those sta...

CVE-2018-0723

Affected software : QNAP Q'center Virtual Appliance (version 1.8.1014 and earlier). Vulnerability : Cross-site scripting (XSS) vulnerability that could allow remote attackers to inject JavaScript code into the compromised application. Root cause/tech detail : Not explicitly detailed in the provid...

CVE-2018-0723

Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724...

CVE-2018-0709

Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands...

CVE-2018-0706

Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access sensitive information...

Command injection

Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands...

Command injection

Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands...

Command injection

Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands...